coulomb/security-canon
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Othogonal vocabulary and canonical model for security related concepts.
41 commits 1 branch 0 tags 306 KiB
Find a file
Exact
tegwick f844b15b9a Record hub identifiers for the NetKingdom service identity review 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
2026-10-24 23:52:14 +02:00
.repo-manager Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
decisions Record hub identifiers for SEC-DSM. 2026-10-11 23:42:45 +02:00
docs Review NetKingdom Service Identity and Privilege mode readings and SEC-DSM citations 2026-10-24 23:49:43 +02:00
history Assess Mode of Authority canon and re-order SECURITY-WP-0001 2026-09-20 21:01:32 +02:00
infospace Adopt SEC-DSM 1.0 as the secrets-practice standard. 2026-10-11 23:41:30 +02:00
intakes Record hub identifiers for the NetKingdom service identity review 2026-10-24 23:52:14 +02:00
registry docs(reuse): establish reviewed NetKingdom security capabilities 2026-10-14 06:45:57 +02:00
research Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
workplans Record hub identifiers for the NetKingdom service identity review 2026-10-24 23:52:14 +02:00
.custodian-brief.md Record hub identifiers for SEC-DSM. 2026-10-11 23:42:45 +02:00
.repo-classification.yaml Bootstrap security-canon governance and extraction plan 2026-09-20 20:32:05 +02:00
AGENTS.md Fold GOAL.md into INTENT.md for prj-flavor conformance 2026-09-20 20:33:56 +02:00
INTENT.md Record scoped Emergent knowledge owner review 2026-10-03 17:34:43 +02:00
README.md Adopt SEC-DSM 1.0 as the secrets-practice standard. 2026-10-11 23:41:30 +02:00
SCOPE.md Adopt SEC-DSM 1.0 as the secrets-practice standard. 2026-10-11 23:41:30 +02:00
WORK-RECORDS.md Record hub identifiers for the NetKingdom service identity review 2026-10-24 23:52:14 +02:00

README.md

security-canon

Orthogonal vocabulary and canonical model for security-related concepts.

SecurityCanon extends InfoTechCanon with a focused security domain model, in the same architectural role that CommerceCanon holds for commercial terminology and InterfaceCanon for interface terminology.

Its subject is architecture, not implementation: the relationships in which authority is exercised, described before and independently of the mechanisms that enforce them. Its first contribution is the Mode of Authority vocabulary — seven auth modes (USE, OBSERVE, OPERATE, ADMINISTER, GOVERN, CONSTRUCT, SOVEREIGN) read relative to a scope. CARING and the access-control and identity models stay in InfoTechCanon, at the implementation layer and as shared roots; see SEC-ADR-001.
Flavor project
Domain infotech
Workplan prefix SECURITY-WP-
Upstream canon InfoTechCanon
Service surface none — reuses InfoTechCanon's

Start with INTENT.md and SCOPE.md. Agent instructions are in AGENTS.md; active work is in workplans/.

Document What it holds
SEC-ADR-001 the boundary decision — what stays upstream, and why
SEC-ADR-002 the terminology separation — why AuthorityContext, not Subject
Mode of Authority assessment review of the v0.1 draft and the proposed canon structure
Actor/Subject implications the one open terminology question, analysed

Status

Draft vocabulary, stable secrets standard. The Mode of Authority vocabulary is published as a canon artifact with machine-readable modes and dimensions; the v0.1 research draft is retained in research/ as provenance. Stable promotion of that vocabulary needs reviewed mappings and concrete consumer evidence. See SECURITY-WP-0001.

The DevOps Secrets Management Standard (SEC-DSM 1.0.0) is the normative secrets-practice guide. Gate House teaches it; ops-mason and ops-warden follow it. See SECURITY-WP-0002.

Orientation

Start here For
Vocabulary card the seven modes and the notation, on one page
Mode of Authority the canon artifact
DevOps Secrets Management Standard the secrets-practice standard (SEC-DSM v1.0)
Disambiguation operator or OPERATE? role, plane, or mode?
Mapping to InfoTechCanon how it relates to the access-control model and CARING