From 7e2de19dc6bb135b80cfbc2d8c2bda5b2aed38ec Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 20 Sep 2026 23:54:12 +0200 Subject: [PATCH] Close the section 32 generalisation as accepted upstream InfoTechCanon reviewed the demand signal separately and accepted option B as INFO-DEC-2026-001: the CARING section 32 role set now applies wherever a subject's access is exercised through another party, rather than to non-human subjects only. CARING moves to canon version 0.4.0-RC2-itc2. The change is additive and no SecurityCanon declaration moves. The blank cell in the mapping table stands: InfoTechCanon's access-control model still has no on-behalf-of relation. Co-Authored-By: Claude Opus 5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 3588@bnt-lap001 Assistant-Session: 24b80f66-e5a7-4e61-99fe-2d422e6d17da --- infospace/interfaces/concept-placement.md | 11 ++++++++--- .../mappings/mode-of-authority-to-infotechcanon.md | 8 +++++--- 2 files changed, 13 insertions(+), 6 deletions(-) diff --git a/infospace/interfaces/concept-placement.md b/infospace/interfaces/concept-placement.md index 1b79721..30b0600 100644 --- a/infospace/interfaces/concept-placement.md +++ b/infospace/interfaces/concept-placement.md @@ -135,6 +135,11 @@ No concept is contested and no semantic disposition changes. word, two live InfoTechCanon senses: a right held by an actor (ITC-ORG 10.17) and an external body compelling disclosure (CARING 10.7). Disambiguation is InfoTechCanon-internal and is not made here. -- **R-2 — CARING section 32 generalisation.** Referenced by SecurityCanon, - explicitly not accepted by the InfoTechCanon-side boundary review. It remains - an InfoTechCanon proposal requiring its own review. +- **R-2 — resolved 2026-09-20 in InfoTechCanon (INFO-DEC-2026-001).** The + section 32 role set now applies wherever a subject's access is exercised + through another party, not to non-human subjects only. Option B from the + implications note was accepted narrowly: section 32.1 stays agent-stated, no + role is renamed, and CARING moves to canon version 0.4.0-RC2-itc2. Additive + and non-breaking; no SecurityCanon declaration changes. The blank cell in the + mapping table stands — InfoTechCanon's access-control model still has no + on-behalf-of relation. diff --git a/infospace/mappings/mode-of-authority-to-infotechcanon.md b/infospace/mappings/mode-of-authority-to-infotechcanon.md index ce20d3c..24c522c 100644 --- a/infospace/mappings/mode-of-authority-to-infotechcanon.md +++ b/infospace/mappings/mode-of-authority-to-infotechcanon.md @@ -112,9 +112,11 @@ either. ## 6. Open -- Whether CARING generalises its §32 role set beyond non-human subjects. Additive - and non-breaking if adopted, but it is InfoTechCanon's to accept — raise as a - demand signal there, not as a change here. Analysis in the +- ~~Whether CARING generalises its §32 role set beyond non-human subjects.~~ + **Closed 2026-09-20.** InfoTechCanon accepted option B as INFO-DEC-2026-001: + the role set now applies wherever access is exercised through another party, + CARING is at canon version 0.4.0-RC2-itc2, and the change is additive. The + mapping below is unaffected. Analysis in the [implications note](../../docs/260920-actor-subject-implications.md) §4. - Whether `AuthMode` becomes a machine-readable authorization attribute consumable by CARING descriptors (v0.1 draft Q7).