coulomb/security-canon
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record scoped Emergent knowledge owner review

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc
This commit is contained in:
tegwick 2026-10-03 17:34:43 +02:00
parent bbd4433254
commit 9320e6569f
5 changed files with 160 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

18
SCOPE.md
View file

@ -1,15 +1,14 @@
# SCOPE
Reviewed: 2026-09-20 (Europe/Berlin), after [SEC-ADR-001](docs/adr-001-securitycanon-boundary.md).
Reviewed: 2026-10-03 (Europe/Berlin), following the completed vocabulary work and [SEC-ADR-001](docs/adr-001-securitycanon-boundary.md).
## Current repository scope
Bootstrap. The repository carries governance files — INTENT, SCOPE, AGENTS,
repo classification — the [SEC-ADR-001](docs/adr-001-securitycanon-boundary.md)
boundary decision, the Mode of Authority review in `history/`, and one active
workplan. The only content is the Mode of Authority v0.1 research draft, not yet
promoted into a canon artifact. There is no service code, and by decision there
will be none.
The repository publishes Mode of Authority draft 0.2.0 vocabulary artifacts,
mode/dimension catalogs, declared imports, a federation interface, cross-canon
mappings and orientation surfaces. SECURITY-WP-0001 is finished. The retained
v0.1 research draft is historical, not the current orientation artifact. There
is no service code; SEC-ADR-001 keeps validation in InfoTechCanon's service.
## Ownership and boundaries
@ -25,9 +24,10 @@ Out of scope, with the owner named:
- any CLI, HTTP API, or validation service — **InfoTechCanon's service surface**,
by SEC-ADR-001 D4; integration is via the canon-federation interface card
- security architecture and standards of record for the estate — NetKingdom
- authorization decisions — flex-auth
- authorization decisions — access-engine (runtime/product flex-auth)
- login, OIDC, MFA — key-cape / Keycloak
- secret custody and credential issuance — OpenBao, ops-warden
- credential lifecycle — secrets-engine over OpenBao custody; operational
routing and SSH certificates — ops-warden
- adversarial evidence and findings practice — whitehat-security
- shared artifact/ownership/mapping/profile mechanisms — InfoTechCanon
- consumer runtime state, enforcement, observation, and adoption evidence — the consumers