Correct five import names that do not resolve upstream (T04 audit)
InfoTechCanon re-verified this boundary against its enlarged ownership index under INFO-WP-0027-T04. The original manifest was verified by file hash, which every entry passed; nothing checked that the named concept exists in the named file. Five of twelve did not. Artifact becomes CanonArtifact, which is what Core defines; bare Artifact now resolves to the DevSecOps build artifact, a different concept. Relationship becomes RelationshipDefinition, since the identity model owns Relationship as its actor-linking taxonomy. Ownership moves to the Organization Model, which the kernel map names as its owner. AccessOperations becomes Operation, the upstream name. PrincipalType stops being an import: the identity model does not define it, and it is SecurityCanon's own classification of the imported Principal. Eleven imports remain, no concept is contested, and no semantic disposition changes. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3588@bnt-lap001 Assistant-Session: 24b80f66-e5a7-4e61-99fe-2d422e6d17da
This commit is contained in:
parent
c07d3c546d
commit
e159fe7a1b
3 changed files with 37 additions and 18 deletions
|
|
@ -18,15 +18,15 @@ Pinned import source: info-tech-canon at
|
|||
|
||||
| Concept | Owning canon | Owning artifact | Direction | Note |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| Artifact | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. |
|
||||
| Ownership | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. |
|
||||
| Relationship | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. |
|
||||
| CanonArtifact | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. Corrected from `Artifact` by T04: Core defines `CanonArtifact`, and bare `Artifact` resolves to the DevSecOps build artifact. |
|
||||
| Ownership | InfoTechCanon | Organization Model | ITC → SC (import) | Owner corrected by T04; the kernel map assigns Ownership and Stewardship to Organization. |
|
||||
| RelationshipDefinition | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Corrected from `Relationship` by T04, which the identity model owns as its actor-linking taxonomy. |
|
||||
| Actor | InfoTechCanon | Organization Model | ITC → SC (import) | SC does not redefine it; its on-behalf-of dimension is `AuthorityContext`. |
|
||||
| Subject | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | Bound as "the access-control view of an actor". SC references, never redefines. |
|
||||
| Principal | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | |
|
||||
| PrincipalType | InfoTechCanon | Identity Model | ITC → SC (import) | The identity model is a shared root, not security terminology. |
|
||||
| PrincipalType | SecurityCanon | sec-authority:ModeOfAuthority | SC-owned | Corrected by T04: the identity model does not define this name. It is SecurityCanon's classification of the imported `Principal`. |
|
||||
| Scope | InfoTechCanon | Identity Model (ITC-IDENT 2.10) | ITC → SC (import) | The general boundary. ITC-ACCESS `ResourceScope` (11.8) refines it; CARING 21 ranges over it. Owner corrected by R-1. |
|
||||
| AccessOperations | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | Orthogonal to Auth Mode: `read + USE` and `read + OBSERVE` share an operation. |
|
||||
| Operation | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | The upstream name; `AccessOperations` was a SecurityCanon compaction. Orthogonal to Auth Mode: `read + USE` and `read + OBSERVE` share an operation. |
|
||||
| Purpose | InfoTechCanon | Purpose and Demand extension | ITC → SC (import) | Resolves to the extension, not to a SecurityCanon definition. |
|
||||
| Authority | InfoTechCanon | Organization Model (ITC-ORG 10.17) | ITC → SC (import) | The recognized right itself. AuthMode qualifies its exercise and never redefines it. Added by T03 (F-1). |
|
||||
| Environment | InfoTechCanon | Landscape Model | ITC → SC (import) | Owner corrected again 2026-09-20: the kernel map concept-owner table names Landscape, and CARING 21.5 enumerates values for it. The SecurityCanon `RECOVERY` value is an upstream proposal. |
|
||||
|
|
@ -107,6 +107,18 @@ with SECURITY-WP-0001-T05, the migration handoff, having been cancelled.
|
|||
`Scope`; a re-verification against the enlarged InfoTechCanon ownership index
|
||||
is owed, and InfoTechCanon tracks it as INFO-WP-0027-T04.
|
||||
|
||||
### Amendment — 2026-09-20, name-resolution audit (T04)
|
||||
|
||||
InfoTechCanon re-verified this boundary against its enlarged ownership index
|
||||
under INFO-WP-0027-T04 and found that five of the twelve declared imports named
|
||||
concepts their pinned artifact does not define. The original review verified the
|
||||
manifest by file hash, which every entry passed, and never checked that the named
|
||||
concept exists in the named file. `Artifact` became `CanonArtifact`,
|
||||
`Relationship` became `RelationshipDefinition`, `Ownership` moved to the
|
||||
Organization Model, `AccessOperations` became `Operation`, and `PrincipalType`
|
||||
moved from an import to a SecurityCanon-owned dimension. Eleven imports remain.
|
||||
No concept is contested and no semantic disposition changes.
|
||||
|
||||
## Residuals
|
||||
|
||||
- **R-1 — resolved 2026-09-20 in InfoTechCanon (ADHOC-2026-09-20-T01).** The
|
||||
|
|
|
|||
|
|
@ -45,7 +45,7 @@ owned:
|
|||
orthogonal_to: AuthMode
|
||||
|
||||
- id: Environment
|
||||
owner: InfoTechCanonCaringAccessGovernanceStandard
|
||||
owner: InfoTechCanonLandscapeModel
|
||||
definition: The environment in which the authority applies.
|
||||
values: [DEVELOPMENT, TEST, STAGING, PRODUCTION, RECOVERY]
|
||||
note: Especially significant for CONSTRUCT authority.
|
||||
|
|
@ -87,12 +87,17 @@ imported:
|
|||
owner: InfoTechCanonAccessControlModel
|
||||
- id: AccessOperations
|
||||
owner: InfoTechCanonAccessControlModel
|
||||
note: >-
|
||||
Ranges over ITC-ACCESS Operation, which is the upstream name; imports.json
|
||||
pins Operation accordingly.
|
||||
note: read, write, execute, delete, approve — orthogonal to AuthMode.
|
||||
- id: Purpose
|
||||
owner: InfoTechCanonPurposesExtension
|
||||
note: Named in the Access Situation tuple; defined upstream, not here.
|
||||
- id: PrincipalType
|
||||
owner: InfoTechCanonIdentityModel
|
||||
note: >-
|
||||
SecurityCanon's own classification of the imported ITC-ACCESS Principal.
|
||||
Corrected 2026-09-20: the identity model does not define this name.
|
||||
values: [HUMAN, WORKLOAD, SERVICE, AGENT, CONTROLLER, DEVICE]
|
||||
constraint: Principal type must not be encoded into the Auth Mode taxonomy.
|
||||
|
||||
|
|
|
|||
|
|
@ -5,17 +5,17 @@
|
|||
"source_repository": "info-tech-canon",
|
||||
"source_commit": "e1f98da015f32545254747c8e9f59b780c423d5b",
|
||||
"pinned_at": "2026-09-20",
|
||||
"note": "Concepts imported, not redefined. SHA-256 values are of the Git blob at source_commit. Amended 2026-09-20 by SECURITY-WP-0001-T03: Authority and Environment added as declared imports. Environment re-pointed 2026-09-20 from CARING to the Landscape Model, which the kernel map names as its owner.",
|
||||
"note": "Concepts imported, not redefined. SHA-256 values are of the Git blob at source_commit. Amended 2026-09-20 by SECURITY-WP-0001-T03: Authority and Environment added as declared imports. Environment re-pointed 2026-09-20 from CARING to the Landscape Model, which the kernel map names as its owner. Name-resolution audit 2026-09-20 (InfoTechCanon INFO-WP-0027-T04): five of twelve imports named concepts their pinned artifact does not define.",
|
||||
"imports": [
|
||||
{
|
||||
"artifact": "InfoTechCanonCore",
|
||||
"path": "infospace/kernel/InfoTechCanonCore.md",
|
||||
"sha256": "74661caea603876f71b4258963bd11a338cba63ef57a00fb8c41e2e51d07742c",
|
||||
"concepts": [
|
||||
"Artifact",
|
||||
"Ownership",
|
||||
"Relationship"
|
||||
]
|
||||
"CanonArtifact",
|
||||
"RelationshipDefinition"
|
||||
],
|
||||
"note": "Core owns CanonArtifact, any identifiable unit of canon content, and RelationshipDefinition. Corrected 2026-09-20: the earlier manifest named Artifact and Relationship, which Core does not define."
|
||||
},
|
||||
{
|
||||
"artifact": "InfoTechCanonAccessControlModel",
|
||||
|
|
@ -24,18 +24,18 @@
|
|||
"concepts": [
|
||||
"Subject",
|
||||
"Principal",
|
||||
"AccessOperations"
|
||||
]
|
||||
"Operation"
|
||||
],
|
||||
"note": "Operation replaces the earlier AccessOperations, which was a SecurityCanon compaction of the ITC-ACCESS name."
|
||||
},
|
||||
{
|
||||
"artifact": "InfoTechCanonIdentityModel",
|
||||
"path": "infospace/models/identity/InfoTechCanonIdentityModel.md",
|
||||
"sha256": "20bc844d9de07041c40009cc5e3d6eeb42aeb7adcbb86b0194d4b2517aa23f32",
|
||||
"concepts": [
|
||||
"PrincipalType",
|
||||
"Scope"
|
||||
],
|
||||
"note": "Scope is the general boundary, ITC-IDENT 2.10. ITC-ACCESS ResourceScope 11.8 refines it."
|
||||
"note": "Scope is the general boundary, ITC-IDENT 2.10. PrincipalType was removed 2026-09-20: the name appears nowhere in the identity model, and the dimension is SecurityCanon's own classification of the imported Principal."
|
||||
},
|
||||
{
|
||||
"artifact": "InfoTechCanonOrganizationModel",
|
||||
|
|
@ -43,8 +43,10 @@
|
|||
"sha256": "bdb1277e78c3a0802f8ea08e058be093452390e61ca0f7e979051e48680fe6c3",
|
||||
"concepts": [
|
||||
"Actor",
|
||||
"Authority"
|
||||
]
|
||||
"Authority",
|
||||
"Ownership"
|
||||
],
|
||||
"note": "Ownership moved here 2026-09-20; the kernel map assigns Ownership and Stewardship to Organization, not Core."
|
||||
},
|
||||
{
|
||||
"artifact": "InfoTechCanonPurposeDemandExtension",
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue