diff --git a/infospace/interfaces/concept-placement.md b/infospace/interfaces/concept-placement.md index 286b89c..1b79721 100644 --- a/infospace/interfaces/concept-placement.md +++ b/infospace/interfaces/concept-placement.md @@ -18,15 +18,15 @@ Pinned import source: info-tech-canon at | Concept | Owning canon | Owning artifact | Direction | Note | | --- | --- | --- | --- | --- | -| Artifact | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. | -| Ownership | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. | -| Relationship | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. | +| CanonArtifact | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Shared root. Corrected from `Artifact` by T04: Core defines `CanonArtifact`, and bare `Artifact` resolves to the DevSecOps build artifact. | +| Ownership | InfoTechCanon | Organization Model | ITC → SC (import) | Owner corrected by T04; the kernel map assigns Ownership and Stewardship to Organization. | +| RelationshipDefinition | InfoTechCanon | InfoTechCanonCore | ITC → SC (import) | Corrected from `Relationship` by T04, which the identity model owns as its actor-linking taxonomy. | | Actor | InfoTechCanon | Organization Model | ITC → SC (import) | SC does not redefine it; its on-behalf-of dimension is `AuthorityContext`. | | Subject | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | Bound as "the access-control view of an actor". SC references, never redefines. | | Principal | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | | -| PrincipalType | InfoTechCanon | Identity Model | ITC → SC (import) | The identity model is a shared root, not security terminology. | +| PrincipalType | SecurityCanon | sec-authority:ModeOfAuthority | SC-owned | Corrected by T04: the identity model does not define this name. It is SecurityCanon's classification of the imported `Principal`. | | Scope | InfoTechCanon | Identity Model (ITC-IDENT 2.10) | ITC → SC (import) | The general boundary. ITC-ACCESS `ResourceScope` (11.8) refines it; CARING 21 ranges over it. Owner corrected by R-1. | -| AccessOperations | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | Orthogonal to Auth Mode: `read + USE` and `read + OBSERVE` share an operation. | +| Operation | InfoTechCanon | ITC-ACCESS | ITC → SC (import) | The upstream name; `AccessOperations` was a SecurityCanon compaction. Orthogonal to Auth Mode: `read + USE` and `read + OBSERVE` share an operation. | | Purpose | InfoTechCanon | Purpose and Demand extension | ITC → SC (import) | Resolves to the extension, not to a SecurityCanon definition. | | Authority | InfoTechCanon | Organization Model (ITC-ORG 10.17) | ITC → SC (import) | The recognized right itself. AuthMode qualifies its exercise and never redefines it. Added by T03 (F-1). | | Environment | InfoTechCanon | Landscape Model | ITC → SC (import) | Owner corrected again 2026-09-20: the kernel map concept-owner table names Landscape, and CARING 21.5 enumerates values for it. The SecurityCanon `RECOVERY` value is an upstream proposal. | @@ -107,6 +107,18 @@ with SECURITY-WP-0001-T05, the migration handoff, having been cancelled. `Scope`; a re-verification against the enlarged InfoTechCanon ownership index is owed, and InfoTechCanon tracks it as INFO-WP-0027-T04. +### Amendment — 2026-09-20, name-resolution audit (T04) + +InfoTechCanon re-verified this boundary against its enlarged ownership index +under INFO-WP-0027-T04 and found that five of the twelve declared imports named +concepts their pinned artifact does not define. The original review verified the +manifest by file hash, which every entry passed, and never checked that the named +concept exists in the named file. `Artifact` became `CanonArtifact`, +`Relationship` became `RelationshipDefinition`, `Ownership` moved to the +Organization Model, `AccessOperations` became `Operation`, and `PrincipalType` +moved from an import to a SecurityCanon-owned dimension. Eleven imports remain. +No concept is contested and no semantic disposition changes. + ## Residuals - **R-1 — resolved 2026-09-20 in InfoTechCanon (ADHOC-2026-09-20-T01).** The diff --git a/infospace/vocabulary/mode-of-authority/dimensions.yaml b/infospace/vocabulary/mode-of-authority/dimensions.yaml index 3b247fe..16ac5bd 100644 --- a/infospace/vocabulary/mode-of-authority/dimensions.yaml +++ b/infospace/vocabulary/mode-of-authority/dimensions.yaml @@ -45,7 +45,7 @@ owned: orthogonal_to: AuthMode - id: Environment - owner: InfoTechCanonCaringAccessGovernanceStandard + owner: InfoTechCanonLandscapeModel definition: The environment in which the authority applies. values: [DEVELOPMENT, TEST, STAGING, PRODUCTION, RECOVERY] note: Especially significant for CONSTRUCT authority. @@ -87,12 +87,17 @@ imported: owner: InfoTechCanonAccessControlModel - id: AccessOperations owner: InfoTechCanonAccessControlModel + note: >- + Ranges over ITC-ACCESS Operation, which is the upstream name; imports.json + pins Operation accordingly. note: read, write, execute, delete, approve — orthogonal to AuthMode. - id: Purpose owner: InfoTechCanonPurposesExtension note: Named in the Access Situation tuple; defined upstream, not here. - id: PrincipalType - owner: InfoTechCanonIdentityModel + note: >- + SecurityCanon's own classification of the imported ITC-ACCESS Principal. + Corrected 2026-09-20: the identity model does not define this name. values: [HUMAN, WORKLOAD, SERVICE, AGENT, CONTROLLER, DEVICE] constraint: Principal type must not be encoded into the Auth Mode taxonomy. diff --git a/infospace/vocabulary/mode-of-authority/imports.json b/infospace/vocabulary/mode-of-authority/imports.json index 4d77ece..7c05638 100644 --- a/infospace/vocabulary/mode-of-authority/imports.json +++ b/infospace/vocabulary/mode-of-authority/imports.json @@ -5,17 +5,17 @@ "source_repository": "info-tech-canon", "source_commit": "e1f98da015f32545254747c8e9f59b780c423d5b", "pinned_at": "2026-09-20", - "note": "Concepts imported, not redefined. SHA-256 values are of the Git blob at source_commit. Amended 2026-09-20 by SECURITY-WP-0001-T03: Authority and Environment added as declared imports. Environment re-pointed 2026-09-20 from CARING to the Landscape Model, which the kernel map names as its owner.", + "note": "Concepts imported, not redefined. SHA-256 values are of the Git blob at source_commit. Amended 2026-09-20 by SECURITY-WP-0001-T03: Authority and Environment added as declared imports. Environment re-pointed 2026-09-20 from CARING to the Landscape Model, which the kernel map names as its owner. Name-resolution audit 2026-09-20 (InfoTechCanon INFO-WP-0027-T04): five of twelve imports named concepts their pinned artifact does not define.", "imports": [ { "artifact": "InfoTechCanonCore", "path": "infospace/kernel/InfoTechCanonCore.md", "sha256": "74661caea603876f71b4258963bd11a338cba63ef57a00fb8c41e2e51d07742c", "concepts": [ - "Artifact", - "Ownership", - "Relationship" - ] + "CanonArtifact", + "RelationshipDefinition" + ], + "note": "Core owns CanonArtifact, any identifiable unit of canon content, and RelationshipDefinition. Corrected 2026-09-20: the earlier manifest named Artifact and Relationship, which Core does not define." }, { "artifact": "InfoTechCanonAccessControlModel", @@ -24,18 +24,18 @@ "concepts": [ "Subject", "Principal", - "AccessOperations" - ] + "Operation" + ], + "note": "Operation replaces the earlier AccessOperations, which was a SecurityCanon compaction of the ITC-ACCESS name." }, { "artifact": "InfoTechCanonIdentityModel", "path": "infospace/models/identity/InfoTechCanonIdentityModel.md", "sha256": "20bc844d9de07041c40009cc5e3d6eeb42aeb7adcbb86b0194d4b2517aa23f32", "concepts": [ - "PrincipalType", "Scope" ], - "note": "Scope is the general boundary, ITC-IDENT 2.10. ITC-ACCESS ResourceScope 11.8 refines it." + "note": "Scope is the general boundary, ITC-IDENT 2.10. PrincipalType was removed 2026-09-20: the name appears nowhere in the identity model, and the dimension is SecurityCanon's own classification of the imported Principal." }, { "artifact": "InfoTechCanonOrganizationModel", @@ -43,8 +43,10 @@ "sha256": "bdb1277e78c3a0802f8ea08e058be093452390e61ca0f7e979051e48680fe6c3", "concepts": [ "Actor", - "Authority" - ] + "Authority", + "Ownership" + ], + "note": "Ownership moved here 2026-09-20; the kernel map assigns Ownership and Stewardship to Organization, not Core." }, { "artifact": "InfoTechCanonPurposeDemandExtension",