coulomb/security-canon
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Othogonal vocabulary and canonical model for security related concepts.
24 commits 1 branch 0 tags 306 KiB
Find a file
tegwick 2f22ddf7d3 Correct the owner of Scope to the identity model (R-1) 
The placement record named ITC-ACCESS the owner of Scope and imports.json pinned
it there. The corpus says otherwise: ITC-IDENT section 2.10 defines Scope as the
general boundary, and ITC-ACCESS section 11.8 ResourceScope already declares
itself a refinement of it rather than a competing definition. The second use R-1
was actually reaching for is CARING section 21, resolved upstream in
InfoTechCanon by ADHOC-2026-09-20-T01.

Scope now imports from InfoTechCanonIdentityModel. No hash changes: both files
were already pinned at the same source commit.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3588@bnt-lap001
Assistant-Session: 24b80f66-e5a7-4e61-99fe-2d422e6d17da
2026-09-20 22:41:32 +02:00
.repo-manager Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
decisions Decide concept placement across the canon boundary (T02) 2026-09-20 22:33:46 +02:00
docs Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
history Assess Mode of Authority canon and re-order SECURITY-WP-0001 2026-09-20 21:01:32 +02:00
infospace Correct the owner of Scope to the identity model (R-1) 2026-09-20 22:41:32 +02:00
research Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
workplans Survey where InfoTechCanon already speaks about authority (T03) 2026-09-20 22:39:21 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-09-20 22:40:17 +02:00
.repo-classification.yaml Bootstrap security-canon governance and extraction plan 2026-09-20 20:32:05 +02:00
AGENTS.md Fold GOAL.md into INTENT.md for prj-flavor conformance 2026-09-20 20:33:56 +02:00
INTENT.md Re-scope SecurityCanon to architecture-layer vocabulary (SEC-ADR-001) 2026-09-20 21:34:45 +02:00
README.md Promote Mode of Authority to a canon artifact (T06, T07) 2026-09-20 21:43:11 +02:00
SCOPE.md Re-scope SecurityCanon to architecture-layer vocabulary (SEC-ADR-001) 2026-09-20 21:34:45 +02:00
WORK-RECORDS.md Regenerate work records 2026-09-20 22:40:33 +02:00

README.md

security-canon

Orthogonal vocabulary and canonical model for security-related concepts.

SecurityCanon extends InfoTechCanon with a focused security domain model, in the same architectural role that CommerceCanon holds for commercial terminology and InterfaceCanon for interface terminology.

Its subject is architecture, not implementation: the relationships in which authority is exercised, described before and independently of the mechanisms that enforce them. Its first contribution is the Mode of Authority vocabulary — seven auth modes (USE, OBSERVE, OPERATE, ADMINISTER, GOVERN, CONSTRUCT, SOVEREIGN) read relative to a scope. CARING and the access-control and identity models stay in InfoTechCanon, at the implementation layer and as shared roots; see SEC-ADR-001.
Flavor project
Domain infotech
Workplan prefix SECURITY-WP-
Upstream canon InfoTechCanon
Service surface none — reuses InfoTechCanon's

Start with INTENT.md and SCOPE.md. Agent instructions are in AGENTS.md; active work is in workplans/.

Document What it holds
SEC-ADR-001 the boundary decision — what stays upstream, and why
SEC-ADR-002 the terminology separation — why AuthorityContext, not Subject
Mode of Authority assessment review of the v0.1 draft and the proposed canon structure
Actor/Subject implications the one open terminology question, analysed

Status

Draft. The Mode of Authority vocabulary is published as a canon artifact with machine-readable modes and dimensions; the v0.1 research draft is retained in research/ as provenance. Stable promotion needs reviewed mappings and concrete consumer evidence. See SECURITY-WP-0001.

Orientation

Start here For
Vocabulary card the seven modes and the notation, on one page
Mode of Authority the canon artifact
Disambiguation operator or OPERATE? role, plane, or mode?
Mapping to InfoTechCanon how it relates to the access-control model and CARING