docs: verify review publication and route hosted access gate
This commit is contained in:
codex
parent
a3b894eb42
commit
02ec62ca61
7 changed files with 2591 additions and 5 deletions
|
|
@ -37,6 +37,24 @@
|
|||
"evidence": "32/70 hosted; 38 registrations pending caller access; seven also require private-source admission"
|
||||
}
|
||||
],
|
||||
"goal_status": "active",
|
||||
"remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity."
|
||||
"remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity.",
|
||||
"checked_at": "2026-10-14T09:04:58.199989+00:00",
|
||||
"owner_gate": "5cd22087-e5d8-5d5e-a252-610a6ac13653",
|
||||
"fresh_hosted_evidence": "hosted-current-verification.json",
|
||||
"blocked_turn_audit": {
|
||||
"same_blocker": "Owner-provisioned hub write access and seven private-source admissions remain unavailable/unverified",
|
||||
"consecutive_goal_turns": 3,
|
||||
"turns": [
|
||||
"Original review turn: Warden/OpenBao 403; no helper execution",
|
||||
"User choice turn: Arrange scoped owner access recorded; no provisioning evidence",
|
||||
"Continuation: inbox empty; fresh hosted32/70; owner setup confirmation still pending"
|
||||
],
|
||||
"other_work": "Report publication recovered and verified with exact tree parity; final receipt/workplan publication and sync follow before goal status update."
|
||||
},
|
||||
"publication": {
|
||||
"complete": true,
|
||||
"commit": "a3b894eb42c177e97fd8885afce07b21ca36d416",
|
||||
"receipt": "publication-batches-receipt.json",
|
||||
"original_backup": "cust-wp-0081-original-unpublished"
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,48 @@
|
|||
{
|
||||
"checked_at": "2026-10-14T07:46:03.943569+00:00",
|
||||
"matched": 32,
|
||||
"expected": 70,
|
||||
"missing": [
|
||||
"capability.execution.openweight-rein",
|
||||
"capability.execution.profile-harness",
|
||||
"capability.execution.sandbox-provision",
|
||||
"capability.execution.scheduled-agent-rein",
|
||||
"capability.finance.security-budget-evidence",
|
||||
"capability.identity.tenant-facts",
|
||||
"capability.infotech.runbook-tutorials",
|
||||
"capability.infotech.sbom-management",
|
||||
"capability.observability.security-signals",
|
||||
"capability.organization.role-catalog",
|
||||
"capability.railiance.bootstrap-sequencing",
|
||||
"capability.railiance.browser-verification",
|
||||
"capability.railiance.knative-rail",
|
||||
"capability.railiance.kubernetes-rail",
|
||||
"capability.railiance.openbao-package",
|
||||
"capability.railiance.policy-publication-package",
|
||||
"capability.railiance.postgres-isolation-recovery",
|
||||
"capability.railiance.sbom-runtime-package",
|
||||
"capability.railiance.security-consumption-contracts",
|
||||
"capability.railiance.substrate-bindings",
|
||||
"capability.railiance.telemetry-package",
|
||||
"capability.railiance.tenant-engine-package",
|
||||
"capability.railiance.user-engine-package",
|
||||
"capability.resources.security-capacity",
|
||||
"capability.security.adversarial-evidence",
|
||||
"capability.security.agent-knowledge",
|
||||
"capability.security.approval-lifecycle",
|
||||
"capability.security.credential-lifecycle",
|
||||
"capability.security.doctrine-review",
|
||||
"capability.security.human-decision-workspace",
|
||||
"capability.security.maturity-claims",
|
||||
"capability.security.policy-publication",
|
||||
"capability.security.posture-assessment",
|
||||
"capability.security.practice-canon",
|
||||
"capability.security.repository-secret-prevention",
|
||||
"capability.security.risk-register",
|
||||
"capability.security.structure-construction",
|
||||
"capability.security.zone-reference"
|
||||
],
|
||||
"duplicate_reviewed_ids": [],
|
||||
"stale": false,
|
||||
"composed_at": "2026-10-14T06:17:44+00:00"
|
||||
}
|
||||
2154
docs/assessments/netkingdom-2026-10-14/hosted-current.json
Normal file
2154
docs/assessments/netkingdom-2026-10-14/hosted-current.json
Normal file
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"workplan_id": "e8992815-389a-5c40-8569-a2b0ee3945f0",
|
||||
"id": "5cd22087-e5d8-5d5e-a252-610a6ac13653",
|
||||
"topic_id": "cee7bedf-2b48-46ef-8601-006474f2ad7a",
|
||||
"title": "Complete scoped owner provisioning for reuse-surface discovery",
|
||||
"description": "Execution/evidence gate for CUST-WP-0081-T02. The user selected Arrange scoped owner access; that direction is already recorded and is not being requested again. railiance-platform must confirm caller admission through reuse-surface-hub-write-token (the actual attempt was denied by OpenBao 403), and provide the non-secret hub auth_env reference plus scoped-read and metadata-publication admission evidence for rapp-openbao, rapp-policy-nexus, rapp-postgres, rapp-sbom-nexus, rapp-telemetry, rapp-tenant-engine and rapp-user-engine. Exact requirements: docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json. No secret values in this record. Resolve on verified provisioning receipts; resolution alone is not a runtime credential grant. Do not attach to the already-resolved general October 11 provisioning decision or mark completed based on user intent.",
|
||||
"decision_type": "pending",
|
||||
"status": "open",
|
||||
"rationale": "All 70 owner capability records are established locally and published; hosted discovery remains 32/70. The remaining 38 registrations need this owner setup.",
|
||||
"decided_by": null,
|
||||
"decided_at": null,
|
||||
"deadline": null,
|
||||
"escalation_note": null,
|
||||
"superseded_by": null,
|
||||
"created_at": "2026-10-14T07:51:34.426143Z",
|
||||
"updated_at": "2026-10-14T07:51:34.426143Z",
|
||||
"workstream_id": "e8992815-389a-5c40-8569-a2b0ee3945f0"
|
||||
}
|
||||
|
|
@ -0,0 +1,340 @@
|
|||
{
|
||||
"proposal_id": "CUST81-PUBLICATION-001",
|
||||
"target": "ea57268a6eae4de8313113e5b1f98c7d7b657999",
|
||||
"base": "e8bd394c8b79741a4bb3b1d09c8b495ca41d7c0f",
|
||||
"temporary_ref": "refs/heads/cust-wp-0081-publication-batches",
|
||||
"method": "Every file and object introduced through normal scanned pushes; original report history preserved; no scanner suppression or configuration change.",
|
||||
"batches": [
|
||||
{
|
||||
"commit": "2b6901eb9ce7922d6cb036affd6e3eac2c5098e0",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/apply_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/build_inventory.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/capability-inventory.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/completion-audit.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/federated-local.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/federated-staged.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/federation-local.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/federation-staged.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/full-inventory.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hosted-verification.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/inventory.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-federation-guide.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/local-sources.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/prepare_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/publication-preflight.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/publication_preflight.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/publish_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/published-source-verification.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/register_hub.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-application.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/capabilities/capability.authorization.policy-evaluate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml"
|
||||
],
|
||||
"local_scan": "[detached HEAD 2b6901e] docs: publish reviewed NetKingdom evidence batch 1\n 40 files changed, 21549 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/apply_registry.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/build_inventory.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/capability-inventory.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/completion-audit.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-local.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-staged.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-local.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-staged.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/full-inventory.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-after-public",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":57,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n * [new branch] HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "f728073b4d9214df2ca00a2fea090a72a0a47d77",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/capabilities/capability.audit.event-retain.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/NO_CAPABILITIES.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/glas-harness/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/issue-core/registry/capabilities/capability.infotech.issue-tracking.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/issue-core/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/key-cape/registry/capabilities/capability.iam.key-cape.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/key-cape/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/net-kingdom/registry/capabilities/capability.security.iam-tooling-suite.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/net-kingdom/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/ops-bridge/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/ops-warden/registry/capabilities/capability.security.ssh-certificate-issuance.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/ops-warden/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-apps/registry/capabilities/capability.railiance.workload-deployment-tooling.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-apps/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-bootstrap/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-cluster/registry/capabilities/capability.railiance.cluster-bootstrap.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-cluster/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-enablement/registry/capabilities/capability.railiance.ci-enablement.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-enablement/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-fabric/registry/capabilities/capability.railiance.fabric-graph.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-fabric/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-forge/registry/capabilities/capability.railiance.forge-infrastructure.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-forge/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-infra/registry/capabilities/capability.railiance.infra-provisioning.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-infra/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-platform/registry/capabilities/capability.railiance.platform-services.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/railiance-platform/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/capabilities/capability.registry.register.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/capabilities/capability.registry.validate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/runbook-tutorials/registry/capabilities/capability.infotech.runbook-tutorials.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/runbook-tutorials/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/sand-boxer/registry/capabilities/execution.sandbox-provision.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/sand-boxer/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md"
|
||||
],
|
||||
"local_scan": "[detached HEAD f728073] docs: publish reviewed NetKingdom evidence batch 2\n 40 files changed, 2505 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/capabilities/capability.audit.event-retain.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/NO_CAPABILITIES.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/glas-harness/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":118,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 2b6901e..f728073 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "d260b123bd316d21f3049255748429a854be909c",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/capabilities/capability.infotech.repo-template.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.progress-log.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/tenant-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/the-custodian/registry/capabilities/capability.agents.custodian-runtime-tooling.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/the-custodian/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/user-engine/registry/capabilities/capability.identity.user-engine.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-before/user-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-changes.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-publication.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage-validation.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/capabilities/capability.authorization.policy-evaluate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/capabilities/capability.activity.event-coordinate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/capabilities/capability.agents.performance-learning.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/capabilities/capability.security.approval-lifecycle.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/capabilities/capability.audit.event-retain.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/capabilities/capability.coordination.cross-owner-work.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/capabilities/capability.security.agent-knowledge.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/capabilities/capability.finance.security-budget-evidence.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/capabilities/capability.security.doctrine-review.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/capabilities/capability.execution.profile-harness.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/capabilities/capability.security.human-decision-workspace.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/capabilities/capability.infotech.issue-tracking.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml"
|
||||
],
|
||||
"local_scan": "[detached HEAD d260b12] docs: publish reviewed NetKingdom evidence batch 3\n 40 files changed, 4252 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/capabilities/capability.infotech.repo-template.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.progress-log.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/te",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":121,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n f728073..d260b12 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "2f302e8815de59999fb0691a0c28c04b6b7f46f6",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/capabilities/capability.iam.key-cape.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/capabilities/capability.security.posture-assessment.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/capabilities/capability.security.maturity-claims.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.bootstrap-recovery.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.case-contracts.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.emission-profile.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.iam-tooling-suite.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.posture-feedback.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.scenario-compose.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/capabilities/capability.security.structure-construction.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.access-routing.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.case-follow-through.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.ssh-certificate-issuance.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/capabilities/capability.security.policy-publication.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/capabilities/capability.railiance.kubernetes-rail.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/capabilities/capability.railiance.workload-deployment-tooling.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/capabilities/capability.railiance.bootstrap-sequencing.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/capabilities/capability.railiance.cluster-bootstrap.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/capabilities/capability.railiance.ci-enablement.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/capabilities/capability.railiance.fabric-graph.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/capabilities/capability.railiance.forge-infrastructure.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/capabilities/capability.security.forge-secret-prevention.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/capabilities/capability.railiance.infra-provisioning.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml"
|
||||
],
|
||||
"local_scan": "[detached HEAD 2f302e8] docs: publish reviewed NetKingdom evidence batch 4\n 40 files changed, 3114 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/capabilities/capability.iam.key-cape.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/capabilities/capability.security.posture-assessment.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/capabilities/capability.security.maturity-claims.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/regi",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":110,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n d260b12..2f302e8 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "164116a219205de3de74ed0baceaa7861057a894",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/capabilities/capability.railiance.security-consumption-contracts.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/capabilities/capability.railiance.platform-services.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/capabilities/capability.observability.security-signals.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/capabilities/capability.railiance.openbao-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/capabilities/capability.railiance.browser-verification.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/capabilities/capability.railiance.policy-publication-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/capabilities/capability.railiance.postgres-isolation-recovery.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/capabilities/capability.railiance.telemetry-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/capabilities/capability.railiance.tenant-engine-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/capabilities/capability.railiance.user-engine-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/capabilities/capability.railiance.substrate-bindings.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/capabilities/capability.execution.scheduled-agent-rein.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/capabilities/capability.execution.openweight-rein.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/capabilities/capability.security.repository-secret-prevention.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/capabilities/capability.resources.security-capacity.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.infotech.headless-browser.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.registry.register.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.registry.validate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/capabilities/capability.security.risk-register.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/capabilities/capability.organization.role-catalog.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/capabilities/capability.infotech.runbook-tutorials.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml"
|
||||
],
|
||||
"local_scan": "[detached HEAD 164116a] docs: publish reviewed NetKingdom evidence batch 5\n 40 files changed, 2858 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/capabilities/capability.railiance.security-consumption-contracts.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/capabilities/capability.railiance.platform-services.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/capabilities/capability.observability.security-signals.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml\n create mode 10064",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":122,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 2f302e8..164116a HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "db1411247162321e51953fcaedef761bda000ad0",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/capabilities/execution.sandbox-provision.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/capabilities/capability.security.credential-lifecycle.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/capabilities/capability.security.practice-canon.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/capabilities/capability.statehub.progress-log.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/capabilities/capability.identity.tenant-facts.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/capabilities/capability.agents.custodian-runtime-tooling.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/capabilities/capability.identity.user-engine.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/capabilities/capability.security.adversarial-evidence.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/capabilities/capability.security.zone-reference.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/review-integrity.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/source-test-receipt.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/apply_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/build_inventory.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/federated-staged.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/federation-staged.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/hosted-before-federated.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/hosted-before-repos.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/inventory.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/prepare_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/publication-preflight.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/publication_preflight.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/publish_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-application.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-changes.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-publication.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-stage-validation.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/capabilities/capability.railiance.knative-rail.md"
|
||||
],
|
||||
"local_scan": "[detached HEAD db14112] docs: publish reviewed NetKingdom evidence batch 6\n 40 files changed, 4738 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/capabilities/execution.sandbox-provision.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/capabilities/capability.security.credential-lifecycle.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/security-c",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":84,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 164116a..db14112 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
},
|
||||
{
|
||||
"commit": "55f2090ff9f75cd0675b2c70bf9f62b5f1af7251",
|
||||
"files": [
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/capabilities/capability.railiance.sbom-runtime-package.md",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/indexes/capabilities.yaml",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/use-cases.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/verification-staged.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/supplement/verify_registry.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/use-cases.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/verification-local.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/verification-staged.json",
|
||||
"docs/assessments/netkingdom-2026-10-14/verify_publication.py",
|
||||
"docs/assessments/netkingdom-2026-10-14/verify_registry.py",
|
||||
"docs/netkingdom-security-architecture-review.md",
|
||||
"workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md"
|
||||
],
|
||||
"local_scan": "[detached HEAD 55f2090] docs: publish reviewed NetKingdom evidence batch 7\n 13 files changed, 1318 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/capabilities/capability.railiance.sbom-runtime-package.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/use-cases.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/verification-staged.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/verify_registry.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/use-cases.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/verification-local.json\n create mode 100644 docs",
|
||||
"remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":27,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n db14112..55f2090 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"verified_remote": true
|
||||
}
|
||||
],
|
||||
"complete": true,
|
||||
"worktree": "/tmp/cust81-publish-758drpdv/worktree",
|
||||
"tree_parity": true,
|
||||
"initial_original_push_failure": "remote: {\"status\":\"unverified\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"reason\":\"scanner-failed\",\"scanned_objects\":137,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n ! [remote rejected] ea57268a6eae4de8313113e5b1f98c7d7b657999 -> main (pre-receive hook declined)\nerror: failed to push some refs to 'forgejo-remote:coulomb/the-custodian.git'\n",
|
||||
"refinement": "Publish complete original snapshots sequentially; rev-list over-counted objects through earlier unmatched intermediate tree.",
|
||||
"snapshot_refinement": {
|
||||
"commit": "0d47c325678db9928cffbe200b30ea28cd5fcf0d",
|
||||
"tree_parity": true,
|
||||
"push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":7,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 55f2090..0d47c32 HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"local_scan": "[detached HEAD 0d47c32] docs: verify first original review snapshot\n 2 files changed, 1 insertion(+), 24 deletions(-)\n delete mode 100644 docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json\n"
|
||||
},
|
||||
"first_original_introduced_objects": 597,
|
||||
"snapshot_refinement_failure": "Unexpected remaining object count",
|
||||
"final_method": "Fast-forward main to fully scanned batched history with exact original tree; preserve unpublished original commits on a local backup branch.",
|
||||
"complete_snapshot_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":8,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 0d47c32..a3b894e HEAD -> cust-wp-0081-publication-batches\n",
|
||||
"published_head": "a3b894eb42c177e97fd8885afce07b21ca36d416",
|
||||
"local_original_backup": "cust-wp-0081-original-unpublished",
|
||||
"final_main_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":0,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n e8bd394..a3b894e a3b894eb42c177e97fd8885afce07b21ca36d416 -> main\n",
|
||||
"equivalent_history_published": true,
|
||||
"local_main_aligned": true,
|
||||
"cleanup_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":0,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n - [deleted] cust-wp-0081-publication-batches\n",
|
||||
"temporary_ref_removed": true
|
||||
}
|
||||
|
|
@ -146,10 +146,13 @@ Stable reuse surfaces should be schemas, versioned request/claim/decision/receip
|
|||
| Lower recurring work | Reopened/duplicate findings, overdue owner work and manual handoffs; Guard/Activity/State Hub | Repeat observation windows with stable source denominator |
|
||||
| Better security coverage | Credentials, PEPs, repositories and event classes with complete evidence divided by explicitly inventoried totals | Unknowns reported separately; no denominator shrink to improve a score |
|
||||
| Cheaper operation | Resource requests versus measured demand, recovery storage and operator effort; Resource Control/Fin Hub | Native capacity/recovery checks and error rate remain within the agreed bounds |
|
||||
| Reliable preventive checks | Scan duration, objects per push and unverified refusals; Forge/Repo Manager | Representative evidence publication passes within declared bounds while introduced-history and negative-secret checks remain enforced |
|
||||
| Better reuse | Successful second installation, time to integrate, adapter-specific code and upgrade failures; NetKingdom/Reuse Surface | Independent consumer acceptance against pinned contracts |
|
||||
|
||||
A useful automatic loop observes and proposes. Any actuation still passes existing authority, cost/risk, approval and rollback controls. A maturity score, performance lesson or optimization target must never manufacture a permission.
|
||||
|
||||
Publication of this review exposed a concrete efficiency issue: the normal receive scanner refused the large evidence push with `scanner-failed` after 135–138 objects, while its source declares a 90-second total budget. Smaller batches passed the same scanner. This supports measuring startup/per-object overhead and testing representative publication sizes under rank 12; it does not prove the precise failure cause or justify weakening detection. The [publication receipt](assessments/netkingdom-2026-10-14/publication-batches-receipt.json) retains accepted batch results and final tree parity.
|
||||
|
||||
## Capability establishment status
|
||||
|
||||
**Owner registries and local reuse-surface discovery are established; hosted establishment remains incomplete.** All 70 reviewed capabilities validate and occur exactly once in the composed local federation. The normal `plan-check` command finds Approval Engine for bound approval consumption and NetKingdom Posture Feedback for evidence expiry. The default local federation preserves unrelated sources: 99 source registrations compose 114 total capabilities without warnings. [Local verification](assessments/netkingdom-2026-10-14/verification-local.json), [normal CLI discovery](assessments/netkingdom-2026-10-14/local-discovery-receipt.json).
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ type: workplan
|
|||
title: "Review NetKingdom architecture and establish security reuse capabilities"
|
||||
domain: infotech
|
||||
repo: the-custodian
|
||||
status: active
|
||||
status: blocked
|
||||
owner: codex
|
||||
topic_slug: custodian
|
||||
created: "2026-10-14"
|
||||
|
|
@ -41,8 +41,11 @@ Delivered `docs/netkingdom-security-architecture-review.md` and the linked inven
|
|||
|
||||
```task
|
||||
id: CUST-WP-0081-T02
|
||||
status: progress
|
||||
status: wait
|
||||
priority: high
|
||||
needs_human: true
|
||||
blocking_reason: "Await owner-provisioned hub write access and private-source read/disclosure admission; OpenBao denied the current caller."
|
||||
decision_id: "5cd22087-e5d8-5d5e-a252-610a6ac13653"
|
||||
state_hub_task_id: "80b037cd-876d-53c2-9272-b1dfe0524446"
|
||||
```
|
||||
|
||||
|
|
@ -58,8 +61,10 @@ does not prove hosted federation. Preserve unrelated worktree changes.
|
|||
|
||||
```task
|
||||
id: CUST-WP-0081-T03
|
||||
status: progress
|
||||
status: wait
|
||||
priority: high
|
||||
depends_on: [CUST-WP-0081-T02]
|
||||
blocking_reason: "Final coverage audit requires all reviewed capabilities established in hosted reuse-surface."
|
||||
state_hub_task_id: "9bccb18e-0501-5319-a18c-f1fb36312cb7"
|
||||
```
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue