2214 lines
66 KiB
JSON
2214 lines
66 KiB
JSON
{
|
|
"objective": "Finish what you found missing and finish CUST-WP-0080",
|
|
"status": "active",
|
|
"observed_at": "2026-10-17T23:36:49.758150+00:00",
|
|
"normative_architecture": {
|
|
"path": "docs/netkingdom-target-security-architecture.md",
|
|
"sha256": "ec2079be18c7cdb8a1e4fdbd22131c08c83721d7a1bf18b4802bc5e229520f35"
|
|
},
|
|
"workplan": "workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
|
|
"previous_goal_turn": "progress: committed review, reconstructed failures and restored missing owner task projections",
|
|
"requirement_scope": "All sixteen target gates plus G01-G13 and SEC-DSM ledger; source tests never substitute for native acceptance",
|
|
"current_work": "Producer SDK/policy and composed Forgejo callback/private input/transaction source implemented and checked. Actual KeyCape structured assurance and current-authentication/provenance interoperability is the next source correction; native/profile work remains open.",
|
|
"acceptance_gates": [
|
|
{
|
|
"id": "TSA-01",
|
|
"required_outcome": "Every inventoried privileged PEP authenticates its decision",
|
|
"required_evidence": "PEP denominator; admitted signer/channel; forged, altered, wrong-key/pin, unsigned/downgrade, expired and rotation refusals. Start SECRETS-WP-0014.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-02",
|
|
"required_outcome": "Exact approval produces one bounded protected operation",
|
|
"required_evidence": "SECRETS-WP-0013/RPF-WP-0035-T12 native effect; Approval T01/T05 issuer/tenant provenance; wrong actor/tenant/body, expiry, replay and unavailable refusal.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-03",
|
|
"required_outcome": "Crashes preserve uncertainty and cleanup",
|
|
"required_evidence": "Actual ledger restart/concurrency, consumed-before-effect failure, target reconciliation, scoped cleanup and revocation evidence; no blind replay.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-04",
|
|
"required_outcome": "First reusable browser case is accepted",
|
|
"required_evidence": "NK-WP-0048 and named Mason/Warden/KeyCape adapters; independent native structure, sign-in/denial, delivery, revocation and rollback.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-05",
|
|
"required_outcome": "Human and browser consumers can use the delivered identity",
|
|
"required_evidence": "KEY-WP-0040/U08 real-factor recovery; User Engine journey; NK-WP-0050 and CUST-WP-0080-T05 human/agent Playwright acceptance.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-06",
|
|
"required_outcome": "Actual agent and runner authority is bounded",
|
|
"required_evidence": "CUST-WP-0073/GLAS-WP-0012 admitted runtime read-denial/tool-effect proof; Forge/Platform per-job credential and repository-workflow abuse tests.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-07",
|
|
"required_outcome": "Credential lifecycle is inventoried and simplified",
|
|
"required_evidence": "Current owner/consumer denominator, unknown/orphan findings, native-identity elimination candidates; sampled replacement/adoption/old-refusal and deletion semantics. G04/G09/G12.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-08",
|
|
"required_outcome": "Recovery is independent and measured",
|
|
"required_evidence": "NK-WP-0049 plus platform/root owners; isolated recovery with ordinary issuer unavailable, restore/reconnect/audit continuity and measured RTO/RPO. G08/G11.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-09",
|
|
"required_outcome": "Security effects have independently reconciled evidence",
|
|
"required_evidence": "Admitted source/class inventory, atomic outbox, receiver readback, lag/duplicate/boundary accounting and missing-class findings. Approval/Audit/Tenant/Secrets owners.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-10",
|
|
"required_outcome": "Source and delivery controls cover declared entry paths",
|
|
"required_evidence": "FORGE-WP-0006/RMGR-WP-0021: denominator, SSH/HTTP/UI/new repo/import/mirror coverage, required checks/provenance, private synthetic finding through resolution.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-11",
|
|
"required_outcome": "Discovery remains accurate",
|
|
"required_evidence": "All reviewed IDs exactly once, owner/index parity, usable source links, current limits/version aliases, drift checks and package-family disposition. Reuse/Repo Manager/provider owners.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-12",
|
|
"required_outcome": "Improvement operates without repeated manual polling",
|
|
"required_evidence": "CUST-WP-0079/Activity accepted schedule, unassisted firing, checkpoint and changed-state notifications; adopted cadence runtime/receiver receipts; owner change and native remeasurement.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-13",
|
|
"required_outcome": "Shared adapters reduce per-consumer implementation",
|
|
"required_evidence": "Producer-format cross-language fixtures, two real consumers, version compatibility, denied-path parity, upgrades and rollback; no second PDP.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-14",
|
|
"required_outcome": "Minimal profiles are independently reusable",
|
|
"required_evidence": "Version/provider lock, dependency and optional-provider declaration, provider adapters, second clean installation, complete positive/negative journeys and upgrade/recovery instructions.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-15",
|
|
"required_outcome": "Optimization improves measured operations",
|
|
"required_evidence": "Baseline and repeat measurements of onboarding time/touches, p50/p95 decision/effect latency, scanner throughput/failure, resources/headroom and owner effort with unchanged control coverage.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
},
|
|
{
|
|
"id": "TSA-16",
|
|
"required_outcome": "Governance and exceptions remain truthful",
|
|
"required_evidence": "Existing SEC-DSM ledger and close-down controls reconciled to exact evidence; real authority for changes, explicit residual promotions, preserved deferrals and no invented owner assent.",
|
|
"status": "incomplete",
|
|
"completion_evidence": []
|
|
}
|
|
],
|
|
"separate_required_deliverables": [
|
|
"G01-G13 current closure evidence or already applicable approved exceptions",
|
|
"SEC-DSM requirement ledger reconciled with exact evidence",
|
|
"T05 real human and agent Playwright acceptance and supported discovery",
|
|
"Second real consumer and clean installation proves reuse",
|
|
"Residual handoffs before workplan finish; no required work left only in prose"
|
|
],
|
|
"workplan_finished": false,
|
|
"sec_dsm_requirements": {
|
|
"path": "docs/evidence/2026-10-12-netkingdom-security/sec-dsm-requirement-ledger.json",
|
|
"sha256": "ad81f7186ada04aa1cc410932fc8669d69dc2232f3c0be00657b17f3aa3a8184",
|
|
"count": 116,
|
|
"requirements": [
|
|
{
|
|
"id": "DSM-TRANS-001",
|
|
"title": "Highest Practical Mechanism",
|
|
"line": 411,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-TRANS-002",
|
|
"title": "Govern the Residual Secret",
|
|
"line": 415,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "Current NetKingdom/KeyCape static privacyIDEA bootstrap/token source path; no estate-wide conformance inferred",
|
|
"observed": "Current profile no longer creates the obsolete Keycloak trigger credential. Remaining create-pi-token.sh authenticates as pi-admin, stores a local bearer and publishes keycape-pi-token; create-secrets.sh also embeds that bearer in full configuration. Documented expiry/refresh is not complete owner/scoped lifecycle acceptance.",
|
|
"remaining": "Native consumer/owner inventory, minimum feasible service authority, central authoritative custody, bounded refresh/rotation, revoke-old proof and private leak detection are not established. Existing legacy accounts/Secrets need inventory and authorized revocation.",
|
|
"owner_task": "NK-WP-0049-T02/T03; CUST-WP-0080-T03 (G04/G09/G12)",
|
|
"verification_evidence": [
|
|
"admin-bootstrap.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-TRANS-003",
|
|
"title": "Do Not Fake Dynamism",
|
|
"line": 427,
|
|
"normative_terms": [
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-TRANS-004",
|
|
"title": "Record Elimination Potential",
|
|
"line": 431,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-TRANS-005",
|
|
"title": "Account for Issuer Dependency",
|
|
"line": 444,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-TRANS-006",
|
|
"title": "Degraded Operation",
|
|
"line": 458,
|
|
"normative_terms": [
|
|
"MUST NOT",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ARCH-001",
|
|
"title": "Minimize Persistent Secrets",
|
|
"line": 475,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ARCH-002",
|
|
"title": "Static Secrets Are Exceptions",
|
|
"line": 479,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ARCH-003",
|
|
"title": "Separate Identity From Authority",
|
|
"line": 492,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ARCH-004",
|
|
"title": "Separate Control Plane From Delivery",
|
|
"line": 498,
|
|
"normative_terms": [
|
|
"SHOULD",
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ARCH-005",
|
|
"title": "Optimize for Operability",
|
|
"line": 504,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-001",
|
|
"title": "Secure Path of Least Resistance",
|
|
"line": 518,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-002",
|
|
"title": "Golden Paths",
|
|
"line": 522,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-003",
|
|
"title": "Self-Service",
|
|
"line": 534,
|
|
"normative_terms": [
|
|
"SHOULD",
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-004",
|
|
"title": "Local Development",
|
|
"line": 540,
|
|
"normative_terms": [
|
|
"SHOULD",
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-005",
|
|
"title": "Debuggability",
|
|
"line": 567,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DX-006",
|
|
"title": "Avoid Security Escape Hatches Becoming Defaults",
|
|
"line": 581,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G02",
|
|
"G05",
|
|
"G08"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ID-001",
|
|
"title": "Unique Workload Identity",
|
|
"line": 589,
|
|
"normative_terms": [
|
|
"MUST NOT",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ID-002",
|
|
"title": "Federated Authentication",
|
|
"line": 597,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ID-003",
|
|
"title": "Eliminate Secret Zero",
|
|
"line": 611,
|
|
"normative_terms": [
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ID-004",
|
|
"title": "Human and Machine Identity Separation",
|
|
"line": 615,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT",
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUTH-001",
|
|
"title": "Least Authority",
|
|
"line": 627,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12",
|
|
"G13"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUTH-002",
|
|
"title": "Contextual Scope",
|
|
"line": 631,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12",
|
|
"G13"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUTH-003",
|
|
"title": "Environment Isolation",
|
|
"line": 656,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12",
|
|
"G13"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUTH-004",
|
|
"title": "Tenant Isolation",
|
|
"line": 662,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05",
|
|
"G12",
|
|
"G13"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ISSUE-001",
|
|
"title": "Prefer Dynamic Issuance",
|
|
"line": 672,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ISSUE-002",
|
|
"title": "Shortest Practical Lifetime",
|
|
"line": 676,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ISSUE-003",
|
|
"title": "Per-Execution Credentials",
|
|
"line": 682,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ISSUE-004",
|
|
"title": "Producer Credential Protection",
|
|
"line": 686,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-STORE-001",
|
|
"title": "Authoritative Storage",
|
|
"line": 702,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-STORE-002",
|
|
"title": "Minimize Copies",
|
|
"line": 706,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Removed emergency plaintext/root duplication and partial-decrypt copies; Make setup no longer installs or requires a permanent HOME key. Removed automatic creation of the unused legacy trigger-admin Secret from the current bootstrap profile.",
|
|
"remaining": "Existing permanent key copies were not deleted/reconciled; other caller copies and the estate inventory remain open.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json",
|
|
"admin-bootstrap.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-STORE-003",
|
|
"title": "Encrypt at Rest",
|
|
"line": 712,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-STORE-004",
|
|
"title": "No Plaintext Source Control",
|
|
"line": 718,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-STORE-005",
|
|
"title": "Git-Encrypted Secrets",
|
|
"line": 722,
|
|
"normative_terms": [
|
|
"MAY",
|
|
"MUST",
|
|
"MUST NOT",
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Public-recipient-only bootstrap/direct encryption and explicit matching-key SOPS recovery now have disposable crypto proof. SOPS recovery isolates ambient credential discovery and rejects other custody backends.",
|
|
"remaining": "Native independent custody, intended-environment runtime isolation and rotation remain unverified; source SOPS profile is limited to age-only JSON/YAML.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-DELIV-001",
|
|
"title": "Prefer Direct Consumption",
|
|
"line": 737,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DELIV-002",
|
|
"title": "Minimize Persistence During Delivery",
|
|
"line": 741,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G12"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Custody input is removed on command return; decrypt failures remove staging. Make recovery publishes only a new private output and suppresses raw tool output. Rotation file updates and database SQL use stdin, and break-glass uses private file input rather than plaintext argv literals.",
|
|
"remaining": "Successful recovery output requires operator cleanup; SIGKILL, child copy retention, other callers and native lifetime enforcement remain unverified. Rotation candidates deliberately remain in private files for custody/reconciliation; delegated child argv and partial native states are not closed.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json",
|
|
"rotation-output.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-DELIV-003",
|
|
"title": "Environment Variables",
|
|
"line": 754,
|
|
"normative_terms": [
|
|
"MAY",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DELIV-004",
|
|
"title": "Kubernetes Secret Replication",
|
|
"line": 760,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DELIV-005",
|
|
"title": "Delivery Policy",
|
|
"line": 764,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G02",
|
|
"G03",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROT-001",
|
|
"title": "Rotation Policy",
|
|
"line": 772,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROT-002",
|
|
"title": "Automatic Rotation",
|
|
"line": 776,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROT-003",
|
|
"title": "Rotation Includes Adoption",
|
|
"line": 780,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom creds-rotate source and existing founder-deferred rotation; estate-wide adoption remains open",
|
|
"observed": "Reproduced missing database/unimplemented unattended LDAP steps falsely reaching completion. Source now refuses those cases and distinguishes successful script timestamps from native adoption. Synthetic apply/SQL failure tests prevent completion stamps. Admin bootstrap retries now verify without resetting passwords; actual-model tests exercise insert conflict and rollback.",
|
|
"remaining": "No native new-consumer acceptance, old-credential refusal or full copy/partial-state reconciliation. RSA rollback, legacy account revocation and multi-consumer lifecycle remain unverified. CUST-WP-0073-T05 remains founder-deferred.",
|
|
"owner_task": "NK-WP-0049-T02/T03; CUST-WP-0073-T05",
|
|
"verification_evidence": [
|
|
"rotation-output.json",
|
|
"admin-bootstrap.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-ROT-004",
|
|
"title": "Zero/Low-Downtime Rotation",
|
|
"line": 794,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROT-005",
|
|
"title": "Dynamic Issuance Preferred",
|
|
"line": 798,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-REV-001",
|
|
"title": "Bounded Validity",
|
|
"line": 806,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-REV-002",
|
|
"title": "Explicit Revocation",
|
|
"line": 810,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-REV-003",
|
|
"title": "Known Revocation Procedure",
|
|
"line": 814,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-REV-004",
|
|
"title": "Compromise Response",
|
|
"line": 818,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G09"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-DETECT-001",
|
|
"title": "Secret Detection",
|
|
"line": 830,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G07"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "22 reviewed workstation checkouts and 166 of 167 deployed Forgejo repositories; isolated lifecycle checks separately scoped; no estate-wide conformance inferred",
|
|
"observed": "Inherited generated-only hook allowed a synthetic private-key commit. New pinned scanner adapter detects that fixture in complete changed staged blobs with real-scanner tests. Actual configured hooks now enforce the pinned scanner on 22 exact workstation roots: clean accepted, disposable private key rejected, generated-only guard retained, unavailable scanner refused. Temporary alternate indexes/object stores preserved user state; unreviewed checkout behavior and routing stayed unchanged. Forge-owned introduced-history adapter now passes 33 source/protocol leaf cases with actual disposable pushes; exact-binary native activation is now verified on 22 Forgejo repositories. Actual SSH clean/detection probes passed under a temporary veto, with absent probe refs/quarantine and veto cleanup; fresh read-only hashes match. Ordinary source pushes to Custodian and railiance-forge succeeded. Separate exact-image isolated HTTP/API/merge, regeneration, Git-template inheritance and restart checks pass (23 assertions), with all earlier incomplete preparation attempts retained. Exact template source was deployed on October 13: same-image generation 12 Ready, actual global Git template selection and regular/executable inheritance in a native temporary repository verified, all original 22 profiles/binaries preserved. Thirty isolated mounted-file/configuration/rollback checks and six conditional-patch regressions pass. The first live template rollout subsequently failed ordinary source acceptance: group-writable0775 scanner permissions were refused. Trial retained as failed. Recovery restored0755 and persisted a hash/owner-checked startup guard (railiance-apps50b66c4). Two Kubernetes replacements, generations13/14, completed the guard and passed inherited native clean/secret/quarantine/recovery probes. Six isolated custody checks pass; builtin authorization excluded in temporary native probes. See recovery summary for separate ordinary SSH acceptance. Exact FORGE6-EXPAND-001 completed 143 further native SSH scanner/verdict probes under ref-specific vetoes. Final audit verifies 166 of 167 profiles, all 23 baseline profiles preserved, zero unknown profiles and no probe refs, vetoes or ownership markers.",
|
|
"remaining": "One repository (numeric ID 55) has four external submodules and remains builtin-only; other workstation clones remain uncovered. Production authenticated HTTP/API/SSO/frontend acceptance is open; protected credential route unavailable before child handoff. Import/mirror clone/fetch bypass receive-pack; historical, LFS, logs/artifacts/runtime coverage, CI authority and private detection-to-response remain unverified.",
|
|
"owner_task": "RMGR-WP-0021-T01/T02/T03/T04; CUST-WP-0080-T03; FORGE-WP-0006-T02/T03",
|
|
"verification_evidence": [
|
|
"secret-detection.json",
|
|
"secret-hook-activation.json",
|
|
"receive-secret-detection.json",
|
|
"receive-hook-activation.json",
|
|
"../2026-10-13-netkingdom-security/receive-profile-recheck.json",
|
|
"../2026-10-13-netkingdom-security/receive-clean-push.json",
|
|
"../2026-10-13-netkingdom-security/forge-lifecycle-summary.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-activation.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-isolated.json",
|
|
"../2026-10-13-netkingdom-security/forge-hook-coverage-refresh.json",
|
|
"../2026-10-13-netkingdom-security/forge-custody-recovery-summary.json",
|
|
"../2026-10-13-netkingdom-security/forge-expansion-final.json",
|
|
"../2026-10-13-netkingdom-security/forge-api-route-readiness.json"
|
|
],
|
|
"assessed_at": "2026-10-13"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-DETECT-002",
|
|
"title": "Layered Detection",
|
|
"line": 834,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G07"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "22 reviewed workstation checkouts and 166 of 167 deployed Forgejo repositories; isolated lifecycle checks separately scoped; no estate-wide conformance inferred",
|
|
"observed": "Verified local hook wiring in 21 review repositories plus Custodian; source adapter covers changed Git index blobs only. Actual configured hooks now enforce the pinned scanner on 22 exact workstation roots: clean accepted, disposable private key rejected, generated-only guard retained, unavailable scanner refused. Temporary alternate indexes/object stores preserved user state; unreviewed checkout behavior and routing stayed unchanged. Forge-owned introduced-history adapter now passes 33 source/protocol leaf cases with actual disposable pushes; exact-binary native activation is now verified on 22 Forgejo repositories. Actual SSH clean/detection probes passed under a temporary veto, with absent probe refs/quarantine and veto cleanup; fresh read-only hashes match. Ordinary source pushes to Custodian and railiance-forge succeeded. Separate exact-image isolated HTTP/API/merge, regeneration, Git-template inheritance and restart checks pass (23 assertions), with all earlier incomplete preparation attempts retained. Exact template source was deployed on October 13: same-image generation 12 Ready, actual global Git template selection and regular/executable inheritance in a native temporary repository verified, all original 22 profiles/binaries preserved. Thirty isolated mounted-file/configuration/rollback checks and six conditional-patch regressions pass. The first live template rollout subsequently failed ordinary source acceptance: group-writable0775 scanner permissions were refused. Trial retained as failed. Recovery restored0755 and persisted a hash/owner-checked startup guard (railiance-apps50b66c4). Two Kubernetes replacements, generations13/14, completed the guard and passed inherited native clean/secret/quarantine/recovery probes. Six isolated custody checks pass; builtin authorization excluded in temporary native probes. See recovery summary for separate ordinary SSH acceptance. Exact FORGE6-EXPAND-001 completed 143 further native SSH scanner/verdict probes under ref-specific vetoes. Final audit verifies 166 of 167 profiles, all 23 baseline profiles preserved, zero unknown profiles and no probe refs, vetoes or ownership markers.",
|
|
"remaining": "One repository (numeric ID 55) has four external submodules and remains builtin-only; other workstation clones remain uncovered. Production authenticated HTTP/API/SSO/frontend acceptance is open; protected credential route unavailable before child handoff. Import/mirror clone/fetch bypass receive-pack; historical, LFS, logs/artifacts/runtime coverage, CI authority and private detection-to-response remain unverified.",
|
|
"owner_task": "RMGR-WP-0021-T01/T02/T03/T04; CUST-WP-0080-T03; FORGE-WP-0006-T02/T03",
|
|
"verification_evidence": [
|
|
"secret-detection.json",
|
|
"secret-hook-activation.json",
|
|
"receive-secret-detection.json",
|
|
"receive-hook-activation.json",
|
|
"../2026-10-13-netkingdom-security/receive-profile-recheck.json",
|
|
"../2026-10-13-netkingdom-security/receive-clean-push.json",
|
|
"../2026-10-13-netkingdom-security/forge-lifecycle-summary.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-activation.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-isolated.json",
|
|
"../2026-10-13-netkingdom-security/forge-hook-coverage-refresh.json",
|
|
"../2026-10-13-netkingdom-security/forge-custody-recovery-summary.json",
|
|
"../2026-10-13-netkingdom-security/forge-expansion-final.json",
|
|
"../2026-10-13-netkingdom-security/forge-api-route-readiness.json"
|
|
],
|
|
"assessed_at": "2026-10-13"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-DETECT-003",
|
|
"title": "Push Prevention",
|
|
"line": 848,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G07"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "Reviewed workstation checkouts and 22 deployed Forgejo repositories; separate exact-image isolated lifecycle checks; no estate-wide conformance inferred",
|
|
"observed": "A disposable secret commit succeeds through the inherited hook and is rejected through the candidate scanner hook; git commit --only and partial/alternate-index cases are tested. Actual configured hooks now enforce the pinned scanner on 22 exact workstation roots: clean accepted, disposable private key rejected, generated-only guard retained, unavailable scanner refused. Temporary alternate indexes/object stores preserved user state; unreviewed checkout behavior and routing stayed unchanged. Forge-owned introduced-history adapter now passes 33 source/protocol leaf cases with actual disposable pushes; exact-binary native activation is now verified on 22 Forgejo repositories. Actual SSH clean/detection probes passed under a temporary veto, with absent probe refs/quarantine and veto cleanup; fresh read-only hashes match. Ordinary source pushes to Custodian and railiance-forge succeeded. Separate exact-image isolated HTTP/API/merge, regeneration, Git-template inheritance and restart checks pass (23 assertions), with all earlier incomplete preparation attempts retained. Exact template source was deployed on October 13: same-image generation 12 Ready, actual global Git template selection and regular/executable inheritance in a native temporary repository verified, all original 22 profiles/binaries preserved. Thirty isolated mounted-file/configuration/rollback checks and six conditional-patch regressions pass. The first live template rollout subsequently failed ordinary source acceptance: group-writable0775 scanner permissions were refused. Trial retained as failed. Recovery restored0755 and persisted a hash/owner-checked startup guard (railiance-apps50b66c4). Two Kubernetes replacements, generations13/14, completed the guard and passed inherited native clean/secret/quarantine/recovery probes. Six isolated custody checks pass; builtin authorization excluded in temporary native probes. See recovery summary for separate ordinary SSH acceptance.",
|
|
"remaining": "Fresh inventory has 166 repositories: 22 installed profiles and 144 builtin-only; other workstation clones remain uncovered. Production authenticated HTTP/SSO/frontend creation remains open. Import/mirror clone/fetch bypass receive-pack; historical, LFS, logs/artifacts/runtime coverage, CI authority and private detection-to-response are unverified.",
|
|
"owner_task": "RMGR-WP-0021-T01/T02/T03/T04; CUST-WP-0080-T03; FORGE-WP-0006-T02/T03",
|
|
"verification_evidence": [
|
|
"secret-detection.json",
|
|
"secret-hook-activation.json",
|
|
"receive-secret-detection.json",
|
|
"receive-hook-activation.json",
|
|
"../2026-10-13-netkingdom-security/receive-profile-recheck.json",
|
|
"../2026-10-13-netkingdom-security/receive-clean-push.json",
|
|
"../2026-10-13-netkingdom-security/forge-lifecycle-summary.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-activation.json",
|
|
"../2026-10-13-netkingdom-security/forge-template-isolated.json",
|
|
"../2026-10-13-netkingdom-security/forge-hook-coverage-refresh.json",
|
|
"../2026-10-13-netkingdom-security/forge-custody-recovery-summary.json"
|
|
],
|
|
"assessed_at": "2026-10-13"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-DETECT-004",
|
|
"title": "Detection-to-Revocation",
|
|
"line": 852,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G07"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "Repo Manager scanner adapter and reviewed workstation hook wiring; no estate-wide conformance inferred",
|
|
"observed": "Source adapter emits only fixed status/counts and blocked blob IDs, suitable for private owner triage without finding disclosure.",
|
|
"remaining": "No exercised detection-to-response path or automatic/semi-automatic revocation integration. Actual exposed credentials require separately authorized response; founder-deferred rotation is unchanged.",
|
|
"owner_task": "RMGR-WP-0021-T01/T02/T03/T04; CUST-WP-0080-T03",
|
|
"verification_evidence": [
|
|
"secret-detection.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-CI-001",
|
|
"title": "CI/CD Is Production Security Infrastructure",
|
|
"line": 862,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G07",
|
|
"G12"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "Existing Forgejo runner Docker network listener only; full production-grade CI/CD posture remains unverified",
|
|
"observed": "Unauthenticated Docker ping from a separate pod succeeded before repair. Exact same-image generation 4 now binds only 127.0.0.1:2375; local readiness/ping and runner heartbeat pass; peer-pod ping is refused. Resources and Recreate strategy preserved; zero queued/running jobs at change.",
|
|
"remaining": "Host-mode job privilege sharing, workflow authority, required checks, short-lived job identity, detection and response remain open. No complete DSM-CI-001 conformance inferred.",
|
|
"verification_evidence": [
|
|
"../2026-10-13-netkingdom-security/forge-runner-loopback-activation.json",
|
|
"../2026-10-13-netkingdom-security/forge-runner-heartbeat.json"
|
|
],
|
|
"owner_task": "FORGE-WP-0006-T03; RMGR-WP-0021-T03/T04; CUST-WP-0080-T03",
|
|
"assessed_at": "2026-10-13"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-CI-002",
|
|
"title": "OIDC/Federation",
|
|
"line": 866,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G07",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-CI-003",
|
|
"title": "Pipeline Change Authority",
|
|
"line": 872,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G07",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-CI-004",
|
|
"title": "Secret Masking Is Not Protection",
|
|
"line": 876,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G07",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-CI-005",
|
|
"title": "Job-Scoped Credentials",
|
|
"line": 880,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G07",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-KEY-001",
|
|
"title": "Non-Exportability",
|
|
"line": 972,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-KEY-002",
|
|
"title": "KMS/HSM",
|
|
"line": 976,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-KEY-003",
|
|
"title": "Cryptographic Operations Instead of Key Retrieval",
|
|
"line": 980,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-KEY-004",
|
|
"title": "Local Key Material",
|
|
"line": 999,
|
|
"normative_terms": [
|
|
"MAY",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-KEY-005",
|
|
"title": "Keyless Signing",
|
|
"line": 1010,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-HUM-001",
|
|
"title": "No Human Transport",
|
|
"line": 1018,
|
|
"normative_terms": [
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G03",
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-HUM-002",
|
|
"title": "Human Readability",
|
|
"line": 1031,
|
|
"normative_terms": [
|
|
"SHOULD NOT"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G03",
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Emergency/generation/custody tracing leaks repaired; Make decrypt now routes plaintext into a private file rather than the terminal. Rotation values/tracing/child diagnostics now remain off stdout/stderr in synthetic success and failure tests. Admin bootstrap now removes unused trigger-credential creation and sends the remaining input only on stdin, with no shell sourcing or raw diagnostic output.",
|
|
"remaining": "KeyCape token issuance/projection and other delegated helpers still need source and native review; actual deployed MFA/custody and legacy credential revocation remain unverified.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json",
|
|
"rotation-output.json",
|
|
"admin-bootstrap.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-HUM-003",
|
|
"title": "Break Glass",
|
|
"line": 1035,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G01",
|
|
"G03",
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-001",
|
|
"title": "Agent Identity",
|
|
"line": 1050,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-002",
|
|
"title": "Per-Run Identity",
|
|
"line": 1054,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-003",
|
|
"title": "Short Agent Identity Lifetime",
|
|
"line": 1067,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-004",
|
|
"title": "No Embedded Master Credential",
|
|
"line": 1078,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-005",
|
|
"title": "Capability Brokerage",
|
|
"line": 1082,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-006",
|
|
"title": "Deterministic Enforcement",
|
|
"line": 1086,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-007",
|
|
"title": "Prevent Credential Accumulation",
|
|
"line": 1092,
|
|
"normative_terms": [
|
|
"MUST NOT",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AGENT-008",
|
|
"title": "Tool Authority Is Agent Authority",
|
|
"line": 1098,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G05"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUDIT-001",
|
|
"title": "Audit Security-Relevant Operations",
|
|
"line": 1126,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G06"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUDIT-002",
|
|
"title": "Never Audit Plaintext Secrets",
|
|
"line": 1139,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G06"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUDIT-003",
|
|
"title": "Attribution",
|
|
"line": 1143,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G06"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUDIT-004",
|
|
"title": "Audit Integrity",
|
|
"line": 1157,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G06"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AUDIT-005",
|
|
"title": "Identity Failure Observability",
|
|
"line": 1163,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G06"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROOT-001",
|
|
"title": "Enumerate Roots",
|
|
"line": 1180,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROOT-002",
|
|
"title": "Minimize Roots",
|
|
"line": 1186,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-ROOT-003",
|
|
"title": "Root Isolation",
|
|
"line": 1190,
|
|
"normative_terms": [
|
|
"MUST NOT"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Bootstrap/direct encryption no longer discover private keys; decryption requires explicit custody. Make setup is public-only; age-only SOPS recovery requires a matching private key with isolated HOME/XDG/environment.",
|
|
"remaining": "Runtime agent isolation is unproved. Existing key copies and direct editor/rotate/delegated caller coverage remain open; this wrapper is not an OS sandbox.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-ROOT-004",
|
|
"title": "Recovery",
|
|
"line": 1194,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "incomplete",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": [],
|
|
"assessment": {
|
|
"scope": "NetKingdom bootstrap/custody source; broader requirement remains open",
|
|
"observed": "Explicit-custody recovery procedures and real disposable age/SOPS roundtrip/refusal/cleanup tests exist.",
|
|
"remaining": "No fresh owner-scoped off-host isolated recovery acceptance for this secret-bearing bootstrap path; NK-WP-0045 covers non-secret root-grant history only.",
|
|
"owner_task": "NK-WP-0049-T02/T03",
|
|
"verification_evidence": [
|
|
"bootstrap-handoff.json",
|
|
"custody-entrypoints.json",
|
|
"sops-make-entrypoints.json"
|
|
],
|
|
"assessed_at": "2026-10-12"
|
|
}
|
|
},
|
|
{
|
|
"id": "DSM-ROOT-005",
|
|
"title": "Quorum for Extreme Authority",
|
|
"line": 1198,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G08",
|
|
"G11"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-001",
|
|
"title": "Secret Inventory",
|
|
"line": 1221,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-002",
|
|
"title": "Inventory Attributes",
|
|
"line": 1225,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-003",
|
|
"title": "Ownership",
|
|
"line": 1250,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-004",
|
|
"title": "Automated Discovery",
|
|
"line": 1254,
|
|
"normative_terms": [
|
|
"MAY",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-005",
|
|
"title": "Evidence State",
|
|
"line": 1269,
|
|
"normative_terms": [
|
|
"MUST NOT",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-006",
|
|
"title": "Discovered but Unowned",
|
|
"line": 1285,
|
|
"normative_terms": [
|
|
"MUST",
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-INV-007",
|
|
"title": "Orphan Detection",
|
|
"line": 1296,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-EXC-001",
|
|
"title": "Explicit Exceptions",
|
|
"line": 1304,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G09",
|
|
"G10"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-EXC-002",
|
|
"title": "Exception Record",
|
|
"line": 1308,
|
|
"normative_terms": [
|
|
"MUST"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G09",
|
|
"G10"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-EXC-003",
|
|
"title": "Exceptions Expire or Revalidate",
|
|
"line": 1324,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G09",
|
|
"G10"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-EXC-004",
|
|
"title": "Elimination Path",
|
|
"line": 1330,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G09",
|
|
"G10"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-001",
|
|
"title": "Secrets in Git",
|
|
"line": 1348,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-002",
|
|
"title": "CI Variable as Universal Vault",
|
|
"line": 1352,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-003",
|
|
"title": "Shared Production Account",
|
|
"line": 1356,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-004",
|
|
"title": "Vault Token Beside Application",
|
|
"line": 1360,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-005",
|
|
"title": "Eternal API Token",
|
|
"line": 1366,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-006",
|
|
"title": "Kubernetes as Universal Vault",
|
|
"line": 1370,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-007",
|
|
"title": "Human Rotation Ritual",
|
|
"line": 1374,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-008",
|
|
"title": "Rotation Without Adoption",
|
|
"line": 1378,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-009",
|
|
"title": "Deleting the Leak",
|
|
"line": 1382,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-010",
|
|
"title": "Secret Scanning Without Response",
|
|
"line": 1386,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-011",
|
|
"title": "Masked Means Safe",
|
|
"line": 1390,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-012",
|
|
"title": "Developer Production Secret",
|
|
"line": 1394,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-013",
|
|
"title": "Root Everywhere",
|
|
"line": 1398,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-014",
|
|
"title": "One Credential Per Environment",
|
|
"line": 1402,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-015",
|
|
"title": "Secrets Manager as Generic Database",
|
|
"line": 1406,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-016",
|
|
"title": "LLM Gatekeeper",
|
|
"line": 1410,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-017",
|
|
"title": "Permanent Agent Authority",
|
|
"line": 1414,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-018",
|
|
"title": "Dynamic at Any Cost",
|
|
"line": 1418,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-019",
|
|
"title": "Undebuggable Federation",
|
|
"line": 1422,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-AP-020",
|
|
"title": "Hidden Credential Through Tooling",
|
|
"line": 1426,
|
|
"normative_terms": [],
|
|
"status": "reference",
|
|
"gap_refs": [
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-CORE-1",
|
|
"title": "Minimum Viable Adoption",
|
|
"line": 1544,
|
|
"normative_terms": [],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G05",
|
|
"G07",
|
|
"G09",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
},
|
|
{
|
|
"id": "DSM-CORE-2",
|
|
"title": "Next Best Investment",
|
|
"line": 1563,
|
|
"normative_terms": [
|
|
"SHOULD"
|
|
],
|
|
"status": "unverified",
|
|
"gap_refs": [
|
|
"G04",
|
|
"G05",
|
|
"G07",
|
|
"G09",
|
|
"G10",
|
|
"G12"
|
|
],
|
|
"closure_evidence": []
|
|
}
|
|
]
|
|
},
|
|
"gap_ids": [
|
|
"G01",
|
|
"G02",
|
|
"G03",
|
|
"G04",
|
|
"G05",
|
|
"G06",
|
|
"G07",
|
|
"G08",
|
|
"G09",
|
|
"G10",
|
|
"G11",
|
|
"G12",
|
|
"G13"
|
|
],
|
|
"source_progress": {
|
|
"observed_at": "2026-10-17T23:36:49.758150+00:00",
|
|
"producer_source_commit": "ca0cb75729a63c9288b7333382d0fa3eb1e8c9a3",
|
|
"producer_source_paths_verified": 24,
|
|
"projection": "primary/railiance01",
|
|
"producer_full_race": {
|
|
"returncode": 0,
|
|
"passed_tests_and_subtests": 494,
|
|
"existing_skips": 3
|
|
},
|
|
"consumer_packages": {
|
|
"returncode": 0,
|
|
"passed_tests_and_subtests": 76,
|
|
"skips": 0
|
|
},
|
|
"composed_cli": {
|
|
"returncode": 0,
|
|
"subprocesses": 48,
|
|
"real_credentials": false
|
|
},
|
|
"composite_patch": {
|
|
"status": "verified",
|
|
"paths": 35,
|
|
"patch_sha256": "9bfc7384e81dc33fd2499dd0e13aa4367b2a61c0281eca500854aaf08498a15c",
|
|
"fuzz": 0,
|
|
"all_postimages_exact": true,
|
|
"native_changes": false
|
|
},
|
|
"native_gates_closed": 0,
|
|
"formal_owner_assent": false,
|
|
"known_open": "Actual KeyCape structured assurance/authentication-time/provenance interoperability; ongoing protected paths; complete owner sessions/exclusion/evidence/custody/native acceptance."
|
|
}
|
|
}
|