coulomb/zone-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: harden zone reference contracts

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1
This commit is contained in:
tegwick 2026-08-23 12:27:13 +02:00
parent bed5c3b53a
commit be29c28100
19 changed files with 1712 additions and 454 deletions
Download patch file Download diff file Expand all files Collapse all files

37
profiles/netkingdom-build-v0.1.yaml Normal file
View file

@ -0,0 +1,37 @@
standard: security-zone-control-profile_v0.1
profile_id: netkingdom-build-v0.1
version: flex-auth@e521e7b+ops-warden@7ce58ae
controls:
flex-auth/pre-sign:
policy_owner: flex-auth
pep_owner: ops-warden
policy_ref: flex-auth@e521e7b:examples/ops-warden/policy_package.md
zones:
z0-experimental: {stance: advisory, failure_mode: fail_open}
z1-operational: {stance: advisory, failure_mode: fail_open}
z2-protected: {stance: enforced, failure_mode: fail_open}
z2-continuity: {stance: enforced, failure_mode: fail_open}
z3-critical: {stance: enforced, failure_mode: fail_closed}
unknown: {stance: advisory, failure_mode: fail_open}
ops-warden/agent-high-risk-read:
policy_owner: ops-warden
pep_owner: ops-warden
policy_ref: ops-warden@7ce58ae:src/warden/routing/models.py
zones:
z0-experimental: {stance: enforced, failure_mode: fail_closed}
z1-operational: {stance: enforced, failure_mode: fail_closed}
z2-protected: {stance: enforced, failure_mode: fail_closed}
z2-continuity: {stance: enforced, failure_mode: fail_closed}
z3-critical: {stance: enforced, failure_mode: fail_closed}
unknown: {stance: enforced, failure_mode: fail_closed}
ops-warden/plan-zone-rule:
policy_owner: ops-warden
pep_owner: ops-warden
policy_ref: security-zones_v0.1@104d5c6:section-5.1
zones:
z0-experimental: {stance: advisory, failure_mode: fail_closed}
z1-operational: {stance: advisory, failure_mode: fail_closed}
z2-protected: {stance: enforced, failure_mode: fail_closed}
z2-continuity: {stance: enforced, failure_mode: fail_closed}
z3-critical: {stance: enforced, failure_mode: fail_closed}
unknown: {stance: enforced, failure_mode: fail_closed}