Extend identity-plane drift observation beyond the first detector #55

New issue

Open

opened 2026-09-07 05:56:39 +00:00 by larandar · 0 comments

larandar commented

2026-09-07 05:56:39 +00:00

Owner

Proposal

Preserve the broad observation mandate from #11 as a separately reviewable expansion after the first two-direction detector and required held-slot alert producer. Approved split.

Design

Select a real remaining identity-plane adapter and a subject that makes its assertion non-vacuous. Observation grants no mutation authority. Providers declare durable identities, Vedanta performs bounded private effects, and Jostoph independently audits. The first detector remains #11; flake-ops#470 owns the persistent addressed alert plane. No catalog of hypothetical adapters is predeclared.

Tasks

Identify the exact additional non-secret declaration and observation source, and bind its applicable central contract.
Implement its two-direction drift observation with provenance and resolution-owner routing.
Prove repeat observations reconcile stable alert identity and distinguish resolved from no-longer-observed.
Record a non-vacuous bounded acceptance case without credential or principal mutation.

Specification Delta

GIVEN a real additional identity-plane source with declared and observed state, WHEN its states differ, THEN the adapter names the subject, divergence and resolution owner through the required alert plane, AND observation does not grant disposition authority.

P2; wake on a named adapter and consumer. This is not a prerequisite to #11's first producer or the Vedanta lifecycle run. Structural ownership and immutable OpenSpec binding require grooming before dispatch; #11 is the scope origin, not an invented structural parent.

## Proposal Preserve the broad observation mandate from #11 as a separately reviewable expansion after the first two-direction detector and required held-slot alert producer. [Approved split](https://jo.et0.pw/Ting/Ting/issues/28). ## Design Select a real remaining identity-plane adapter and a subject that makes its assertion non-vacuous. Observation grants no mutation authority. Providers declare durable identities, Vedanta performs bounded private effects, and Jostoph independently audits. The first detector remains #11; flake-ops#470 owns the persistent addressed alert plane. No catalog of hypothetical adapters is predeclared. ## Tasks - [ ] Identify the exact additional non-secret declaration and observation source, and bind its applicable central contract. - [ ] Implement its two-direction drift observation with provenance and resolution-owner routing. - [ ] Prove repeat observations reconcile stable alert identity and distinguish resolved from no-longer-observed. - [ ] Record a non-vacuous bounded acceptance case without credential or principal mutation. ## Specification Delta GIVEN a real additional identity-plane source with declared and observed state, WHEN its states differ, THEN the adapter names the subject, divergence and resolution owner through the required alert plane, AND observation does not grant disposition authority. P2; wake on a named adapter and consumer. This is not a prerequisite to #11's first producer or the Vedanta lifecycle run. Structural ownership and immutable OpenSpec binding require grooming before dispatch; #11 is the scope origin, not an invented structural parent.

larandar added the

Status/Need Grooming

label

2026-09-07 05:56:39 +00:00

larandar referenced this issue

2026-09-07 06:08:35 +00:00

Observe all drift on the identity plane, and alert what Vedanta cannot resolve #11