feat(standards): apply standards change: Define untrusted execution authority and clarify cessation before resource transitions

User-authorized generic Security extension and Concurrency clarification following sandboxing research. Preserve existing owners, conditionally route the specialized rule, qualify application-visible content, and review actual consumer contracts.

User-authorized generic Security extension and Concurrency clarification following sandboxing research. Preserve existing owners, conditionally route the specialized rule, qualify application-visible content, and review actual consumer contracts.

User-authorized generic Security extension and Concurrency clarification following sandboxing research. Preserve existing owners, conditionally route the specialized rule, qualify application-visible content, and review actual consumer contracts.

User-authorized generic Security extension and Concurrency clarification following sandboxing research. Preserve existing owners, conditionally route the specialized rule, qualify application-visible content, and review actual consumer contracts.

Author: Standards Engine

STANDARDS-ROUTER.md

@@ -186,6 +186,7 @@ facts. Select a detail page when its corresponding specialized decision is affec
 | Condition | Select |
 | --- | --- |
 | Maintain this standards library through its authoring interface | [Standards Authoring Workflow](workflows/standards-authoring.md) |
+| Executed behavior has less permitted authority than its host, a protected intermediary acts for a less-trusted caller, or an execution isolation promise changes | [Untrusted Execution And Delegated Authority](topics/security/untrusted-execution.md) |
 
 ## S1 Rust Library Bug-Fix Route
 

evaluation/standards-effectiveness/application-content.toml

@@ -1,2 +1,2 @@
 schema_version = 1
-entries = [{ binding = "sha256:1c7203d64e6607c23f012f8f208c34b3015d65b515f7a5a6361804eb35535511", target = "core" }, { binding = "sha256:9543efb92f5aae4b9ab6daeca1dce5bfd4a438f7014cb462425ec1956ad07d29", target = "prompts/implement-plan.md" }, { binding = "sha256:2d9639bab9bb5f1762dd1ce72c424db84e2fec5b4bdae422af10900cda68f733", target = "prompts/planning.md" }, { binding = "sha256:139ed04b166f0217e160bf9bdf1743390a6e7a342f32d58bc5ea794913336a83", target = "reference.routing.bounded-rust-repair" }, { binding = "sha256:7d2f37ff5bc5ac061681c85c9ba2310b459c6fafeeba4aca944ed032e67cdd15", target = "router" }, { binding = "sha256:e9ddd3ef1090a448638f043f85a0cf17f8f581a3c7909d9cb156ff96ee2c5cb5", target = "templates/PLAN-TEMPLATE.md" }, { binding = "sha256:4d904ea15cbc043d3ded25d08e19ddc944bd40e1153c68fd202156595b84b2d1", target = "workflow.development-proportionality" }, { binding = "sha256:ff3b5cee1e8039cb7300413e453c5d40d78b73cf797fea192e15a7e2202e5d7f", target = "workflow.implementation" }, { binding = "sha256:379b24ce287bcbc080c6dee12d26ace4b1abcf10866ab684069be633a0433c49", target = "workflow.planning" }, { binding = "sha256:fc8b0a72918d2b9e19b1709ffd18624ded880c9ce1a2ff08ef25c47f310117af", target = "workflow.tooling" }, { binding = "sha256:b6c2070616221befd4a12ceaf49fa878aa78e6803cf681e1b42b9aea8ce019e6", target = "workflow.verification" }]
+entries = [{ binding = "sha256:1c7203d64e6607c23f012f8f208c34b3015d65b515f7a5a6361804eb35535511", target = "core" }, { binding = "sha256:9543efb92f5aae4b9ab6daeca1dce5bfd4a438f7014cb462425ec1956ad07d29", target = "prompts/implement-plan.md" }, { binding = "sha256:2d9639bab9bb5f1762dd1ce72c424db84e2fec5b4bdae422af10900cda68f733", target = "prompts/planning.md" }, { binding = "sha256:139ed04b166f0217e160bf9bdf1743390a6e7a342f32d58bc5ea794913336a83", target = "reference.routing.bounded-rust-repair" }, { binding = "sha256:e321fbdc0e6a6aab9cf9a4d8199b0dac7b09499287e93769b767812f6718d63f", target = "router" }, { binding = "sha256:e9ddd3ef1090a448638f043f85a0cf17f8f581a3c7909d9cb156ff96ee2c5cb5", target = "templates/PLAN-TEMPLATE.md" }, { binding = "sha256:90e2f6d33ffc5f9c771da30dc9e428845ce1cb7a523665f31737db0e2d99ca7c", target = "topic.concurrency" }, { binding = "sha256:76981177cd51e1b58c4049bfc66fc76e16a790128d232c756064537a33f89bb3", target = "topic.security" }, { binding = "sha256:1157e8a44d34c8b9afb1c361d0dfec6758eca7f821fa629385859ad3bb5b6a8d", target = "topic.security.untrusted-execution" }, { binding = "sha256:4d904ea15cbc043d3ded25d08e19ddc944bd40e1153c68fd202156595b84b2d1", target = "workflow.development-proportionality" }, { binding = "sha256:ff3b5cee1e8039cb7300413e453c5d40d78b73cf797fea192e15a7e2202e5d7f", target = "workflow.implementation" }, { binding = "sha256:379b24ce287bcbc080c6dee12d26ace4b1abcf10866ab684069be633a0433c49", target = "workflow.planning" }, { binding = "sha256:fc8b0a72918d2b9e19b1709ffd18624ded880c9ce1a2ff08ef25c47f310117af", target = "workflow.tooling" }, { binding = "sha256:b6c2070616221befd4a12ceaf49fa878aa78e6803cf681e1b42b9aea8ce019e6", target = "workflow.verification" }]

evaluation/standards-effectiveness/canonical-module-corpus.toml

@@ -58,6 +58,7 @@ members = [
   "topics/performance.md",
   "topics/resilience.md",
   "topics/security.md",
+  "topics/security/untrusted-execution.md",
   "workflows/build.md",
   "workflows/commit.md",
   "workflows/development-proportionality.md",

evaluation/standards-effectiveness/decision-provenance.toml

@@ -611,7 +611,7 @@
       ]
     },
     {
-      "digest": "sha256:da74e345b3e6ae270dbef2f6c8d9d3d75ec0cbb2b200f0bf9beaf12e17493255",
+      "digest": "sha256:9102a95de0f0682740a11e576463ed65196e38c57830d36e6a63084c57816127",
       "path": "STANDARDS-ROUTER.md",
       "state": "present",
       "uses": [
@@ -899,7 +899,7 @@
       ]
     },
     {
-      "digest": "sha256:0c84f21333f387d2f99ffd0ad6745f12e603cbe89b718bd3729f7385a8fd2d21",
+      "digest": "sha256:3994f06d9d5eab101f213f644be07a30b021295f859158719b799b1447a52444",
       "path": "evaluation/standards-effectiveness/canonical-module-corpus.toml",
       "state": "present",
       "uses": [
@@ -1761,7 +1761,7 @@
       ]
     },
     {
-      "digest": "sha256:e8e291308187f1dbb764e7853a12e2d4e37404d9204223eb6cc06cf0f0d6a5f8",
+      "digest": "sha256:9a24d7b169b258e586f9f2c1e0126174c1c751991e025f9836c893f32cad5248",
       "path": "evaluation/standards-effectiveness/policy-impact-registry.toml",
       "state": "present",
       "uses": [
@@ -1844,6 +1844,18 @@
         }
       ]
     },
+    {
+      "digest": "sha256:9843fd9f910c93351ac154999b95cf836349026e4a31c6403d4ee19b5bb58357",
+      "path": "evaluation/standards-effectiveness/policy-impact/topic.concurrency.toml",
+      "state": "present",
+      "uses": [
+        {
+          "check": "current-structure",
+          "role": "registered-policy-impact",
+          "suite": "policy-semantic-impact"
+        }
+      ]
+    },
     {
       "digest": "sha256:aa0bf335515960965a525ba8185bedb17ee2f878d5f382ce3bd0ace953245f44",
       "path": "evaluation/standards-effectiveness/policy-impact/topic.contracts.schemas.toml",
@@ -1893,7 +1905,7 @@
       ]
     },
     {
-      "digest": "sha256:d66e72f730c1e518cbebd0c99b7e3e68430b264a60fe1fa0b303109287bed9a7",
+      "digest": "sha256:18302a9be0ef6dfe1ab4c85fe605a74b5b6c968bf9b257dd4b75020d31f43360",
       "path": "evaluation/standards-effectiveness/policy-impact/topic.security.toml",
       "state": "present",
       "uses": [
@@ -1904,6 +1916,18 @@
         }
       ]
     },
+    {
+      "digest": "sha256:9ca42225f69323eb37b970908be328ee29fddb537189e0532d61dd38bf40bcc1",
+      "path": "evaluation/standards-effectiveness/policy-impact/topic.security.untrusted-execution.toml",
+      "state": "present",
+      "uses": [
+        {
+          "check": "current-structure",
+          "role": "registered-policy-impact",
+          "suite": "policy-semantic-impact"
+        }
+      ]
+    },
     {
       "digest": "sha256:54c2deaa6b2de044cb3638c6d8d2418faed4e96d1b6a507a6258f0611ffa2e8a",
       "path": "evaluation/standards-effectiveness/policy-impact/workflow.commit.toml",
@@ -2125,7 +2149,7 @@
       ]
     },
     {
-      "digest": "sha256:4c5c333069d59c89112dc1ec789f78e78810137747e979e052378afe1193fb64",
+      "digest": "sha256:b3eb06102a655b0cc5b1d49d564ad9acdc589d37b872d29f4193451e55fb4e77",
       "path": "evaluation/standards-effectiveness/policy-units/registry.toml",
       "state": "present",
       "uses": [
@@ -2159,7 +2183,7 @@
       ]
     },
     {
-      "digest": "sha256:e97c1d0c058e328ded3a76293e7a41e75cfe1e5f05647d425308c66bdb0965ca",
+      "digest": "sha256:a4f390ebe9350abfc8e16d8f0f1d39ceb0d7e07c8e951b0a0875c1d40b402cc2",
       "path": "evaluation/standards-effectiveness/policy-units/security.toml",
       "state": "present",
       "uses": [
@@ -2175,6 +2199,40 @@
         }
       ]
     },
+    {
+      "digest": "sha256:ec6ed46c5f3970809192953a3ab304558d4f47ee90dca5701b2e4b36e4c33f3d",
+      "path": "evaluation/standards-effectiveness/policy-units/topic.concurrency.toml",
+      "state": "present",
+      "uses": [
+        {
+          "check": "current-structure",
+          "role": "registered-policy-impact",
+          "suite": "policy-semantic-impact"
+        },
+        {
+          "check": "negative-fixtures",
+          "role": "canonical-policy-impact",
+          "suite": "policy-semantic-impact"
+        }
+      ]
+    },
+    {
+      "digest": "sha256:ea6de9c1ddd07eb1e6b12ddb8fdf06cb0f9d57eed21d3902e6aa65b683e1db1e",
+      "path": "evaluation/standards-effectiveness/policy-units/topic.security.untrusted-execution.toml",
+      "state": "present",
+      "uses": [
+        {
+          "check": "current-structure",
+          "role": "registered-policy-impact",
+          "suite": "policy-semantic-impact"
+        },
+        {
+          "check": "negative-fixtures",
+          "role": "canonical-policy-impact",
+          "suite": "policy-semantic-impact"
+        }
+      ]
+    },
     {
       "digest": "sha256:2af695ab7bebc6dbde13ce73f018de93499e16971b937a334855113900b1c76f",
       "path": "evaluation/standards-effectiveness/policy-units/verification.toml",
@@ -2244,7 +2302,7 @@
       ]
     },
     {
-      "digest": "sha256:71e58a1e97ea577897824d27fe94bb8681203db2bf21b808a5504796831d8dac",
+      "digest": "sha256:0df9e1d359d5b502e9a47acd8259775edf86637bc471a255d960161ecc40a9e2",
       "path": "evaluation/standards-effectiveness/router-projection.toml",
       "state": "present",
       "uses": [
@@ -9401,7 +9459,7 @@
       ]
     },
     {
-      "digest": "sha256:5b82d0d8ff127750d3c1501ba5fe1e6afb5cb3a3eb55fcfc25040b811d4cf313",
+      "digest": "sha256:e0cd8f80f95c0acc8d6c246e871f1d674861d8019a906137127aa51ad4065e0c",
       "path": "topics/concurrency.md",
       "state": "present",
       "uses": [
@@ -11173,7 +11231,7 @@
       ]
     },
     {
-      "digest": "sha256:6623902d266d7b831ebca661721daea4e238a5bf5b3ab5a49ec9746e3a957f05",
+      "digest": "sha256:1ae23154bf405dd3722819189ae4bd1859b7777aecbf0b5951b532c6aece16e7",
       "path": "topics/security.md",
       "state": "present",
       "uses": [
@@ -11399,6 +11457,58 @@
         }
       ]
     },
+    {
+      "digest": "sha256:c743d6232b20a22e19f1a34cb834a6fd48c3de483289893f42cec5580feb0c4b",
+      "path": "topics/security/untrusted-execution.md",
+      "state": "present",
+      "uses": [
+        {
+          "check": "local-links",
+          "role": "link-target",
+          "suite": "development-proportionality"
+        },
+        {
+          "check": "routing-closure",
+          "role": "canonical-module",
+          "suite": "development-proportionality"
+        },
+        {
+          "check": "current-structure",
+          "role": "registered-policy-impact",
+          "suite": "policy-semantic-impact"
+        },
+        {
+          "check": "negative-fixtures",
+          "role": "canonical-policy-impact",
+          "suite": "policy-semantic-impact"
+        },
+        {
+          "check": "root-router-routes",
+          "role": "link-target",
+          "suite": "root-index-closure"
+        },
+        {
+          "check": "router-links",
+          "role": "link-target",
+          "suite": "router-legacy-route-closure"
+        },
+        {
+          "check": "local-links",
+          "role": "link-target",
+          "suite": "s1-routing"
+        },
+        {
+          "check": "verifier-change-route-closure",
+          "role": "canonical-module",
+          "suite": "s1-routing"
+        },
+        {
+          "check": "requires-closure",
+          "role": "canonical-module",
+          "suite": "standards-recovery-routing"
+        }
+      ]
+    },
     {
       "digest": "sha256:85aaf15fab1bc4695a48bb95135c93d7526ddc269c114b6d1952be93c6a47ecb",
       "path": "workflows/build.md",
@@ -13838,7 +13948,7 @@
     "path": "evaluation/standards-effectiveness/suite-registry.toml"
   },
   "repository_index": {
-    "digest": "sha256:4933811bd067fbd7c0519e683273d2cb54fec4f21c316198c5aacd8baf83bc93",
+    "digest": "sha256:e5b6c59d68560c738ccdb778b3a76441c0f28db4c1705ec83c0cef03e19cf534",
     "uses": [
       {
         "check": "python-package-contract",

evaluation/standards-effectiveness/generated/suite-inputs.json

@@ -5,15 +5,18 @@ sources = [
 engine_sources = [
   "evaluation/standards-effectiveness/policy-coverage/engine/00796add95735ceeafe3cc6249817cdfaa78423faca0acf619e25c494276c95a.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/0d90975e45afbeba1e7b72f900464a2e96d5a1f4f0a2756b66b62bf018626549.json",
+  "evaluation/standards-effectiveness/policy-coverage/engine/38bdf196745bddbea9088feef327268a3e88509847a051f4b6df2782155cc8c8.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/539954fdfc290e925bea8dd2b7f3b51d782efa81f31b30d218079b760bdb24fd.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/5ac5cdc286020db3201c743c5a7fd559c85896fdc149d2868e8da827968c7373.json",
+  "evaluation/standards-effectiveness/policy-coverage/engine/63e553cc9ece240afda9e6afc24245b2f662ed95acb4b57ca5f3da7993aef1c7.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/7da0c4eaf3af8afad06f9148acc2f05b3c06e280c03f771e9d1faae755418e12.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/9d27f76a14967d29bea6ce57a9b87596952ffa18eab252c4f51792aa2ad27090.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/9d30216f18c6d542f308cefe330aa6fac76ce329ecc0e60a0b5298c8ede43774.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/a4085661e2dec88f44cc3ab6b19583af1fd96a4cd566c7b3801ebfe8e5352efc.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/ac68fca9c4aeb7d46b44cdf22cebe1c8ee45eba68187f230aef0bccff253a391.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/b655b05e8cfcbf2dc9bda142f700ccf7aa8fcd9562e76678be5fa67480422a37.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/b8aa1dcdb1017daba08d67ce28a060b35db727b3e7ba19e08065141b2a7c13f4.json",
+  "evaluation/standards-effectiveness/policy-coverage/engine/e0f20dd2c4e6778c28ad699115ba6a0cfc319620cba08e45826434f2483ef0b5.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/ef80d35081607416d1be94daf22c7dd0768392c801ee83ba1ee04d7d663b3d64.json",
   "evaluation/standards-effectiveness/policy-coverage/engine/f08086e70ee91b317e3a3a69c8f492378f12d6fdfb6398b02970c217acb054ce.json",
 ]