K11 · state, custody, decision, and release evidence

Facility Workbook Decision Ledger

Direct answer

K11 preserves six ordered facility decisions, three signer generations, three custody receipts, and an unresolved N-way merge conflict without exposing protected site data or silently selecting an owner decision.

Evidence and authority boundary. K11 publishes deterministic static models, signed offline reference bundles, synthetic fixtures, review records, decision and receipt chains, public projections, and release-time comparisons. It does not perform live network acquisition, deploy software, operate a facility, make an award, authorize force, certify compliance, or convert a signature into factual truth.

Claim-level evidence boundary

VERIFIED PROJECT IMPLEMENTATION

Decision conflicts and revocations propagate visibly

K11 preserves N-way workbook conflicts, signer rotation, revoked decisions, and protected-reference custody without silently selecting an owner decision or publishing protected values.

Scope: K11 workbook decision ledger and public redaction model.

Reference merge and custody tooling are not a production facility record system or authority decision.

SRC-W3C-PROV-O: Entities, activities, and agents

Schema, branch, and custody model

3schema versions
5merge branches
6decisions
3custody receipts
1preserved merge conflict
Signer rotation and revocation
SignerGenerationStateEffective fromEffective until
FWSIGN-K11-A1REVOKED2026-08-16T00:00:00Z2026-08-16T02:00:00Z
FWSIGN-K11-B2CURRENT_REFERENCE2026-08-16T02:00:01Zopen
FWSIGN-K11-C2INDEPENDENT_REFERENCE2026-08-16T02:00:01Zopen

Decision ledger

Ordered decisions
SequenceDecisionFieldStateSignerPrevious
1FDL-K11-001authority.ownerREVOKEDFWSIGN-K11-A
2FDL-K11-002authority.ownerCURRENTFWSIGN-K11-BFDL-K11-001
3FDL-K11-003mission.protectedFunctionsCURRENTFWSIGN-K11-BFDL-K11-002
4FDL-K11-004evidence.minimumFreshnessHoursCURRENTFWSIGN-K11-CFDL-K11-003
5FDL-K11-005release.publicProjectionCURRENTFWSIGN-K11-BFDL-K11-004
6FDL-K11-006merge.conflictPolicyCURRENTFWSIGN-K11-CFDL-K11-005

Public redaction boundary

Always removed from the public projection

  • credential
  • privateKey
  • password
  • token
  • coordinate
  • ipAddress
  • networkTopology
  • firewallRule
  • sensorLocation
  • exactThreshold
  • targetPackage
  • exploit

N-way merge exposes unresolved owner conflicts; it does not choose a winner. Revoked decisions remain historically visible while their current authority is denied. Protected references are represented by custody identifiers, never by protected values.