K09 · bounded executable evidence infrastructure

Facility Workbook Tools

Direct answer

K09 implements offline workbook tooling that preserves conflicts and rejects secrets and protected topology instead of allowing them into public fixtures.

Stable record: K09-PAGE-WORKBOOK-TOOLS
Claim status: VERIFIED PROJECT IMPLEMENTATION
Last reviewed: 2026-08-16
Research cutoff: 2026-08-16
Source type: GOVERNED PROJECT KNOWLEDGE
Currentness: Current for release 2.1.0; external sources require periodic revalidation.
Correction state: No unresolved public correction recorded for this release.
Machine record: Static JSON record

Authority and disclosure boundary. K09 publishes static tools, synthetic fixtures, source-derived event records, signed offline imports, non-certifying traces, redacted procurement structures, and public/protected partition schemas. It does not perform live monitoring, reveal protected topology or credentials, decide awards, certify facilities, authorize operations, or prove factual truth from a signature.

Safe import policy

The importer accepts owner decisions, evidence requests, stop conditions, applicability disputes, outputs, and opaque protected-reference IDs. It rejects credential, secret, private-key, IP-address, coordinate, topology, exact-setting, exploit, and target-package fields.

PASSreference workbook validation

3modified fields requiring decision

Conflict report

Base versus incoming workbook
Field	Change state	Resolution state
applicabilityConflicts	UNCHANGED	UNCHANGED
assumptions	MODIFIED	UNRESOLVED
facilityPatternId	UNCHANGED	UNCHANGED
id	UNCHANGED	UNCHANGED
outputs	UNCHANGED	UNCHANGED
ownerDecisions	MODIFIED	UNRESOLVED
protectedReferences	UNCHANGED	UNCHANGED
requiredEvidence	UNCHANGED	UNCHANGED
slug	UNCHANGED	UNCHANGED
status	UNCHANGED	UNCHANGED
stopConditions	UNCHANGED	UNCHANGED
unresolvedQuestions	MODIFIED	UNRESOLVED

Explicit resolution

Every modified field requires a caller choice of base, incoming, merged, or unresolved. The reference tool refuses unresolved modified fields and validates the normalized result after resolution. It does not select a facility fact or authority position on the owner’s behalf.

Negative fixtures

The K09 test suite confirms that a workbook containing a password field and a workbook containing networkTopology and ipAddress fields are rejected.