diff --git a/docs/case-studies/HO-DET-001-SOCAAS-PILOT-RECEIPT.md b/docs/case-studies/HO-DET-001-SOCAAS-PILOT-RECEIPT.md index 2f94509..330d9d6 100644 --- a/docs/case-studies/HO-DET-001-SOCAAS-PILOT-RECEIPT.md +++ b/docs/case-studies/HO-DET-001-SOCAAS-PILOT-RECEIPT.md @@ -44,6 +44,18 @@ This case study does not create a new proof level. It explains the existing rece | Governance saves route | `docs/governance-saves/GOVERNANCE-SAVES-CANDIDATES.md`; `docs/governance-saves/GOVERNANCE-SAVES-EVIDENCE-MATRIX.md` | Governance-saves material documents controls that blocked or corrected unsafe claim, merge, publication, or authority drift. | Candidate/save evidence does not raise the HO-DET-001 proof ceiling. | | Website route | `hawkinsoperations-website/src/data/proofRecords.ts` | Website data may route reviewers to bounded proof status. | Website rendering is not proof and cannot promote runtime, signal, public-safe, production, or SOCaaS claims. | +## Final Merge Ledger + +The HO-DET-001 SOCaaS Pilot Receipt Pack landed as five squash merges on 2026-05-30 after review-thread remediation, green checks, and claim-boundary recheck. These merge records prove GitHub source-control integration only. They do not prove runtime, signal, production, public-safe, SOCaaS deployment, FortiSIEM integration, autonomous SOC, AI disposition authority, or analyst disposition authority. + +| Repo | PR | Final head SHA | Merge SHA | Merged at | Ledger meaning | Boundary | +|---|---|---|---|---|---|---| +| `hawkinsoperations-detections` | [#39](https://github.com/HawkinsOperations/hawkinsoperations-detections/pull/39) | `c5cfb04d88355e81e71b23a262d17bda91f86ddc` | `c072d082b6c59c8556355a598b169a18897c6f8f` | `2026-05-30T04:26:26Z` | Detection source boundary merged. | Source truth only; not runtime, signal, production, or public-safe proof. | +| `hawkinsoperations-validation` | [#61](https://github.com/HawkinsOperations/hawkinsoperations-validation/pull/61) | `c850fc7a3b7ecc1bd5988cccf8ca83790db96180` | `9a187017db970317035704dfa8e5e8010aefce25` | `2026-05-30T04:27:58Z` | Receipt artifacts and claim-boundary scanner remediation merged. | Controlled validation truth only; proof ceiling remains `CONTROLLED_TEST_VALIDATED`. | +| `hawkinsoperations-platform` | [#37](https://github.com/HawkinsOperations/hawkinsoperations-platform/pull/37) | `f6a41f83da64e586beb90fb1739471cd7b657daf` | `e6978f92d3d8f067bd61c4ec98ecc5eb28fa8bec` | `2026-05-30T04:28:04Z` | Receipt contract/sample/verifier and empty proof/privacy map hardening merged. | Contract/verifier truth only; not production SOAR, response execution, or SOCaaS operation. | +| `hawkinsoperations-proof` | [#62](https://github.com/HawkinsOperations/hawkinsoperations-proof/pull/62) | `317c207fac10be766fc2616f05283705f3ff2c07` | `20cf39e6a7e6433531970ea0adc73e487c2411c4` | `2026-05-30T04:28:11Z` | Proof-authority case-study route merged with the nonexistent platform route removed. | Proof route only; ceiling remains `CONTROLLED_TEST_VALIDATED`; public-safe status remains blocked. | +| `hawkinsoperations-website` | [#52](https://github.com/HawkinsOperations/hawkinsoperations-website/pull/52) | `0264d439ab0e979e260baf8c9e32b57ad3b35154` | `62bbb5336e4e09ae5904c08a5b4d86210772d066` | `2026-05-30T04:28:17Z` | Website receipt rendering/data and blocked-term scanner enforcement merged. | Website rendering is not proof and cannot raise the claim ceiling. | + ## Allowed Claims - "HO-DET-001 has merged source artifacts in the detections repository." diff --git a/docs/case-studies/OPERATIONS-ACCOMPLISHMENT-LEDGER.md b/docs/case-studies/OPERATIONS-ACCOMPLISHMENT-LEDGER.md index 6a452d1..3ac6a18 100644 --- a/docs/case-studies/OPERATIONS-ACCOMPLISHMENT-LEDGER.md +++ b/docs/case-studies/OPERATIONS-ACCOMPLISHMENT-LEDGER.md @@ -28,6 +28,7 @@ This ledger was derived from: | Date or range | Accomplishment | Repo/source area | Evidence basis | Public-safe claim (bounded wording) | Proof ceiling | GitHub status | Website use recommendation | |---|---|---|---|---|---|---|---| +| 2026-05-30 | Landed the final HO-DET-001 SOCaaS Pilot Receipt Pack across detection source, controlled validation receipt artifacts, platform receipt verifier, proof route, and website rendering contract. | detections, validation, platform, proof, website | `docs/case-studies/HO-DET-001-SOCAAS-PILOT-RECEIPT.md`; detections PR #39 merge `c072d082b6c59c8556355a598b169a18897c6f8f`; validation PR #61 merge `9a187017db970317035704dfa8e5e8010aefce25`; platform PR #37 merge `e6978f92d3d8f067bd61c4ec98ecc5eb28fa8bec`; proof PR #62 merge `20cf39e6a7e6433531970ea0adc73e487c2411c4`; website PR #52 merge `62bbb5336e4e09ae5904c08a5b4d86210772d066`. | HawkinsOperations has a merged GitHub reviewer receipt route for HO-DET-001 controlled-test validation and bounded reviewer inspection. | `CONTROLLED_TEST_VALIDATED` | `GITHUB_PRESENT`; review-thread remediation complete; checks green before merge | Strong website/proof-route bullet after stale review; keep "controlled-test" wording and state that website rendering is not proof. | | 2026-04-29 to 2026-05-21 | Built the first merged HO-DET-001 reviewer receipt loop across source, controlled validation, platform case-packet shape, proof record/card, and bounded website route. | detections, validation, platform, proof, website | `REVIEWER_PACKET.md`; `proof/records/HO-DET-001.md`; validation report and case packet routes named by the reviewer packet. | HawkinsOperations has an end-to-end reviewer route for one controlled-test detection loop. | `CONTROLLED_TEST_VALIDATED` | `GITHUB_PRESENT` | Strong website bullet now; keep "controlled-test" wording and link to proof record/reviewer packet. | | 2026-05-21 | Published the Proof Pack 001 release route for a bounded HO-DET-001 reviewer package. | proof | `README.md`; `docs/releases/PROOF_PACK_001_RELEASE_RUNBOOK.md`; release manifest and checksum files. | Proof Pack 001 is a bounded reviewer package for HO-DET-001 controlled-test proof. | `CONTROLLED_TEST_VALIDATED`; release route only | `GITHUB_PRESENT` | Strong proof-route bullet; do not imply official runtime proof or production deployment. | | 2026-05-01 to 2026-05-21 | Preserved an AI authority boundary showing support-only triage over sanitized case packets with deterministic checks. | proof, validation | `docs/case-studies/HO-DET-001-AI-AUTHORITY-BOUNDARY.md`; `docs/case-studies/PURPLE-TEAM-CLOSED-LOOP-001.md`; validation verifier links. | AI supported triage preparation but could not approve, promote, close, or decide disposition. | `CONTROLLED_TEST_VALIDATED`; AI support only | `GITHUB_PRESENT` | Strong website/career bullet; emphasize "AI is labor, not authority." |