ICN Documentation Index

Canonical index of all ICN documentation, organized by category.

Quick Navigation

Architecture
Design
Guide
Operations
Reference
Security
Status
Strategy

Architecture

🔒 Canonical ICN Vision Statement

Core vision, values, and long-term aspiration for InterCooperative Network

For: all | Updated: 2026-02-01

🔒 Canonical ICN Architecture Reference

Single authoritative architecture covering all 8 primitives, kernel-app separation, subsystems, and implementation status

For: developers, architects, grant-reviewers | Updated: 2026-03-21

🔒 Canonical ICN Design Principles

Canonical three-tier index of operational invariants, firewall contract, and frozen-core governance invariants. Pairs with the design system entry point as the kernel-side counterpart.

For: developers, architects, designers | Updated: 2026-05-17

📝 Living ADR-0001: Orchestration Plane Architecture (decision superseded by ADR-0017)

Original multi-repo orchestration-plane decision; physical layout DECISION superseded by ADR-0017, durable principle (explicit orchestration/state plane) retained. ADR remains as institutional memory at canonical path.

For: architects | Updated: 2026-04-26

📝 Living ADR-0002: MCP Server Registration via ~/.mcp.json (amended by ADR-0017)

Registration mechanism unchanged; path moved from a separate icn-ops/ repo into ops/mcp/ in the main ICN repo (decision amended by ADR-0017).

For: developers | Updated: 2026-04-26

📝 Living ADR-0010: App Topology (decision superseded by ADR-0017)

Architectural decision record on app topology — DECISION superseded by ADR-0017 (canonical-roots table); ADR file remains at canonical path as institutional memory.

For: architects | Updated: 2026-04-26

📝 Living ADR-0012: Federation State Origin Model (decision amended by ADR-0013)

Model C (Explicit Parallel) for federation clearing state origins. Decision still holds; Step 3 status now owned by ADR-0013.

For: architects | Updated: 2026-04-26

📝 Living ADR-0013: Federation Clearing Adoption Contract

Step 3 architecture for federation clearing adoption (3a–3d implemented). Open items remain: FederationProvenance not Sled-persisted, coop_a_did empty in execution handler, store-isolation tests not written. Verified unresolved 2026-04-26.

For: architects | Updated: 2026-04-26

📝 Living ADR-0014: Constitutional Object Model — AuthorityClass, AuthorityGrant, TypedScope, Mandate

Semantic freeze for the four governance constitutional types. Decision: accepted; implementation: partially landed (types + accepted-decision minting seam land at the governance app layer; kernel dispatch is not yet gated by mandates). See ADR-0019 for the minting/persistence seam decision.

For: architects, developers | Updated: 2026-04-26

📝 Living ADR-0015: Service Discovery Auth Semantics — Auth-gated with Enumeration-Safe 404

Decision: all /v1/services/* require JWT; missing/unauthorized -> 404 (enumeration-safe). Implementation status (2026-04-26): needs verification — route-level auth gating not visible in api/services.rs; follow-up audit issue suggested.

For: architects, developers | Updated: 2026-04-26

📝 Living ADR-0017: Monorepo Consolidation with Explicit Internal Boundaries

Canonical roots table for the consolidated monorepo: icn/, icn/apps/, apps/, website/, ops/mcp/, ops/state/, docs/, docs/adr/, deploy/, sdk/, web/. Decision supersedes ADR-0001 and ADR-0010; amends ADR-0002.

For: architects, developers | Updated: 2026-04-26

📝 Living ADR-0018: ADR Lifecycle and Canonical Decision Index

ADR lifecycle vocabulary (proposed/accepted/amended/superseded/deprecated), metadata convention (YAML frontmatter going forward, classic + bullet still supported), tooling contract for ops/mcp/src/tools/decisions.ts. Documents the docs/adr/ canonicalization landed in PR #1637.

For: architects, developers | Updated: 2026-04-26

📝 Living ADR-0019: Authority Grant Minting and Mandate Persistence Seam

Records the deterministic seam where accepted governance decisions emit zero or more truthful AuthorityGrants plus exactly one Mandate. Conservative minting (only steward-appointment / steward-reconfirmation today); pending-grants fall-through is the truthful failure mode; kernel dispatch is NOT gated by mandates. Implementation: partially landed.

For: architects, developers | Updated: 2026-04-26

📝 Living ADR-0020: Institutional Bootstrap Activation and Standing Read Model

Reusable activation chain: package manifest -> private overlay -> bootstrap apply -> charter activation -> entity/structure/role creation -> /me/standing -> (future) action cards. Locks the boundary between ICN runtime contract and institution-package vocabulary. Steps 1-6 implemented; action cards (icn#1608) future.

For: architects, developers | Updated: 2026-04-26

📝 Living Abuse-case hardening strategy

Strategy / doctrine doc codifying ICN's institutional-failure-mode hardening layer: the substrate must not become an administrative panel with receipts. Ten one-line doctrine rules (receipts prove events not legitimacy; authority shortcuts must label themselves as shortcuts; unresolved standing is not standing in production; accepted is not applied; convenience paths must not become authority paths; bootstrap is not democracy; a capability token is not a mandate; a UI must not launder uncertainty into confidence; privacy posture is not private content; index absence is not record absence). Ten code-anchored abuse stories and matching hardening tracks: narrowing the broad governance:write scope, marking direct membership mutation and direct charter activation as bootstrap-only shortcuts with explicit administrative receipts, fail-closed resolver/checker policy in production, closed lifecycle vocabulary across API/shell/cockpit, per-effect idempotency, governance-parameter sanity bands, shell/cockpit fixture matrix, PrivateEvidence non-rendering regression, typed-receipt atomicity inventory. Strategy only — no runtime change, no new ADR, no new contract URN, no production-readiness claim. Companion to ARCHITECTURE_DUE_DILIGENCE.md and upstream of security/production-hardening.md.

For: architects, contributors | Updated: 2026-05-16

📝 Living Architectural Gaps & Remediation Plan

Analysis of architectural weaknesses and remediation strategies

For: architects | Updated: 2026-03-10

📝 Living Architecture due diligence

Process / principle doc codifying two checklists authors and reviewers run when introducing or changing an architectural surface: (1) convenience-vs-authority (centralized convenience is fine; centralized authority is not — name dependencies and assign them to the correct layer), and (2) participation access (language, plain-language, vision, motor, cognitive, bandwidth, AT compatibility, accommodation privacy — designed-in, not bolted on). Triggered by the rehearsal evidence schema's non-DNS $id decision and grounded in docs/design-language/accessibility.md.

For: architects, contributors | Updated: 2026-05-04

📝 Living Canonical Encoding

Specification for deterministic serialization of ICN data structures

For: developers, architects | Updated: 2026-03-10

📝 Living Cells and Scopes Architecture

Design of ICN's cell-based organization model and scope hierarchy

For: architects, developers | Updated: 2026-03-15

📝 Living Client Model Architecture

Architecture of ICN client models and their relationship to kernel primitives

For: developers, architects | Updated: 2026-03-15

📋 Draft Cooperative Domain Infrastructure

Forward-direction architecture for cooperative institutional infrastructure: institutional domains, sessions, devices, services, workspaces, artifacts, vaults, agreements, DNS bindings, hybrid commons cloud, workstations. Names what is implemented today vs what is future buildout.

For: developers, architects | Updated: 2026-04-27

📋 Draft Cooperative Tool Commons

Forward-direction tool ecosystem: core base tools, specialized suites, third-party tools, manifests, service identities, capability grants, anti-capture rules. Companion to Cooperative Domain Infrastructure.

For: developers, architects | Updated: 2026-04-27

📋 Draft Domain Routing and DNS Bindings

Forward-direction design distinguishing institutional domains, icn.zone utility routes, custom public domains, short routes, and binding verification receipts. Companion to Cooperative Domain Infrastructure.

For: developers, architects | Updated: 2026-04-27

📝 Living Federation Actions

Design of federated action execution across network boundaries

For: architects, developers | Updated: 2026-03-10

📝 Living Federation Interoperability Contract

Specification of contracts and interfaces for federation interoperability

For: architects, developers | Updated: 2026-03-10

📝 Living Governance State Machine Architecture

State machine design for governance decision-making and enforcement

For: architects, developers | Updated: 2026-03-12

📋 Draft ICN Integrated System Model

Forward-direction integrating spine across substrate, governance, CCL contract layer, service hosting, governed workloads, storage as custody, backup and recovery doctrine, networking, member shell, and steward cockpit. Locates every subsystem inside one civic loop (identity → standing → authority → action card → authorized action → CCL/runtime evaluation → storage/compute/governance/economic transition → receipt → sync/federation → member shell + steward cockpit → challenge/repair). Preserves the meaning firewall, separates substrate from app from institution package from teaching surface, and marks forward-direction objects (InstitutionalDomain, DomainPolicy, GovernedServiceBinding, WorkloadManifest, RuntimeProvider, StorageSpec, BackupPolicy, ReplicationPolicy, RecoveryPolicy, ArchivePolicy, IntegrityPolicy) as forward-direction. Names CCL as the executable institutional rule layer inside governance; not sovereign. Names Cooperative OS as packaging direction, not current implementation scope. Advances #1793 — does not by itself close it.

For: developers, architects, contributors | Updated: 2026-05-14

📝 Living Identity and Membership Architecture

Design of identity primitives, membership verification, and member lifecycle

For: architects, developers | Updated: 2026-03-10

📝 Living Institutional Feedback and Support Primitives

Doctrine for institutional feedback, member signals, governed indicators, action cards, temporary authority, resource governance, and support programs as planned ICN primitives

For: developers, architects | Updated: 2026-04-25

📝 Living Institution Package Boundary

Normative definition of ICN platform vs institution package boundary, CCL vs host runtime split, and reusable primitive set for NYCN/Summit

For: developers, architects | Updated: 2026-04-16

📝 Living Kernel/App Separation Architecture

Normative specification of kernel-app boundary, infection vectors, and capability propagation rules

For: developers, architects | Updated: 2026-03-17

📋 Draft Model Workloads and Deliberation

Forward-direction design for model-driven advisory compute workloads, deliberation packets, model registry, advisory vs deterministic classification, and the rule that compute assists but does not govern.

For: developers, architects | Updated: 2026-04-27

📝 Living Scope Bounded Trust

Trust model design limiting trust scope to organizational boundaries

For: architects, security | Updated: 2026-03-10

🔒 Canonical Constitutional Genesis

Immutable substrate invariants, bootstrap sequence, and governance boundaries

For: developers, agents, stakeholders | Updated: 2026-04-10

📋 Draft ICN Kernel Contracts Specification

Specification of kernel contract primitives

For: architects, developers | Updated: 2026-03-10

📋 Draft Artifact Registry and Scoped Vault — boundary, v0 design

Defines the design-level shape of ArtifactRegistry v0 (the institutional record of content-addressed artifacts and their metadata) and ScopedVault (the privacy-enforced container for restricted objects), and the boundary between them. ArtifactRegistry fields: artifact_id, content_hash, blob_location, mime_type, size, artifact_class, scope, created_by/at, access_policy_ref, retention_policy_ref (resolving to BackupPolicy / ArchivePolicy per #1816, where retention is a field — there is no separate RetentionPolicy object), provenance_refs, receipt_refs, version_ref, parent_refs, exportability. ScopedVault fields: vault_id, owning_scope, privacy_class (from the forward-direction #1792 taxonomy, kept explicitly distinct from the existing in-code PrivacyClass enums in icn-kernel-api/src/compute.rs and icn-boundary/src/types.rs), encryption_key_model_placeholder (deferred to #1767), access_policy, retention_policy, backup_export_policy, access_receipt_requirement, export_receipt_requirement, private_overlay_binding. Names ArtifactReceipt (existing Layer 2 receipt in icn-kernel-api/src/proofs.rs:30) as distinct from ArtifactRegistry (the new registry record). Reuses canonical types verbatim: Hash / Did / Signature / StorageClass / DataLocality (kernel-api), and StorageSpec / BackupPolicy / ReplicationPolicy / RecoveryPolicy / ArchivePolicy / IntegrityPolicy (per #1816). Cross-links #1792's forward-direction PrivacyClass / DisclosurePolicy / PrivateObjectRef / AccessReceipt / ExportReceipt / RedactionMap vocabulary; surfaces the existing-PrivacyClass-enum naming collision and defers reconciliation to the implementation tranche. Specifies a closed artifact_class taxonomy (Document per #1536, ComputeOutput per #1815, EvidencePacket per #1748, PrivateEvidence per #1792, Backup per #1816, SettlementRecord per #1634, Other) growable by ADR amendment. Maps six integration points and a 13-row failure/safety table. Identifies first safe implementation slice: ArtifactRegistry v0 schema + Document artifact-class + read-only steward-cockpit registry surface. Advances #1798 — does not by itself close it.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft CCL Policy Registry and Hook Contract

Defines the CCL policy registry, policy-version model, adoption contract, evaluator-selection contract, evaluator-output → effect-plan contract, review/audit surfaces, and failure/safety rules. Bridges DomainPolicy (adopted CCL policy references) and the Stage 2/3 CCL hook points in the effect dispatch chain. Reuses existing types from icn-ccl (ContentHash, SemanticVersion, CclDocument, SchemaVersion, Capability) and icn-governance (GovernanceDecisionReceipt, GovernanceProof, Mandate, AuthorityGrant, EffectManifest). Specifies eight-step adoption contract, deterministic evaluator selection with fail-closed semantics for missing/conflicting/deprecated bindings, structured evaluator output (decision suggestion / reasons / effect plan / disclosure policy / receipt expectations / authority basis), audit surfaces (registry shows drafts and adopted versions; receipts carry policy_version_id provenance), and a complete failure/safety table. Extends ADR-0021 (CCL safety), ADR-0022 (schema bridge), and ADR-0023 (institutional process language) without redefining them. Advances #1817 — does not by itself close it. Defers wire-stable schema, evaluator execution envelope, adoption proposal lifecycle, federation mandate recognition, and other forward-direction items to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft Compute Placement Policy

Defines the placement policy contract sitting between ADR-0030 (compute workload manifest and authority boundary) and ADR-0031 (commons compute admission and settlement policy): the policy decision a workload passes through before admission, execution, or rejection. Names seven closed placement classes (LocalOnly, DomainLocalPreferred, LocalDomainBound, FederationBound, CommonsEligible, ExternalCustodianRequired, RejectedByPolicy) using the corrected scope vocabulary from docs/architecture/INSTITUTION_PACKAGE_BOUNDARY.md §C3 (LocalDomain not Coop). Specifies the two-layer decision contract (eighteen candidate inputs; Layer 1 policy-oracle return value is PlacementDecision or PlacementRejected, with optional attached PlacementFallbackReceipt and surfaced ReviewRequiredActionCard; Layer 2 post-placement artifact is ExecutorAdmissionDecision), the placement hierarchy (local-first default), nine boundary rules, structured fallback behavior with PlacementFallbackReceipt as an evidence attachment on the parent PlacementDecision, four example domain policies, sixteen-row failure/safety table, operator/steward dashboard rendering, member-shell rendering, and the explicit receipt mapping (none of the placement artifacts is a new ADR-0026 receipt class; they are evidence-artifact identifiers traveling inside existing EffectDispatchEvidence envelopes per docs/spec/effect-dispatch-contract.md Stage 5). Fixes three vocabulary boundaries: scope (LocalDomain not Coop per #1825), execution vs capacity (execution budget is policy-facing; fuel_limit preserved as runtime field; capacity reserved for executor/node availability; resource envelope, allocation, settlement are spec-facing terms), and settlement vs payment (settlement / unit / position / obligation / allocation / receipt — not payment / currency / balance / wallet). Names the first safe proof-loop (read-only placement-decision rehearsal) and dry-run fallback exercise. Preserves legacy code identifiers (FuelLimit, payment_rate, payment_currency, DataLocality::CoopReplicated, icn-coop crate, coop_core paths, coop-scoped comments in icn-rpc) without endorsement; reconciliation tracked as named follow-ups. Advances #1801 — does not by itself close it. Defers wire-stable PlacementDecision schema, ExecutorAdmissionDecision schema, scheduler integration, fuel/payment legacy reconciliation, federation agreement adoption surface, and external custodian policy surface to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft Effect Dispatch Contract

End-to-end behavior contract for turning an accepted governance decision into bounded effects with receipts. Names the five-stage chain (decision recording → mandate minting → effect plan → dispatch → application + evidence) and harmonizes existing types (GovernanceDecisionReceipt, GovernanceProof, GovernanceDecisionAttestation, Mandate, AuthorityGrant, EffectManifest, KernelEffect, EffectOutcome, InstitutionalEffectRecord, EffectDispatchEvidence) with ADRs 0014, 0019, 0025, 0026, 0027, 0029, 0030, 0031. Splits idempotency, partial-failure, challenge/reversal, CCL hook, privacy/redaction, action-card, and package-boundary rules into current contract vs forward schema work. Identifies #1748 process-transition receipts as the first safe runtime dogfood slice. Advances #1797 — does not by itself close it. Defers kernel-side mandate enforcement, federation mandate recognition, EffectRecord taxonomy implementation, stable idempotency-key schema, and other future-direction items to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft Governed Service Binding, Workload Manifest, and Runtime Provider

Defines GovernedServiceBinding (institutional record binding a workload to a domain), WorkloadManifest (declared shape of what a workload does), and RuntimeProvider (substrate-side executor interface) as the integrating envelope for hosted services, installable tools, compute jobs, CCL evaluators, and future container or microVM workloads. Generalizes existing types: ComputeTask (ADR-0030, implemented in icn-compute) is the compute-specific projection of WorkloadManifest; ToolManifest/ToolBinding (RFC-0017) is the tool-install projection; Executor (icn-compute) is the compute-specific RuntimeProvider; EvaluatorBinding (ccl-policy-registry.md) is a specialized GovernedServiceBinding for CCL evaluators. Names seven closed runtime classes (deterministic legitimacy compute, utility computation, container, microVM, accelerator, local device, external bridge), a ten-state lifecycle (declare → authorize → allocate → bind → run → observe → upgrade → suspend → remove → export), the five-stage hosted→governed→adapted→native maturity progression as binding-state requirements, eight boundary rules, and an eleven-row failure/safety table. Advances #1815 — does not by itself close it. Defers wire-stable schema, generic RuntimeProvider Rust trait, per-class provider specs, stage acceptance gates, BackupPolicy data model, and federation-side binding recognition to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft ICN Civic Shell v0

Defines the ICN Civic Shell as the v0 composition contract that ties together the public website (truth boundary per ADR-0032 and forward-direction ADR-0033), docs/spec/member-shell-v0.md (#1830), docs/spec/steward-cockpit-v0.md (#1831), docs/pilots/no-cli-organizer-member-rehearsal-workflow.md (#1724/#1726), docs/architecture/SERVICE_HOSTING_MODEL.md, docs/architecture/AUTH_BRIDGE_AND_DID_LOGIN.md, docs/architecture/PROTOCOL_SELECTION_FOR_MEMBER_SERVICES.md, docs/strategy/SOVEREIGN_FORGE.md, docs/ops/FORGEJO_DEPLOYMENT_PLAN.md, and docs/ops/SERVICE_GOVERNANCE_TEMPLATE.md into a single top-level public-plus-logged-in institutional operating shell. The first draft used the rejected ICN Headquarters metaphor; the v0 name is ICN Civic Shell. Composition only — the Civic Shell composes existing ICN surfaces and does not supersede the Member Shell, the Steward Cockpit, the public website, the service-hosting model, or the auth-bridge model. Names the public exterior (maturity-banded status / development updates / public roadmap / service-health posture / public forge window / docs and onboarding routes, anchored to ADR-0032 honesty-over-polish and ADR-0033 evidence-link discipline) and the logged-in interior (identity / active domain / active role / authority scope plus member dashboard, action cards, notifications, governance room, workroom, records / receipts room, forge room, operations control room, communications room, vault / privacy posture, settings / identity). Names the domain-and-route doctrine treating intercooperative.network as canonical public identity/truth and icn.zone as short operational/access/discovery without claiming any icn.zone route exists today, and frames ICN-PRIVATE / ICN-EDGE segmentation as current/planned operational context rather than ICN product doctrine. Names a ten-room model (Public Window, Lobby, Member Desk, Governance Room, Workroom, Records Room, Forge Room, Operations Control Room, Communications Room, Vault / Privacy Posture). Reaffirms the auth-bridge rule (OIDC authenticates sessions; ICN authorizes institutional power; receipts prove institutional transitions) and the hosted → governed → ICN-native progression for services. Anchors Civic Shell status labels to the proof-level taxonomy tracked in #1796. Preserves the closed regulatory-safe vocabulary (settlement / position / obligation / allocation / receipt / provenance). Explicit non-goals: no app implementation, no new endpoint, no auth implementation, no Keycloak / Forgejo / Matrix deployment, no n8n workflow build, no DNS / K3s / VLAN / network mutation, no public admin surfaces, no private data in repo, no Phase 2 completion claim, no formal NYCN pilot claim, no live-federation claim, no production-readiness claim, no replacement of existing member-shell or steward-cockpit specs. Advances the Civic Shell composition concept — does not close any sibling issue. Defers the authenticated shell route map, the public status / development updates content set, the member-dashboard / notification model, the forge-room GitHub-adapter / Forgejo-target adapter, the operations-control-room authority model, the project-index proof-level integration, the service-list / service-hosting reconciliation, and the communications-room Matrix / bridge / announcement boundary to named follow-ups (suggested only; not opened by this PR). network-ops was not read locally in this session; operational context is operator-provided summary only and does not make network-ops a public source of ICN truth.

For: architects, developers, contributors, operators | Updated: 2026-05-21

📋 Draft InstitutionalDomain and DomainPolicy

Defines InstitutionalDomain as the governed operating jurisdiction and DomainPolicy as the persistent rule bundle a domain adopts. Specifies the design-level object outline for both, the boundary lines (domain is not a DNS name, node, federation, package, app, member account, storage bucket, CCL document, or tenant), placement in the civic loop, DomainPolicy evaluation rules (consulted at decision admission, mandate composition, effect plan generation, binding adoption; never in the kernel), the nine-stage domain lifecycle (declare → adopt charter/policy → initialize standing → bind routes/services/tools → operate → amend → federate → suspend/repair → export/exit/archive), and the relationship to the effect dispatch chain (#1797). Harmonizes with COOPERATIVE_DOMAIN_INFRASTRUCTURE.md (design-direction overview), DOMAIN_ROUTING_AND_DNS_BINDINGS.md, INSTITUTION_PACKAGE_BOUNDARY.md, KERNEL_APP_SEPARATION.md, and ADR-0014's constitutional object model. Identifies adjacent named-only concepts (DomainSession, DeviceIdentity/DeviceEnrollment, ServiceIdentity, Workspace, AgreementRegistry, ToolRegistry, DnsBinding) and defers their full specification to named follow-ups. Advances #1794 — does not by itself close it. No runtime, no schema, no wire format.

For: architects, developers, contributors | Updated: 2026-05-14

📋 Draft Member Shell v0

Defines the ICN member shell as the primary participation surface at v0: mobile-first, offline-tolerant, accessibility-first, plain-language-first. The shell is an app-side rendering surface that consumes ADR-0020 /me/standing, ADR-0027 ActionCard schema, ADR-0026 receipts, the closed seven-string sync vocabulary from docs/spec/network-anti-entropy-proof-loops.md (#1829), and the closed seven-string placement vocabulary from docs/spec/compute-placement-policy.md (#1826), without redefining any of them. Names five hard boundary lines (vs steward cockpit #1795, vs node operator civic-role surface #1613, vs public website, vs institution-package skin, vs backend/runtime), ten design principles, a ten-surface information architecture (Home/Today, My Standing, Current Scope, Action Cards, Decisions/Governance, Receipts, Records/Artifacts, Privacy/Access, Sync/Offline status, Help/Challenge/Review/Exit), the ActionCard rendering contract (per-field requirements + closed card states), the standing surface contract, the ten-step signing/confirmation flow with reversibility/privacy/sync warnings, the three-tier receipt rendering (plain summary → explanation → formal record under details), offline/low-bandwidth behavior including draft-intent vs sent-waiting-for-receipt vs confirmed labeling, privacy and ScopedVault member affordances (existence + scope + access path only, never body content), the twelve-category accessibility gate inherited from ADR-0028 / docs/design/ORGANIZER_MEMBER_ACCESSIBILITY_GATE.md, a closed v0 member-facing status vocabulary (sync states + execution-scope strings + action-lifecycle strings + privacy/disclosure strings + receipt-class plain-language labels), eighteen-row failure/safety table, and three fixture-first dogfood slices (read-only standing+ActionCard+receipt+sync-delayed; signing flow rehearsal; offline/degraded sync rehearsal). No new endpoints, no platform decision, no native-app implementation, no schema redefinition, no new receipt classes. Advances #1818 — does not by itself close it. Defers the live UI implementation, the platform decision (iOS/Android/PWA/web), the signal_rule and obligation_lifecycle source-path enablement, the multilingual rendering integration, and the Layer 4 ProvenanceQuery consumption to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-15

📋 Draft Network Anti-Entropy Proof Loops

Defines the design-level proof-loop contract beneath compute placement (#1801), storage durability (#1816), artifact registry (#1798), receipt clearing, federation settlement finality (#1365), steward cockpit (#1795), and member shell (#1818). Names the eight-phase anti-entropy institutional evidence loop (schedule/trigger → probe → compare → classify → plan → apply → evidence → surface), thirteen forward-direction proof-artifact identifiers (AntiEntropyProbe, StateDigest, ReceiptDigest, ArtifactDigest, PeerSyncReport, DivergenceEvidence, RepairPlan, RepairReceipt, SyncDegradedStatus, QuorumSyncCheck, FederationSyncWindow, RoutingProof, RedundancyProof), nine state classes covered (governance state, receipts, artifact metadata, scoped vault refs, storage replicas, compute receipts, settlement records, federation membership, CCL policy versions), eighteen divergence classes, ten load-bearing boundary rules (no silent repair of governance-authoritative state; no repair beyond authority; no raw private content in gossip; no widening of locality / disclosure; no degraded-as-healthy rendering; no federation / commons placement without fresh QuorumSyncCheck within FederationSyncWindow; no settlement finality without anti-entropy proof; no member-facing lie; no production claim; no Coop-prefixed generic primitives), privacy and custody rules, steward cockpit surface vocabulary, member shell surface vocabulary (seven plain-language strings), eighteen-row failure/safety table, and three fixture-first proof-loop slices (read-only receipt-index rehearsal, RedundancyProof simulation, QuorumSyncCheck fixture). Anchors against existing primitives in icn-gossip (BloomFilter, VectorClock, PeerSyncManager, PartitionDetector, anti_entropy.rs module) and icn-core (AntiEntropyConfig, spawn_anti_entropy_task) without redefining them. No new ADR-0026 receipt classes introduced; proof artifacts travel inside existing Stage 5 EffectDispatchEvidence or Layer 2 ArtifactReceipt envelopes. Advances #1799 — does not by itself close it. Defers wire-stable schema, devnet fixture implementation, federation-side quorum window protocol, steward / member surface rendering specs, and private-object digest proof contract to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-15

📋 Draft Steward Cockpit v0

Defines the ICN steward cockpit as the operator-facing civic-infrastructure surface for node and domain stewards at v0 — the operator/steward complement of docs/spec/member-shell-v0.md (#1830). Consumes verbatim the 9-field cockpit surface from docs/spec/network-anti-entropy-proof-loops.md (#1829) for the Network / Federation section, the 14-field operator/steward dashboard from docs/spec/compute-placement-policy.md (#1826) for the Compute / Commons section, and the storage durability policy objects from docs/spec/storage-durability-policies.md (#1823). Names six hard boundary lines (vs member shell #1830, vs node operator civic-role surface #1613, vs public website, vs institution-package skin, vs backend/runtime, vs surveillance/admin-control panel), ten v0 design principles (stewardship-not-domination, proof-before-confidence, degraded-is-visible, privacy-posture-not-private-content, receipts-explain-state, required-actions-explicit, authority-basis-visible, scope-visible, member-impact-summary-always-present, no-financial-framing), twelve cockpit information-architecture surfaces (Overview/Required Actions, Node Status, Domain Status, Network/Federation, Receipt Store, Storage/Artifacts/ScopedVault, Governance/Process, Compute/Commons, Participation Access, Privacy Posture, Backup/Export/Recovery, Warnings/Incidents/Repair), fourteen operator action-card scenarios with source class / authority pattern / expected outcome, per-surface rendering contracts that consume merged sibling specs without redefining them, a closed v0 operator-facing status vocabulary plus a verbatim member-impact summary mapping into the merged #1829 member-shell sync vocabulary, twenty-row failure/safety table including the load-bearing 'dashboard says healthy while member shell says degraded' v0 violation, and three fixture-first dogfood slices (read-only receipt-store + anti-entropy degraded/repair fixture; storage replica / backup overdue / restore-test receipt fixture; compute placement review-required fixture). No new endpoints, no frontend technology decision, no surveillance console, no private-data preview, no production-dashboard claim. Advances #1795 — does not by itself close it. Defers the live cockpit implementation, the frontend technology decision, the per-surface implementation specs, and the cross-link audit against icn-obs metric module renaming to named follow-ups.

For: architects, developers, contributors, operators | Updated: 2026-05-15

📋 Draft Storage Durability Policies — Backup, Replication, Recovery, Archive, Integrity

Defines six forward-direction policy objects that bind storage classes to durability commitments: StorageSpec (binding between a workload/service/domain and storage), BackupPolicy (frequency, target, integrity, retention), ReplicationPolicy (replicas, placement, anti-entropy), RecoveryPolicy (restore objective class, drill cadence, restore authority), ArchivePolicy (long-term retention, immutability, access), and IntegrityPolicy (verification cadence, repair path). Reuses existing kernel-level types (StorageClass and DataLocality from icn/crates/icn-kernel-api/src/storage.rs) verbatim and acknowledges the drift between the 3-variant kernel enum and the 7-class spine-doc custody taxonomy (canonical store / service state / artifact-blob / volume-block / scoped vault / secret-key / cache-derived) — reconciliation deferred to a named follow-up. Names restore-test receipts as their own concept; mandates that backups, replicas, archives, and exports inherit source locality and disclosure constraints and MUST NOT broaden them. Specifies authority rules tying restore of authoritative state to ADR-0014 mandates and the effect dispatch chain (Stage 5 evidence). Provides a sixteen-row failure/safety table covering missing spec, locality boundary crossing, restore without authority, cache treated as canonical, secret material in ordinary backup, archive quiet deletion, etc. Advances #1816 — does not by itself close it. Defers wire-stable schema, restore-test receipt envelope, locality/privacy inheritance checks, archive verification contract, backup-provider interface, and anti-entropy integration to named follow-ups.

For: architects, developers, contributors | Updated: 2026-05-14

Design

📝 Living RFC: ICN Commons Evolution

Design for evolving ICN commons governance and stewardship models over phases 0-3

For: architects, stakeholders | Updated: 2026-03-15

📋 Draft ICN Prompt Library

Tactical prompt library for doctrine-aligned image generation and visual exploration

For: architects, developers, designers | Updated: 2026-04-22

📋 Draft ICN Visual Explainer Bible

Control-plane doctrine for every ICN visual explainer — source hierarchy, truth labels, vocabulary rules, accessibility floor, core explainer models, brief gate, generated-image workflow, production-source rule. Governs diagrams, infographics, generated images, and source assets across website, docs, decks, and product surfaces.

For: architects, developers, designers, stakeholders | Updated: 2026-05-13

📋 Draft ICN Visual System

Stable visual doctrine for ICN across website, docs, product surfaces, onboarding, demo materials, and future institutional deployments

For: architects, developers, stakeholders | Updated: 2026-04-22

📝 Living Minimal Viable Coop Track

Program for shipping one end-to-end cooperative use case for production 6-month validation

For: product, architects | Updated: 2026-03-15

📝 Living Organizer / member accessibility gate

PR-time review checklist for any organizer- or member-facing surface (rehearsal shells, action-card surfaces, preview/review surfaces, evidence-packet rendering, receipt/provenance review, member-facing governance flows). Twelve review categories with four-value gate outcomes (Pass / Pass with documented follow-ups / Blocked / N/A with reason); copy-paste PR checklist block. Operational layer beneath ADR-0028, design/ACCESSIBILITY_BASELINE.md, and design-language/accessibility.md; companion to architecture/ARCHITECTURE_DUE_DILIGENCE.md participation-access half. Not a CI gate; not a legal accessibility audit; not production-readiness.

For: architects, contributors, design | Updated: 2026-05-05

📋 Draft ICN Visual Asset Register

Live register of planned and tracked visual assets for ICN. One row per asset (VE-NNN). Indexes briefs in docs/design/assets/briefs/. Initial rows cover the closure loop, scope model, decision-to-receipt, member shell concept, kernel/app separation, federation, commons/compute, action card anatomy, receipt anatomy, steward cockpit, regulatory-safe state, and what ICN is / is not.

For: architects, developers, designers, stakeholders | Updated: 2026-05-13

📋 Draft ICN Visual Assets — Directory README

Orientation for the visual-asset planning layer — where production assets live, where sketches live, asset lifecycle, and what does not go in this directory.

For: architects, developers, designers | Updated: 2026-05-13

📋 Draft ICN Visual Review Checklist

Pre-ship gate for every ICN visual explainer. Source grounding, truth label, vocabulary, accessibility floor, substrate honesty, kernel/app boundary, scope/package boundary, visual grammar, generated-image rules, production-source rule.

For: architects, developers, designers | Updated: 2026-05-13

📝 Living Capability-Based Feature Gating

System for graceful version handling via capability advertisement and negotiation

For: developers | Updated: 2026-03-15

📝 Living Compute Classes: Legitimacy vs Utility

Design distinguishing between legitimacy compute and utility compute subsystems

For: architects, developers | Updated: 2026-03-10

📝 Living Compute Substrate Design

Design for ICN's execution environment and compute resource management

For: architects, developers | Updated: 2025-11-18

📝 Living ICN Deterministic Core Specification

Specification for deterministic computation substrate ensuring reproducible state machines

For: developers, architects | Updated: 2026-03-15

📝 Living ICN Economic Architecture

Design of value flows, contribution accounting, and economic incentives

For: architects, product | Updated: 2026-01-17

📝 Living Economic Vision

Long-term vision for ICN's economic model and cooperative ownership

For: architects, stakeholders | Updated: 2026-03-10

📋 Draft Contribution Credits Design

Design for tracking and accounting for contributions to cooperative entities

For: architects | Updated: 2026-03-10

📝 Living Economic Modeling for Mutual Credit

Simulation and validation of mutual credit economic models

For: architects | Updated: 2026-03-10

📋 Draft Economic Safety Design

Safety mechanisms preventing economic attacks and misuse of economic primitives

For: architects, security | Updated: 2026-03-10

📝 Living Economics Truth Contract

Truth contract auditing all economics-related code against specification

For: architects, developers | Updated: 2026-03-10

📝 Living Economic Model Validation

Maps economic operations against implementation state

For: architects | Updated: 2026-03-10

📝 Living Entity Dissolution: Before and After

Practical example of entity dissolution workflow

For: architects | Updated: 2026-03-10

📋 Draft Entity Dissolution Design

Design for graceful shutdown and dissolution of cooperative entities

For: architects | Updated: 2026-03-10

📝 Living Execution Bridge Specification

Authoritative design for bridging between ICN and external execution environments

For: architects, developers | Updated: 2026-03-10

📝 Living ICN Project Governance

Governance structure for ICN development and decision-making

For: team, stakeholders | Updated: 2026-03-10

📋 Draft Governance Primitives

Fundamental governance building blocks and decision-making patterns

For: architects | Updated: 2026-03-10

📋 Draft Governance Framework

Comprehensive governance framework for cooperative decision-making

For: architects, product | Updated: 2026-03-10

📝 Living Governance Model Validation

Maps governance operations against implementation state

For: architects | Updated: 2026-03-10

📝 Living Trust-Graph Integration for Witness Validation

Trust-graph integration for witness validation in ledger operations

For: architects, security | Updated: 2026-03-10

📝 Living Institution-in-a-Box

Design pattern for embedding ICN primitives into legacy digital infrastructure with CRDTs and replication

For: architects, product | Updated: 2026-03-15

📋 Draft IPv6 Endpoint Sets Design

Design for managing multiple network endpoints with IPv6

For: architects, developers | Updated: 2026-03-10

📋 Draft Multi-Device Identity Design

Design for managing identity across multiple devices within a single agent

For: developers, architects | Updated: 2026-03-10

📋 Draft NAT Traversal Design

Design for peer-to-peer connectivity across NAT boundaries

For: architects, developers | Updated: 2026-03-10

📋 Draft Platform Layer Design

Design for platform abstractions and portability across systems

For: developers, architects | Updated: 2026-03-10

📋 Draft Post-Quantum Cryptography in ICN

Experimental post-quantum cryptography integration and migration strategy

For: architects, security | Updated: 2026-03-10

📋 Draft Razeto Integration Design

Design for integrating external systems via Razeto protocol

For: architects, developers | Updated: 2026-03-10

📝 Living Regulatory-Safe Verifiable State

Design maintaining provable state satisfying regulatory audits without exposing ledger internals

For: architects, compliance | Updated: 2026-03-10

📋 Draft Repository Reality Map

Mapping between git repository structure and architectural reality

For: developers | Updated: 2026-03-10

📋 Draft Scheduler Evolution Plan

Plan for evolving ICN's scheduling substrate over multiple phases

For: architects | Updated: 2026-03-10

📋 Draft Scope Scheduling Design

Design for scheduling and resource allocation within organizational scopes

For: architects, developers | Updated: 2026-03-10

📝 Living Social Recovery Guide

M-of-N social recovery mechanism for identity recovery

For: architects, security | Updated: 2026-03-10

📋 Draft Social Recovery Design

M-of-N social recovery mechanism for lost devices and identity recovery

For: architects, security | Updated: 2026-03-10

📋 Draft Gossip SignedEnvelope Migration

Migration plan for gossip cryptographic authentication

For: developers | Updated: 2026-03-10

📋 Draft IdentityBundle Refactor Plan

Hardware-backed signing implementation plan

For: developers | Updated: 2026-03-10

📝 Living Module Splitting Analysis

Analysis of large modules for potential splitting

For: architects | Updated: 2026-03-10

📋 Draft ICN Mobile Member UX Spec v1

Mobile application UX specification

For: developers, product | Updated: 2026-03-10

📋 Draft SDIS: Secure Distributed Identity System

SDIS design with implemented flows and planned endpoints

For: architects, developers | Updated: 2026-03-10

Guide

🔒 Canonical Contributing to ICN

Architectural guardrails, contribution workflow, code standards, and review process

For: contributors | Updated: 2026-03-01

🔒 Canonical Getting Started with ICN

Quick-start guide for new developers to set up ICN in minutes

For: developers, contributors | Updated: 2026-03-15

📝 Living Deploy Test Network

Guide for setting up multi-node test networks for validation

For: developers, testers | Updated: 2026-03-10

📝 Living Deploy to K3s

Steps for deploying ICN to Kubernetes using K3s

For: operators, developers | Updated: 2026-03-10

📝 Living Quick Deploy Guide

Fast path for getting ICN running locally

For: developers, operators | Updated: 2026-03-10

🔒 Canonical ICN UX Language Guide

Enforced communications style guide for regulatory-safe messaging

For: all | Updated: 2026-03-10

📝 Living Federation Roadmap Implementation Guide

Step-by-step federation feature implementation guide

For: developers | Updated: 2026-03-10

📝 Living Trust Multi-Graph Migration Guide

Migration guide for multi-graph architecture

For: developers | Updated: 2026-03-10

📝 Living Witness Signature Best Practices

Developer guide for witness signature implementation

For: developers | Updated: 2026-03-10

📝 Living ICN Development Environment

Setup guide for icn-dev development VM

For: developers | Updated: 2026-03-10

🔒 Canonical Documentation Style Guide

Consistent documentation formatting standards

For: contributors | Updated: 2026-03-10

🔒 Canonical Developer Guides

Index of guides for developers building on or contributing to ICN

For: developers | Updated: 2026-03-10

📋 Draft Internationalization (i18n) Guide

i18n implementation across Rust, React Native, web

For: developers | Updated: 2026-03-10

🔒 Canonical Operations Guides

Operational guides for running ICN deployments

For: operators | Updated: 2026-03-10

📝 Living Backup and Recovery Guide

Operator procedures for node backup and recovery

For: operators | Updated: 2026-03-10

📝 Living Backup and Restore: Operator Recovery

Low-level Sled database and keystore recovery

For: operators | Updated: 2026-03-10

📝 Living Daemon Mode with Governance Receipts

Phase 0 pilot daemon mode operations

For: operators | Updated: 2026-03-10

📝 Living NAT Traversal Pilot Test Guide

Manual testing guide for NAT traversal feature

For: operators, testers | Updated: 2026-03-10

📝 Living NAT Traversal Operations Guide

Configuring and operating nodes behind NAT

For: operators | Updated: 2026-03-10

📝 Living ICN Operations Guide

Comprehensive operational procedures and workflows

For: operators | Updated: 2026-03-10

📝 Living Pilot Smoke Runbook

Deterministic operator check for pilot deployment

For: operators | Updated: 2026-03-10

📝 Living Replication Operations Guide

Replication procedures for Phase 17 storage hardening

For: operators | Updated: 2026-03-10

📝 Living ICN Troubleshooting Runbooks

Step-by-step procedures for diagnosing operational issues

For: operators | Updated: 2026-03-10

🔒 Canonical User Guides

End-user documentation and tutorials

For: users | Updated: 2026-03-10

📝 Living Cooperative Setup Guide

Instructions for setting up a new cooperative on ICN

For: users | Updated: 2026-03-10

📝 Living Summit Decision Registry Demo

Demo script for decision registry and treasury spending

For: team, demo-users | Updated: 2026-03-10

📝 Living Pilot Coordinator Guide

Practical guide for cooperative coordinators deploying ICN

For: operators | Updated: 2026-03-10

📝 Living Pilot Deployment Playbook

Step-by-step guide for pilot cooperative deployment

For: operators | Updated: 2026-03-10

📋 Draft Keystore Version Migration

Guide for keystore format version migration

For: operators | Updated: 2026-03-10

📋 Draft ICN Version Upgrade Guide

Guide for upgrading between ICN versions

For: operators | Updated: 2026-03-10

📋 Draft Tail-Based Sampling Configuration

Tail-based sampling setup for traces

For: operators | Updated: 2026-03-10

🔒 Canonical Developer Onboarding Curriculum

Structured learning path for new ICN developers

For: developers, contributors | Updated: 2026-03-15

📝 Living Onboarding Assessments

Module checkpoints and self-review questions

For: developers | Updated: 2026-03-10

📝 Living Capstone: Local Two-Node ICN + Ledger Flow

Final capstone project demonstrating end-to-end ICN

For: developers | Updated: 2026-03-10

📝 Living Lab 01: Workspace Setup

Learning lab for workspace organization

For: developers | Updated: 2026-03-10

📝 Living Lab 02: Error Receipts and Tracing

Learning lab for structured errors and tracing

For: developers | Updated: 2026-03-10

📝 Living Lab 03: Mini Actor Runtime

Learning lab for actor model implementation

For: developers | Updated: 2026-03-10

📝 Living Lab 04: Firewall Oracle (Keystone Lab)

Keystone lab proving the Meaning Firewall boundary

For: developers | Updated: 2026-03-10

📝 Living Lab 05: Mini Ledger with Double-Entry

Learning lab for ledger implementation

For: developers | Updated: 2026-03-10

📝 Living Lab 06: Signed Envelopes with Replay Protection

Learning lab for cryptographic signatures

For: developers | Updated: 2026-03-10

📝 Living Lab 07: Gossip Sync with Vector Clocks

Learning lab for eventual consistency

For: developers | Updated: 2026-03-10

📝 Living Lab 08: Governance Flow

Learning lab for governance proposal to constraint update

For: developers | Updated: 2026-03-10

📝 Living 01: Environment Setup & Repository Navigation

Foundational module on environment and repo layout

For: developers | Updated: 2026-03-10

📝 Living 02: Rust Through ICN's Lens

Foundational module on Rust patterns used in ICN

For: developers | Updated: 2026-03-10

📝 Living 03: Errors and Tracing

Foundational module on error handling and distributed visibility

For: developers | Updated: 2026-03-10

📝 Living Actors and Concurrency

Learning module on ICN's actor model and concurrent execution

For: developers | Updated: 2026-03-10

📝 Living The Meaning Firewall

Learning module on ICN's type-safe boundary enforcement

For: developers | Updated: 2026-03-10

📝 Living Persistence and Ledger

Learning module on state persistence and event logging

For: developers | Updated: 2026-03-10

📝 Living 07: Identity and Cryptography

Systems module on identity and cryptographic operations

For: developers | Updated: 2026-03-10

📝 Living 08: Network and Gossip

Systems module on network communication and eventual consistency

For: developers | Updated: 2026-03-10

📝 Living 09: Governance and Contracts

Systems module on governance and contracts

For: developers | Updated: 2026-03-10

📝 Living 10: Federation and Operations

Ownership module on federation and production deployment

For: developers | Updated: 2026-03-10

📝 Living 11: Maintainer Skills

Ownership module on reshaping architecture safely

For: developers | Updated: 2026-03-10

📝 Living Maintainer Capstone

Final capstone gate for Maintainer tier

For: developers | Updated: 2026-03-10

📝 Living Onboarding Reading Map

Links between modules and high-signal source files

For: developers | Updated: 2026-03-10

📝 Living Module 0: Setup and Tooling

Reference module on development environment setup

For: developers | Updated: 2026-03-10

📝 Living Module 1: Rust Fundamentals

Reference module on Rust concepts for ICN

For: developers | Updated: 2026-03-10

📝 Living Module 02: Architecture Overview

Reference module providing high-level architecture overview

For: developers | Updated: 2026-03-10

📝 Living Module 3: Runtime and Actor Model

Reference module on actor model and constraint engine

For: developers | Updated: 2026-03-10

📝 Living Module 4: Identity and Trust

Reference module on identity and trust primitives

For: developers | Updated: 2026-03-10

📝 Living Module 5: Network and Gossip

Reference module on network communication and state sync

For: developers | Updated: 2026-03-10

📝 Living Module 6: Ledger and Contracts

Reference module on ledger and CCL programming

For: developers | Updated: 2026-03-10

📝 Living Module 8: Web UI Integration

Reference module on web UI integration

For: developers | Updated: 2026-03-10

📝 Living Module 9: Operations and Deployment

Reference module on production deployment

For: developers | Updated: 2026-03-10

📝 Living Module 10: Contributor Workflow

Reference module on contribution processes

For: developers | Updated: 2026-03-10

📝 Living Module 11: Federation

Reference module on federation and inter-cooperative agreements

For: developers | Updated: 2026-03-10

📝 Living Module 12: Observability and Metrics

Reference module on monitoring

For: developers | Updated: 2026-03-10

📝 Living Module 13: Security and Privacy

Reference module on security and privacy in ICN

For: developers, security | Updated: 2026-03-10

📝 Living Module 14: Governance and CCL Deep Dive

Reference module on governance and contract language

For: developers | Updated: 2026-03-10

📝 Living Curriculum Gap Analysis

Analysis of curriculum gaps and iteration plan

For: team | Updated: 2026-03-10

🔒 Canonical Onboarding Syllabus

Overall course structure for Foundations and Accelerated tracks

For: developers | Updated: 2026-03-15

🔒 Canonical Accelerated Track (4 weeks)

Fast-track onboarding for Rust-intermediate developers

For: developers | Updated: 2026-03-10

🔒 Canonical ICN Contributor Ladder

Tier-based contributor skill progression (Observer → Contributor → Maintainer → Architect)

For: contributors | Updated: 2026-03-10

🔒 Canonical Foundations Track (8 weeks)

Comprehensive onboarding track for Rust beginners

For: developers | Updated: 2026-03-10

📝 Living Curriculum Update Process

Process for keeping onboarding aligned with codebase

For: team | Updated: 2026-03-10

📝 Living Workshop 0: Local Build and Repo Orientation

Workshop on local build and repository structure

For: developers | Updated: 2026-03-10

📝 Living Workshop 1: Rust Fundamentals in Practice

Workshop applying Rust patterns to ICN code

For: developers | Updated: 2026-03-10

📝 Living Workshop 2: Architecture Mapping Exercise

Workshop for building architecture mental models

For: developers | Updated: 2026-03-10

📝 Living Workshop 3: Runtime and Actor Lifecycle

Workshop on actor model and lifecycle

For: developers | Updated: 2026-03-10

📝 Living Workshop 4: Identity and Trust Hands-On

Workshop on identity and trust operations

For: developers | Updated: 2026-03-10

📝 Living Workshop 5: Network and Gossip Deep Dive

Workshop on network and gossip systems

For: developers | Updated: 2026-03-10

📝 Living Workshop 6: Ledger and Contract Flow

Workshop on ledger and contract operations

For: developers | Updated: 2026-03-10

📝 Living Workshop 8: Web UI Exploration

Workshop on web UI and gateway integration

For: developers | Updated: 2026-03-10

📝 Living Workshop 9: Local Deployment and Observability

Workshop on deployment and monitoring

For: developers | Updated: 2026-03-10

📝 Living Workshop 10: Contributor Workflow

Workshop on contribution workflow

For: developers | Updated: 2026-03-10

📝 Living Workshop 11: Federation Hands-On

Workshop on federation code paths

For: developers | Updated: 2026-03-10

📝 Living Workshop 12: Observability and Metrics

Workshop on observability

For: developers | Updated: 2026-03-10

📝 Living Workshop 13: Security and Privacy

Workshop on security and privacy layers

For: developers | Updated: 2026-03-10

📝 Living Workshop 14: Governance and CCL Deep Dive

Workshop on governance and contract language

For: developers | Updated: 2026-03-10

📝 Living Ops runbooks relocated (stub)

Runbooks moved to docs/guides/operations/runbooks/ (tranche 3); use that path for updates

For: operators | Updated: 2026-03-26

📋 Draft Pilot Proposal Template

Template for approaching potential pilot communities

For: team | Updated: 2026-03-10

📝 Living SDIS User Guide

End-user guide for credential presentation system

For: users | Updated: 2026-03-10

📝 Living Mobile App Testing Guide

Testing guide for mobile application

For: testers | Updated: 2026-03-10

Operations

📝 Living ICN Deployment Guide

Comprehensive guide for deploying ICN to production environments

For: operators, developers | Updated: 2026-03-15

📝 Living Code Quality Improvement Tracker

Tracks error handling and code quality audits

For: developers | Updated: 2026-03-10

📋 Draft Network Policy Design — K3s

K3s network policy design (deferred)

For: operators | Updated: 2026-03-10

📝 Living Phase 0 Operational Monitoring

Monitoring configuration for Phase 0 pilot

For: operators | Updated: 2026-03-10

📝 Living Emergency Node Restart

Runbook for emergency node restart procedures

For: operators | Updated: 2026-03-10

📝 Living Data Recovery Procedure

Runbook for node data recovery from backup

For: operators | Updated: 2026-03-10

📝 Living Version Upgrade Procedure

Runbook for upgrading daemon to new version

For: operators | Updated: 2026-03-10

📝 Living Security Incident Response

Runbook for security incident response

For: operators, security | Updated: 2026-03-10

📝 Living Troubleshooting Guide

Common issues and solutions for node operations

For: operators | Updated: 2026-03-10

📝 Living Secrets Rotation Procedure

Runbook for rotating cryptographic secrets

For: operators, security | Updated: 2026-03-10

📝 Living Pilot Vertical Slice Smoke

Runbook for pilot deployment verification

For: operators | Updated: 2026-03-10

🔒 Canonical Operations Directory README

Navigation for operations and deployment documentation

For: operators | Updated: 2026-03-10

📝 Living Operations Deployment Guide

Deep operational guide for production deployments

For: operators | Updated: 2026-03-15

📋 Draft Distributed Tracing Setup

Configuration for distributed tracing and observability

For: operators | Updated: 2026-03-10

📋 Draft Incident Response Plan

Procedures for responding to production incidents

For: operators | Updated: 2026-03-10

Reference

📝 Living Agent Registry

Catalog of authorized AI agents and their capabilities for ICN development

For: agents, team | Updated: 2026-03-01

📝 Living Changelog

Release notes and version history

For: contributors, public | Updated: 2026-03-21

🔒 Canonical Claude Agent Onboarding

Guidance for Claude Code sessions working with ICN codebase

For: agents, developers | Updated: 2026-03-21

🔒 Canonical Code of Conduct

Community guidelines and expected behavior for contributors

For: contributors, community | Updated: 2025-12-01

🔒 Canonical ICN - InterCooperative Network

Main project README with overview, quick start, and CI/CD status badge

For: contributors, public | Updated: 2026-03-10

🔒 Canonical ICN Documentation Control System

Normative development control plane: discovery vs delivery, artifact routing, and documentation governance

For: contributors, agents | Updated: 2026-03-26

📝 Living ICN Document Registry (human summary)

Auto-generated summary companion to registry.toml; run doc_control_check.py to refresh

For: contributors, agents | Updated: 2026-06-09

📝 Living ICN Golden Development Prompt

Master context and instructions for AI-assisted development on ICN

For: agents, developers | Updated: 2026-03-18

🔒 Canonical ICN Documentation Index

Master navigation and directory of all documentation with cross-references

For: all | Updated: 2026-04-15

🔒 Canonical Docs Directory README

Overview of documentation structure and navigation guide

For: contributors | Updated: 2026-03-10

📝 Living ICN Gateway API Documentation

HTTP API specification and usage guide for ICN Gateway

For: developers, integrators | Updated: 2026-03-15

🔒 Canonical API Documentation Index

Navigation and overview for API-related documentation

For: developers, integrators | Updated: 2026-03-10

📝 Living OpenAPI Specification

Machine-readable API specification in OpenAPI 3.0 format

For: developers, tools | Updated: 2026-03-15

🔒 Canonical Architecture Directory README

Navigation guide for architecture documentation

For: architects | Updated: 2026-03-10

📝 Living CI Current Status

Current state of all CI checks and gate enforcement levels

For: developers | Updated: 2026-03-10

📝 Living CI Gate Ratchet Plan

CI gates, ratchet phases, required checks, and failure index

For: developers | Updated: 2026-03-10

📝 Living Institution Package ActionCard Contract Notes

Validation guidance for institution packages using action-card.schema.json; emitted vs RFC-gated source kinds; pointers to runtime models, ADR-0027, and issue icn#1713. JSON schema and fictional example live alongside; tiny validator at docs/scripts/validate-action-card.py. Schema $id retained temporarily per docs/contracts/schema-id-audit.md (review by 2026-06-30).

For: contributors, organizers | Updated: 2026-05-07

📝 Living Pending-publish summary — contract notes

Companion notes for the substrate-level row-level read-model contract for pending-publish summaries (urn:icn:contract:pending-publish-summary:v1). Composed body for preview-review.preview_kind = pending_publish_summary; does not replace urn:icn:contract:preview-review:v1. Defines the per-row shape (action item / decision / attendance / obligation / allocation / settlement / evidence note / risk note), review affordances, mutation_preview, expected receipt category, provenance reference, must-not-include list, and validation guidance. Read-only; not a mutation API. JSON schema and fictional example live alongside; validated via docs/scripts/validate-preview-review.py --schema.

For: contributors, architects, organizers | Updated: 2026-06-09

📝 Living Preview / review — contract notes

Companion notes for the substrate-level read-model contract for human-reviewable previews of pending publish, action items, evidence packets, and fixture demos (urn:icn:contract:preview-review:v1). Defines field shape, must-not-include list, validation guidance, stability, and how the contract fits the no-CLI organizer/member workflow + organizer/member accessibility gate. Closes the 'Generic preview/review API contract' follow-up in icn#1724 / no-CLI workflow §7. Read-only; not a mutation API. JSON schema and fictional example live alongside; tiny validator at docs/scripts/validate-preview-review.py.

For: contributors, architects | Updated: 2026-05-05

📝 Living Rehearsal evidence export — contract notes

Companion notes for the substrate-level repo-safe rehearsal evidence export schema (urn:icn:contract:rehearsal-evidence-export:v1). Defines field shape, must-not-include list, validation guidance, stability, and the non-DNS contract-identity decision. JSON schema and fictional example live alongside; tiny validator at docs/scripts/validate-rehearsal-evidence.py.

For: contributors, organizers | Updated: 2026-05-04

📝 Living Schema $id audit

Audit-only record of every JSON schema $id under docs/contracts/, classified DNS-backed vs non-DNS, with per-schema keep/migrate/investigate recommendations and migration safety rules. Performs no migration. First deliberate application of the architecture due-diligence checklist; deliverable for icn#1737.

For: architects, contributors | Updated: 2026-05-05

📝 Living Demo System Documentation

Documentation for ICN demonstration system

For: team, demo-users | Updated: 2026-03-15

🔒 Canonical Design Directory README

Navigation guide for design documentation

For: architects, developers | Updated: 2026-03-10

🔒 Canonical Economics Directory README

Navigation for economics and value flow documentation

For: architects | Updated: 2026-03-10

🔒 Canonical Governance Directory README

Navigation guide for governance documentation

For: architects | Updated: 2026-03-10

🔒 Canonical SDIS Design Documentation

Navigation guide for Sovereign Digital Identity System design

For: architects | Updated: 2026-03-10

🔒 Canonical Development Documentation

Navigation guide for development activities

For: developers | Updated: 2026-03-10

🔒 Canonical Testing Documentation

Navigation guide for testing guides

For: developers | Updated: 2026-03-10

🔒 Canonical Policy Examples

Example governance policies for cooperative organizations

For: users, architects | Updated: 2026-03-10

📝 Living ICN Glossary

Reference document with ICN terminology and definitions

For: all | Updated: 2026-03-10

📝 Living ICN Operations Runbooks

Navigation guide for production runbooks (domain hub; not control-plane canonical)

For: operators | Updated: 2026-03-26

🔒 Canonical Internal Documentation

Internal-only documentation for team coordination

For: team | Updated: 2026-03-10

📝 Living Imported documentation control context pack (readme)

Index and provenance for bundled control-system specs and templates source pack

For: contributors, agents | Updated: 2026-03-26

📋 Draft ICN Legal Considerations

Legal questions and considerations for cooperative communities

For: compliance | Updated: 2026-03-10

📝 Living Pilot Deployment Limitations

Known limitations and constraints in pilot phase

For: team | Updated: 2026-03-10

📝 Living Pilot Readiness Gaps

Critical gaps between implementation and pilot readiness

For: team | Updated: 2026-03-10

📋 Draft Storage Metrics Reference

Prometheus metrics for storage and database monitoring

For: operators | Updated: 2026-03-10

📋 Draft Module Template

Template for creating onboarding modules

For: team | Updated: 2026-03-10

📝 Living ICN Common Patterns Reference

Quick reference for recurring code patterns in ICN

For: developers | Updated: 2026-03-10

🔒 Canonical Performance Documentation

Performance requirements, benchmarks, and optimization guidance

For: developers, architects | Updated: 2026-03-10

📝 Living Trust Score Benchmark Results

Benchmark results for trust score performance

For: developers | Updated: 2026-03-10

📝 Living Trust Service Performance Characteristics

Performance characteristics and optimization guidance

For: developers | Updated: 2026-03-10

📝 Living Decision Registry + Treasury Vote Pilot

Economic receipt chain implementation in pilot

For: team | Updated: 2026-03-10

📋 Draft Hosted Pilot Approach

Approach for hosted cooperative pilot deployments

For: team | Updated: 2026-03-10

📝 Living No-CLI organizer and member rehearsal workflow (generic ICN)

Guided browser/mobile-first rehearsal story: standing, action cards, action items, receipts, provenance, repo-safe evidence; organizer vs steward vs member paths; preview-before-mutation; CLI as operator layer only; follow-ups for UI/API/evidence contracts including the landed fixture-backed demo-mode bridge slice. Partner companion doc lives in NYCN repo.

For: team, organizers | Updated: 2026-06-09

📋 Draft Agent Knowledge Architecture

Design for AI agent knowledge bases and context management

For: agents, architects | Updated: 2026-03-10

📝 Living ICN Crate Reference

Authoritative inventory of workspace crates

For: developers | Updated: 2026-03-10

📝 Living ICN Governance Demo One-Pager

One-page demo explanation and value proposition

For: stakeholders | Updated: 2026-03-10

📝 Living ICN Ecosystem Map

System component interconnection map

For: architects | Updated: 2026-03-10

📝 Living API Reference

Detailed API endpoint reference with examples and error codes

For: developers | Updated: 2026-03-15

🔒 Canonical API Reference Documentation

Navigation guide for API reference documents

For: developers | Updated: 2026-03-10

📝 Living API Versioning Strategy

Versioning scheme and compatibility policy for ICN APIs

For: developers, architects | Updated: 2026-03-10

📋 Draft Topic Subscriptions API

API for subscribing to and consuming topic streams

For: developers | Updated: 2026-03-10

📝 Living ICN Configuration Management Guide

Complete configuration reference for ICN nodes

For: operators, developers | Updated: 2026-03-10

🔒 Canonical Configuration Reference

Navigation guide for configuration documentation

For: operators | Updated: 2026-03-10

📋 Draft Identity Backend Configuration

Identity keystore backend configuration guide

For: operators | Updated: 2026-03-10

📋 Draft Trust Threshold Configuration

Trust score threshold configuration guide

For: operators | Updated: 2026-03-10

📝 Living ICN Project Index

Show-ready orientation layer — routes outside readers, contributors, and agents to the right canonical doc, source tree, or external URL. Defers to STATE.md and PHASE_PROGRESS.md for current truth.

For: all | Updated: 2026-05-11

📝 Living CI / Ops / Deploy Map

GitHub Actions workflows, deploy paths, K3s smoke runbooks, monitoring; routing layer to substantive runbooks under guides/operations/.

For: operators, contributors | Updated: 2026-04-29

📝 Living Current Truth Map

One-screen routing for what is real now, what is not, what gates remain — pointing at STATE.md and PHASE_PROGRESS.md for the per-PR record.

For: all | Updated: 2026-04-29

📝 Living Docs Control Map

How INDEX.md, registry.toml, DOCUMENT_REGISTRY.md, and doc_control_check.py relate; truth classes; how to add a doc.

For: contributors, agents | Updated: 2026-04-29

📝 Living Full Repository Record Protocol

Protocol for recording every tracked file and directory across InterCooperative-Network/icn (and adjacent repos) as a mechanical record plus an interpretive atlas. Defines outputs, generator, classification vocabulary, and privacy boundary.

For: contributors, architects | Updated: 2026-05-01

📝 Living Proof-Level Taxonomy and Capability Matrix

Proof-level taxonomy (L0-L8) as shared claim-boundary vocabulary, plus a capability matrix for the current organizer-rehearsal path. Supports #1746 and narrows #1796. Orthogonal to the project-coverage-matrix status vocabulary. Defers to STATE.md and PHASE_PROGRESS.md for current truth.

For: all, team | Updated: 2026-06-09

📋 Draft ICN Repo Atlas

Draft interpretive atlas paired with the mechanical full-repo record. Names directory families, Rust-workspace families, and a classification vocabulary for stable atlas authoring across icn / nycn / icn-learn.

For: contributors, architects | Updated: 2026-05-01

📝 Living Runtime Surface Map

Real runtime surfaces a member or app actually touches today (/me/standing, /me/action-cards, completion-receipt retrieval, governance primitives, identity/trust/ledger surfaces).

For: developers, architects | Updated: 2026-04-29

📝 Living Rust Workspace Map

The icn/ Rust workspace grouped by rough layer (kernel, identity, networking, ledger, governance, etc.) plus app crates and binaries. Authority over kernel/app boundaries lives in KERNEL_APP_SEPARATION.md.

For: developers, contributors | Updated: 2026-04-29

📝 Living Show-Readiness Map

What can be shown now, what should not be shown as finished, suggested first-demo narrative, and red lines for outside-facing material.

For: all, team | Updated: 2026-04-29

📝 Living Source Tree Map

Top-level repo surfaces and what each is for; monorepo root vs Rust workspace at icn/.

For: contributors, developers | Updated: 2026-04-29

📝 Living SDIS API Guide

Complete API guide for Sovereign Digital Identity System

For: developers | Updated: 2026-03-10

📋 Draft SDIS + Steward System Status

Snapshot of SDIS deployment status

For: team | Updated: 2026-03-10

🔒 Canonical Grant Application Artifacts

Navigation for grant application templates and materials

For: team | Updated: 2026-03-10

📋 Draft ICN Budget Skeleton

Grant budget template

For: team | Updated: 2026-03-10

🔒 Canonical Documentation Templates

Navigation guide for documentation templates

For: contributors | Updated: 2026-03-10

📋 Draft Development Journal Template

Template for development session journals

For: developers | Updated: 2026-03-10

🔒 Canonical Vision & Strategy

Navigation guide for vision and strategy documents

For: all | Updated: 2026-03-10

Security

📝 Living Gateway Content Security Policy

CSP configuration for ICN gateway ensuring safe web integration

For: security, developers | Updated: 2026-03-10

🔒 Canonical Security Documentation Index

Navigation and overview of security-related documentation

For: security, architects | Updated: 2026-03-15

📝 Living Secret Management

Policy and design for managing cryptographic secrets and sensitive data

For: security, operators | Updated: 2026-03-10

📝 Living TOFU (Trust-On-First-Use) Security Model

Trust establishment for first-time peer contact without certificates or CAs

For: security, developers | Updated: 2026-03-10

📋 Draft Phase 10C Security Analysis

Security analysis and hardening for multi-party contracts

For: security | Updated: 2026-03-10

📝 Living Production Hardening

Hardening measures protecting against DoS, resource exhaustion, and operational failures

For: operators, security | Updated: 2026-03-15

📝 Living ICN Security Roadmap

Security architecture and phased hardening approach

For: security, architects | Updated: 2026-03-15

📝 Living ICN Threat Model

Comprehensive threat model covering attack vectors, adversary capabilities, and mitigations

For: security, architects | Updated: 2026-03-15

Status

📝 Living ICN State (living doc)

Living snapshot of repo layout, decisions, constraints, and current engineering status

For: developers, agents | Updated: 2026-06-10

Strategy

📋 Draft Documentation namespace resolution plan

Plans vs planning, ops vs operations; no moves executed here

For: contributors | Updated: 2026-03-26

📋 Draft SDIS Complete Build Plan

Detailed SDIS build plan from API to mobile

For: architects | Updated: 2026-03-10

📋 Draft SDIS & Steward Completion Roadmap

Roadmap for SDIS and steward system completion

For: architects | Updated: 2026-03-10

📝 Living ADR-001: What ICN Is

Architectural Decision Record defining ICN scope, non-goals, and boundary conditions

For: developers, architects, stakeholders | Updated: 2026-02-28

📝 Living Cooperative-developer discovery brief

Internal prep doc for discovery conversations with cooperative developers (e.g. launch.coop / comp.coop). Listening + language calibration; not a sales pitch, not a technical demo, not a partnership commitment.

For: internal, matt | Updated: 2026-04-29

📝 Living What ICN Is

Canonical definition: problem statement, solution approach, scope and non-goals

For: all | Updated: 2026-03-17

📝 Living ICN Evolution Arc

Long-term vision across phases 0-3, from MVP to mature cooperative ecosystem

For: architects, stakeholders | Updated: 2026-03-08

📝 Living ICN Gap Analysis March 2026

Comprehensive implementation assessment across 10 subsystems with evidence and gaps

For: grant-reviewers, architects, product | Updated: 2026-03-17

📝 Living ICN Pitch

Elevator pitch, one-pagers, and public communication messaging framework

For: stakeholders, public | Updated: 2026-03-10

📝 Living ICN Live Roadmap

Long-arc roadmap and rationale companion that points at STATE.md / PHASE_PROGRESS.md as canonical current-state truth. Not a per-PR changelog.

For: team, stakeholders | Updated: 2026-04-29

📝 Living ICN Roadmap Strategy

Strategic roadmap phases 0-3 with dependencies, milestones, and long-term vision

For: architects, stakeholders, grant-reviewers | Updated: 2026-03-12

📝 Living ICN Scenarios

Use case narratives and operational scenarios demonstrating ICN in practice

For: product, marketing | Updated: 2026-03-09

📝 Living ICN Sprint March 17

Specific sprint plan and tactical objectives for week of March 17, 2026

For: team | Updated: 2026-03-17

📝 Living ICN Technical Whitepaper

Formal technical specification for grants, regulatory review, and architectural validation

For: grant-reviewers, architects, compliance | Updated: 2026-03-15

📝 Living ICN: Infrastructure for the Cooperative Movement

Plain-English ICN introduction for cooperative developers, federation organizers, TA providers, and member-owners. Honest comparisons to existing co-op tech, role-by-role fit, explicit non-claims. Pre-pilot framing throughout; claims bounded by ICN_INTRODUCTION_EVIDENCE_MAP.md.

For: public, stakeholders, organizers | Updated: 2026-06-09

📝 Living ICN, in Plain English

General-public ICN introduction starting from 'what is a cooperative'. No jargon wall. Explains receipts as evidence records (not crypto), institutional memory, and accountability. Explicit non-claims; pre-pilot framing throughout.

For: public | Updated: 2026-06-09

📝 Living ICN one-page handbill

One-page handbill: the problem, what ICN does, and where it actually stands (pre-pilot, not production-ready). Links to the evidence map and hard-questions Q&A.

For: public, organizers | Updated: 2026-06-09

📝 Living ICN Hard Questions and Evidence-Bound Answers

Hard questions answered directly in bad-answer/honest-answer format: production use (no), what works now, fixture-backed vs live vs design-only, capture, surveillance, private data, regulation, blockchain (no), bus factor, smallest safe next step. Adapted from internal hardball rehearsal practice; generalized and depersonalized.

For: public, stakeholders, organizers, reviewers | Updated: 2026-06-09

📝 Living ICN Introduction Evidence Map

Maps every claim in the introduction materials to verifiable merged artifacts (icn#1985/#1997/#1998/#1999, nycn#78, icn-learn#3, icn-community-bridge#1) and states what each artifact does NOT prove. Anti-overclaim companion to the intro docs; defers to STATE.md and PHASE_PROGRESS.md for current truth.

For: public, stakeholders, organizers, reviewers | Updated: 2026-06-09

📋 Draft Licensing strategy matrix (autonomy review)

Planning artifact only. Component-by-component licensing/autonomy matrix and option families (permissive / AGPL / CAL / policy-layer / hybrid) for a future maintainer/legal review. Not legal advice; not a relicensing decision; no metadata changes.

For: maintainers, legal-review | Updated: 2026-05-01