Status: descriptive Canonical: yes Last Reviewed: 2026-04-26

ICN State (living doc)

Current status (2026-04-26 snapshot)

Current phase: Phase 2 — Pilot Launch (blocked on cooperative partners). Active execution: institutional-operability runtime (live charter activation, person-directory overlay, /me/standing, authority_scope plumbing all landed) plus the feedback/support doctrine rename and ADR canonicalization under docs/adr/. NYCN package side dogfoods these via the institution-package boundary. Phase model classification is unchanged; see PHASE_PROGRESS.md for phase definitions.

Recently merged (since 2026-04-15)

Recently merged (2026-04-15 snapshot, retained)

Open PRs

What landed since Phase 1 (Charter Engine)

Institutional-operability runtime (added 2026-04-22 → 2026-04-26):

• Generic institution bootstrap package path — #1586
• Bootstrap-apply 409 idempotency for repeated bootstrap runs — #1617
• Persistent governance domains across gateway restart in standalone mode — #1621
• Live charter activation endpoint — #1624
• Person-directory overlay for bootstrap role assignment (DID binding) — #1626
• GET /me/standing read model — #1627
• authority_scope plumbed end-to-end through assign_role — #1630
• Feedback/support doctrine rename + ADR canonicalization under docs/adr/ — #1637
• NYCN bootstrap apply integration tests + live-validate runbook — #1592, #1593

Governance institutional primitives:

• Governance domains, structures, activities, parent (scope container) — #1540
• Decision-to-action bridge: accepted proposals create linked action items — #1532
• Consent-based decision mode — #1533
• Meeting management (schedule, agenda, attendance, minutes) — #1543
• Notification digest (pending votes, overdue items, upcoming meetings) — #1547
• NYCN architecture docs (repo-shaped spec, implementation matrix, execution tranches) — #1544
• NYCN institutional design correction (layered ontology) — #1545
• Residual acceptance-closure atomicity hazards closed — #1590
• Colon-safe proposal index keys with one-shot migration — #1591

Infrastructure:

• Atlas-backed Prometheus persistent storage — #1614
• Atlas-backed sccache for ci-runner — #1618
• Soft pod anti-affinity for ICN daemons — #1619
• Helm path documented for kube-prometheus-stack — #1616
• Steward dashboard derives gateway URL from request context — #1620
• Security Audit CI fix (wasmtime bump) — #1522, #1542
• CI dual-signal guard — #1524
• Docker-build-deploy timeout fix — #1527
• 21-file doc refresh and archive — #1526

Architectural decisions in force

• Layered ontology (locked 2026-04-14): Entities (sovereign) / Structures (non-sovereign, entity-owned) / Activities (time-bounded, entity-owned). Committees are Structures. Summit is Activity.
• Program is a separate primitive (not Activity extension): Milestones with machine-readable checks, parent_program_id for cycle-handoff. Spec in NYCN-Repo-Architecture-Spec.md §5.
• Authority is capability-string based today, typed model frozen for migration: RoleAssignment.authority_scope: Vec<String> remains the shipped surface; the constitutional object model (AuthorityClass, AuthorityGrant, TypedScope, Mandate) is frozen in ADR-0014 and is the target of a subsequent additive migration. No behavior change has shipped yet.
• Sled key convention: primary <thing>:{id}; secondary <thing>_by_<scope>:{scope_id}:{id}.
• Gateway event naming: Governance<Thing><Verb>.
• Meaning Firewall: CI ratchet enforces no new kernel/domain import regressions. Pre-existing domain imports in icn-core and icn-gateway remain; full extraction is ongoing work.

Architecture notes

• Repo root is not a Cargo workspace; Rust workspace lives in icn/.
• Workspace: 35 crates in icn/crates/ + 4 app crates in icn/apps/ + 3 binaries = 42 packages.
  • Crates (in icn/crates/): icn-api, icn-authz, icn-ccl, icn-commons, icn-community, icn-compute, icn-coop, icn-core, icn-crypto, icn-crypto-pq, icn-encoding, icn-entity, icn-federation, icn-gateway, icn-gossip, icn-governance, icn-http-kit, icn-identity, icn-kernel-api, icn-ledger, icn-naming, icn-net, icn-obs, icn-privacy, icn-protocol, icn-rpc, icn-security, icn-services, icn-snapshot, icn-steward, icn-store, icn-testkit, icn-time, icn-trust, icn-zkp.
  • App crates (in icn/apps/): icn-governance-actor, icn-ledger-actor, icn-membership-app, icn-charter-app.
  • Binaries: icnd, icnctl, icn-console.
• Web UI: web/pilot-ui (PWA), web/dashboard (static).
• SDKs: sdk/typescript, sdk/react-native.
• Deployment: native/systemd, Docker Compose, Kubernetes, Helm (deploy/README.md).

Decisions (durable)

• Mutual TLS with client certificates enabled (2025-12-18).
• DID-TLS binding verification enabled.
• Some QUIC/chaos tests ignored in CI due to timing; run manually as needed.

Constraints (durable)

• Run Rust build/test commands from icn/.
• Tokio async only; avoid blocking operations in async paths.
• No panics in protocol/network/actor runtime paths.
• Demo status docs note STUN discovery disabled for local-only testing.

References

• docs/PHASE_PROGRESS.md — phase tracking
• docs/architecture/KERNEL_APP_SEPARATION.md — kernel/app boundary
• docs/strategy/NYCN-Repo-Architecture-Spec.md — NYCN institutional architecture
• docs/strategy/NYCN-Execution-Tranches.md — NYCN 7-tranche execution plan
• docs/dev/handoff-2026-04-15.md — latest session handoff
• deploy/README.md — deployment options

Historical snapshots