- Rename 'three-pronged' folder to 'knowledge-layers' — prong metaphor
was misleading (implied parallel tines), replaced with epistemic layers
(deductive base, empirical middle, probabilistic oracle — vertical stack)
- Collapse 11 overlapping files into 3 coherent documents:
- knowledge-layers/_index.org: core framework (two engines + one store,
World Model formula, 0-14 layer table, provenance store design,
conflict resolution, cold-start, stage mapping)
- knowledge-layers/practical-implications.org: design-world-aware-of-
physics, 10 powers, Schafmeister existence proof, epistemic transparency
- knowledge-layers/neurological-empirical.org: neural networks in
provenance framework (kept intact)
- Relocate wolfram/mathematica and Schafmeister docs to ideas/viability/
- Integrate into main architecture _index.org:
- Gate: expanded from two vectors (ACL2+LLM) to three (deductive,
provenance/empirical, LLM oracle)
- Autodidactic loop: split into Track 1 (deductive hardening, fast)
and Track 2 (empirical validation, slow, experimental-feedback-driven)
- See also: added Knowledge Layers cross-reference
- Add all-lisp geometry engine note (ideas/lisp-geometry-engine.org) as
concrete illustration of the empirical layer's effect on design work
- Rebuild site: 148 files, 0 errors
29 lines
1.2 KiB
Org Mode
29 lines
1.2 KiB
Org Mode
:PROPERTIES:
|
|
:ID: 904f5f12-ec9a-4cbf-854a-0b9b1e11a521
|
|
:ID: auto-apra-cps-234
|
|
:CREATED: [2026-05-23 Sat]
|
|
:END:
|
|
#+title: APRA CPS 234
|
|
#+filetags: :passepartout:compliance:framework:apra:
|
|
|
|
** APRA CPS 234 (Prudential Standard — Information Security)
|
|
|
|
Australian Prudential Regulation Authority standard for regulated financial
|
|
institutions. Requires: clearly defined information security roles and
|
|
responsibilities, periodic cybersecurity capability assessments, robust control
|
|
testing, timely remediation of control weaknesses, mandatory notification of
|
|
material incidents to APRA within 72 hours.
|
|
|
|
Who must comply: Banks, insurers, superannuation funds regulated by APRA.
|
|
~500 entities.
|
|
|
|
Penalties: APRA can impose capital requirements, license conditions, or
|
|
license cancellation for non-compliance. Personal liability for board and
|
|
senior management.
|
|
|
|
Why it matters: CPS 234's control testing requirement creates demand for
|
|
continuous verification — exactly what the gate stack and [[id:45258a2d-1675-562c-9024-5d1eb2f1ea56][evaluation harness]]
|
|
provide. First-mover advantage: CPS 234 is mature (2019) but enforcement is
|
|
escalating. No vendor provides a deterministic control-testing pipeline.
|
|
|