- Rename 'three-pronged' folder to 'knowledge-layers' — prong metaphor
was misleading (implied parallel tines), replaced with epistemic layers
(deductive base, empirical middle, probabilistic oracle — vertical stack)
- Collapse 11 overlapping files into 3 coherent documents:
- knowledge-layers/_index.org: core framework (two engines + one store,
World Model formula, 0-14 layer table, provenance store design,
conflict resolution, cold-start, stage mapping)
- knowledge-layers/practical-implications.org: design-world-aware-of-
physics, 10 powers, Schafmeister existence proof, epistemic transparency
- knowledge-layers/neurological-empirical.org: neural networks in
provenance framework (kept intact)
- Relocate wolfram/mathematica and Schafmeister docs to ideas/viability/
- Integrate into main architecture _index.org:
- Gate: expanded from two vectors (ACL2+LLM) to three (deductive,
provenance/empirical, LLM oracle)
- Autodidactic loop: split into Track 1 (deductive hardening, fast)
and Track 2 (empirical validation, slow, experimental-feedback-driven)
- See also: added Knowledge Layers cross-reference
- Add all-lisp geometry engine note (ideas/lisp-geometry-engine.org) as
concrete illustration of the empirical layer's effect on design work
- Rebuild site: 148 files, 0 errors
25 lines
1.0 KiB
Org Mode
25 lines
1.0 KiB
Org Mode
:PROPERTIES:
|
|
:ID: 7f46764b-47b8-4892-a526-2c1b9ee6e6df
|
|
:ID: auto-irap
|
|
:CREATED: [2026-05-23 Sat]
|
|
:END:
|
|
#+title: IRAP
|
|
#+filetags: :passepartout:compliance:framework:irap:
|
|
|
|
|
|
** IRAP (Infosec Registered Assessors Program)
|
|
|
|
Australian government's cloud security assessment program — analogous to
|
|
[[id:e6993701-3c67-49bf-82f3-06907572cbf3][FedRAMP]]. Cloud services used by Australian government agencies must have an
|
|
IRAP assessment. Managed by the Australian Cyber Security Centre (ACSC).
|
|
Assessment levels: Protected (highest), Secret (top secret), Unclassified DLM.
|
|
|
|
Who must comply: Cloud providers selling to Australian federal, state, and
|
|
local government agencies. Also critical infrastructure providers.
|
|
|
|
Why it matters: Like FedRAMP and [[id:085b76cc-4a65-4660-9c70-85aee10ca99e][ISMAP]], IRAP is a procurement gate. An IRAP
|
|
Protected-level assessment is expensive and takes 6-12 months. First-mover
|
|
advantage: the gate stack's deterministic audit trail can be the primary
|
|
evidence artifact, reducing assessment scope/cost.
|
|
|