@aikdna/kdna-cli 0.16.1 → 0.16.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aikdna/kdna-cli",
-  "version": "0.16.1",
+  "version": "0.16.2",
   "description": "KDNA CLI — create, validate, install, and manage domain cognition packages for AI agents.",
   "type": "commonjs",
   "bin": {

package/skills/kdna-loader/SKILL.md

@@ -215,6 +215,51 @@ KDNA does not override:
 
 ---
 
+## Safety & Governance
+
+KDNA domains influence agent judgment. The loader MUST apply safety rules before loading any domain.
+
+### Loading Priority
+
+When KDNA is loaded, the agent MUST respect this priority order:
+1. System safety policy (highest — cannot be overridden)
+2. Legal and compliance requirements
+3. User's explicit intent
+4. KDNA domain judgment
+5. Tool/skill instructions (lowest)
+
+KDNA MUST NOT override system safety policies, legal requirements, or the user's explicit refusal to apply domain judgment.
+
+### Risk-Level Checks
+
+Before loading a KDNA domain, check its risk level in `kdna.json` or `KDNA_CARD.json`:
+
+| Risk Level | Loading Behavior |
+|-----------|-----------------|
+| **R0** (Low) | Load silently |
+| **R1** (Medium) | Load silently; log |
+| **R2** (High) | Warn user before loading; require confirmation |
+| **R3** (Restricted) | Reject loading unless explicitly authorized |
+
+### Signature & Trust Checks
+
+- Yanked domains: **REJECT** loading (domain has been withdrawn for safety)
+- Deprecated domains: warn; suggest replacement if `replaced_by` is set
+- Unsigned domains: warn; load only if user confirms
+- Unknown scope domains: warn; load only if user confirms
+
+### Runtime Logging
+
+Every KDNA load MUST be logged with:
+- Domain name and version
+- Risk level
+- Signature status
+- Which axioms were triggered
+- Which misunderstandings were avoided
+- Self-check pass rate
+
+This enables audit and accountability.
+
 ## Failure handling
 
 | Situation | What to do |

package/src/cmds/domain.js

@@ -656,6 +656,19 @@ function cmdInspect(dir, jsonMode = false) {
       },
       axioms: (c.axioms || []).map((a) => a.one_sentence || null).filter(Boolean),
     };
+
+    // Governance metadata (KDNA_CARD.json)
+    const card = readJson(path.join(abs, 'KDNA_CARD.json'));
+    if (card) {
+      result.governance = {
+        risk_level: card.risk_level || null,
+        review_status: card.review_status || null,
+        intended_use: card.intended_use || [],
+        out_of_scope: card.out_of_scope || [],
+        known_limitations: card.known_limitations || [],
+        requires_expert_review: card.requires_expert_review || false,
+      };
+    }
     console.log(JSON.stringify(result, null, 2));
     return;
   }
@@ -703,7 +716,20 @@ function cmdInspect(dir, jsonMode = false) {
 
   if (rea) console.log(`  Reasoning chains:   ${(rea.reasoning_chains || []).length}`);
 
-  if (evo) console.log(`  Evolution stages:   ${(evo.stages || []).length}`);
+  if (evo)   console.log(`  Evolution stages:   ${(evo.stages || []).length}`);
+
+  // Governance metadata
+  const kdnaCard = readJson(path.join(abs, 'KDNA_CARD.json'));
+  if (kdnaCard) {
+    console.log('');
+    console.log('  ── Governance ──');
+    console.log(`  Risk level:     ${kdnaCard.risk_level || '?'}`);
+    console.log(`  Review status:  ${kdnaCard.review_status || '?'}`);
+    if (kdnaCard.intended_use?.length) console.log(`  Intended use:   ${kdnaCard.intended_use[0]}${kdnaCard.intended_use.length > 1 ? ` (+${kdnaCard.intended_use.length - 1} more)` : ''}`);
+    if (kdnaCard.out_of_scope?.length) console.log(`  Out of scope:   ${kdnaCard.out_of_scope[0]}${kdnaCard.out_of_scope.length > 1 ? ` (+${kdnaCard.out_of_scope.length - 1} more)` : ''}`);
+    if (kdnaCard.known_limitations?.length) console.log(`  Limitations:    ${kdnaCard.known_limitations[0]}${kdnaCard.known_limitations.length > 1 ? ` (+${kdnaCard.known_limitations.length - 1} more)` : ''}`);
+    if (kdnaCard.requires_expert_review) console.log(`  ⚠ Expert review required`);
+  }
 
   console.log('');
   console.log('  ── Axioms ──');