Implement canon conformance and maintenance optimizations

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e82-3e08-7042-a79d-438ac6eed8db

infospace/profiles/small-saas/artifacts/capability-requirements.yaml

@@ -0,0 +1,68 @@
+id: small-saas/capability-requirements/production
+kind: capability-requirement-set
+title: Small SaaS Production Capability Requirements
+profile: small-saas
+record_id: small-saas-production-capabilities
+requires:
+  - capability: identity.authorization
+    profile: rbac
+    minimum_maturity: D4
+    targets:
+      policy_coverage:
+        value: all-tenant-routes
+  - capability: data.transactional
+    profile: relational
+    minimum_maturity: D4
+    targets:
+      durability:
+        value: production-approved
+  - capability: integration.api
+    profile: request-response
+    minimum_maturity: D4
+    targets:
+      compatibility:
+        value: versioned-contract
+  - capability: operations.observability
+    profile: events
+    minimum_maturity: D3
+    targets:
+      coverage:
+        value: tenant-access-and-service-health
+provisions:
+  - provider: small-saas/control/namespace-per-tenant
+    capability: identity.authorization
+    profile: rbac
+    maturity: D4
+    evidence:
+      - hook: policy_tests
+        basis: measured
+        source: small-saas/evidence/access-review-2026-05
+  - provider: small-saas/dataset/subscription-ledger
+    capability: data.transactional
+    profile: relational
+    maturity: D4
+    evidence:
+      - hook: durability_tests
+        basis: measured
+        source: small-saas/evidence/access-review-2026-05
+  - provider: small-saas/service/billing-portal
+    capability: integration.api
+    profile: request-response
+    maturity: D4
+    evidence:
+      - hook: contract_tests
+        basis: measured
+        source: small-saas/evidence/access-review-2026-05
+  - provider: small-saas/deployment/production
+    capability: operations.observability
+    profile: events
+    maturity: D3
+    evidence:
+      - hook: telemetry_coverage
+        basis: measured
+        source: small-saas/evidence/access-review-2026-05
+relationships:
+  - type: instantiates
+    target: profile/small-saas
+  - type: applies_to
+    target: small-saas/service/billing-portal

infospace/profiles/small-saas/profile.yaml

@@ -22,6 +22,7 @@ required_standards:
   - model/devsecops
   - model/network
   - model/observability
+  - model/capability
   - standard/tagging
   - standard/caring
 required_concepts:
@@ -87,6 +88,7 @@ artifact_ids:
   - small-saas/control/namespace-per-tenant
   - small-saas/evidence/access-review-2026-05
   - small-saas/incident/cross-tenant-access-attempt
+  - small-saas/capability-requirements/production
 validation_rules:
   required_artifact_kinds:
     - service