id: small-saas/capability-requirements/production
kind: capability-requirement-set
title: Small SaaS Production Capability Requirements
profile: small-saas
record_id: small-saas-production-capabilities
requires:
  - capability: identity.authorization
    profile: rbac
    minimum_maturity: D4
    targets:
      policy_coverage:
        value: all-tenant-routes
  - capability: data.transactional
    profile: relational
    minimum_maturity: D4
    targets:
      durability:
        value: production-approved
  - capability: integration.api
    profile: request-response
    minimum_maturity: D4
    targets:
      compatibility:
        value: versioned-contract
  - capability: operations.observability
    profile: events
    minimum_maturity: D3
    targets:
      coverage:
        value: tenant-access-and-service-health
provisions:
  - provider: small-saas/control/namespace-per-tenant
    capability: identity.authorization
    profile: rbac
    maturity: D4
    evidence:
      - hook: policy_tests
        basis: measured
        source: small-saas/evidence/access-review-2026-05
  - provider: small-saas/dataset/subscription-ledger
    capability: data.transactional
    profile: relational
    maturity: D4
    evidence:
      - hook: durability_tests
        basis: measured
        source: small-saas/evidence/access-review-2026-05
  - provider: small-saas/service/billing-portal
    capability: integration.api
    profile: request-response
    maturity: D4
    evidence:
      - hook: contract_tests
        basis: measured
        source: small-saas/evidence/access-review-2026-05
  - provider: small-saas/deployment/production
    capability: operations.observability
    profile: events
    maturity: D3
    evidence:
      - hook: telemetry_coverage
        basis: measured
        source: small-saas/evidence/access-review-2026-05
relationships:
  - type: instantiates
    target: profile/small-saas
  - type: applies_to
    target: small-saas/service/billing-portal