informed-decision/registry/capabilities/capability.security.human-decision-workspace.md
tegwick faae9cb0db docs(reuse): establish reviewed NetKingdom security capabilities
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
2026-10-14 06:39:27 +02:00

3.8 KiB

id owner status domain maturity external_evidence name summary tags discovery availability relations evidence consumer_guidance
capability.security.human-decision-workspace informed-decision draft infotech
discovery availability
current target confidence rationale
D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim.
current target confidence rationale
A4 A4 medium Source interface assessed 2026-10-14: Headless lifecycle and browser workspace with exact native approval references. Availability describes the delivery form, not production acceptance. Initial audience is bounded; Approval Engine owns approval state, Access Engine decides.
completeness reliability
level confidence basis
C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.
level confidence basis
R0 low No longitudinal consumer reliability measurement established by this review.
Human security decision presentation and disposition Headless lifecycle and browser workspace with exact native approval references.
security
netkingdom
framework-reuse
intent includes excludes use_cases
Headless lifecycle and browser workspace with exact native approval references
Headless lifecycle and browser workspace with exact native approval references
Initial audience is bounded; Approval Engine owns approval state, Access Engine decides
U04: Protected operation obtains and consumes exact human approval before its side effect
U05: Operator provisions and delivers a scoped workload credential through the approved owner lane
U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
current_level target_level current_artifacts consumption_modes
A4 A4
SCOPE.md
README.md
HTTP API
source
related_to
capability.security.approval-lifecycle
capability.authorization.policy-evaluate
capability.statehub.workstream-coordinate
documentation
SCOPE.md
README.md
recommended_for not_recommended_for known_limitations
Protected operation obtains and consumes exact human approval before its side effect
Operator provisions and delivers a scoped workload credential through the approved owner lane
Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
Initial audience is bounded; Approval Engine owns approval state, Access Engine decides
Initial audience is bounded; Approval Engine owns approval state, Access Engine decides
2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Human security decision presentation and disposition

Headless lifecycle and browser workspace with exact native approval references.

Reuse boundary

Initial audience is bounded; Approval Engine owns approval state, Access Engine decides.

Supported use cases

  • U04: Protected operation obtains and consumes exact human approval before its side effect
  • U05: Operator provisions and delivers a scoped workload credential through the approved owner lane
  • U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes

Evidence and integration

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.