version: 1
updated: '2026-07-06'
domain: helix_forge
capabilities:
- id: capability.iam.key-cape
  name: KeyCape Lightweight IAM (NetKingdom Profile)
  summary: Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract),
    orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not
    against implementation internals.
  vector: D4 / A2 / C2 / R1
  domain: infotech
  status: draft
  owner: key-cape
  path: registry/capabilities/capability.iam.key-cape.md
  tags:
  - iam
  - oidc
  - netkingdom
  - security
  consumption_modes:
  - service (self-hosted deployment)