# Security Scenario Composer

The composer is the executable, plan-only implementation of
`canon/standards/security-scenario-composition_v0.1.md`. It validates
Playbook Capability Contract v0.1 declarations, selects exact providers,
applies authority-bound overrides, orders trust transitions, and emits an
owner-routed JSON handoff.

It never invokes an entry point and always emits
`execution.permitted: false`.

Compose the checked-in C0 reference:

```bash
python3 tools/security-scenario-composer/security_scenario_composer.py \
  --scenario examples/security-scenarios/c0-local-identity.yaml \
  capabilities/playbooks/net-kingdom.local-identity.yaml
```

Run tests:

```bash
python3 -m pytest tools/security-scenario-composer/tests
```