version: 1
updated: '2026-10-16'
domain: helix_forge
capabilities:
- id: capability.security.iam-tooling-suite
  name: NetKingdom security architecture and conformance tooling
  summary: Versioned IAM, layer, tenancy and credential contracts plus validators.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - iam
  - kubernetes
  - conformance
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R1
  path: registry/capabilities/capability.security.iam-tooling-suite.md
  consumption_modes:
  - CLI
  - source
- id: capability.security.scenario-compose
  name: Deterministic security scenario composition
  summary: CLI selects pinned providers and orders trust transitions.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.scenario-compose.md
  consumption_modes:
  - CLI
  - source
- id: capability.security.posture-feedback
  name: Deterministic posture feedback
  summary: CLI evaluates evidence age and posture into owner-routed findings.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.posture-feedback.md
  consumption_modes:
  - CLI
  - source
- id: capability.security.case-contracts
  name: Security case types and instance validation
  summary: Versioned types, cases and schema validation.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.case-contracts.md
  consumption_modes:
  - CLI
  - source
- id: capability.security.bootstrap-recovery
  name: Guarded bootstrap and recovery preparation
  summary: Guarded bootstrap custody, encrypted identity backup capture, independent
    retrieval and isolated recovery verification.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - netkingdom
  - framework-reuse
  - backup
  - restore
  - disaster-recovery
  - age
  - privacyidea
  - lldap
  - authelia
  - keycape
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.bootstrap-recovery.md
  consumption_modes:
  - CLI
  - source
- id: capability.security.emission-profile
  name: Security emission cadence validation
  summary: Security profile over generic emission contracts and validator.
  domain: infotech
  status: draft
  owner: net-kingdom
  tags:
  - security
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.emission-profile.md
  consumption_modes:
  - CLI
  - source