ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md

id	name	summary	owner	status	domain	tags	maturity	external_evidence	discovery	availability	relations	evidence	consumer_guidance	promotion_history
capability.ops.tunnel-bridge	SSH tunnel lifecycle	Named tunnels, reconnect, health and TTL-aware cert_command.	ops-bridge	draft	infotech	ssh tunnel ops connectivity security netkingdom framework-reuse	discovery availability current target confidence rationale D3 D5 medium README.txt documents named tunnels, auto-reconnect with exponential backoff, HTTP health checks, and structured JSON audit events per tunnel; this is also the tool underlying reuse-surface's own `/bridge` skill. current target confidence rationale A2 A3 medium Source interface assessed 2026-10-14: Named tunnels, reconnect, health and TTL-aware cert_command. Availability describes the delivery form, not production acceptance. Private transport does not authenticate applications or decide access.	completeness reliability level confidence basis satisfied_expectations broken_expectations out_of_scope_expectations C2 low scope_vs_intent_and_consumer_expectations auto-reconnecting named SSH reverse tunnels HTTP health checks confirming forwarded service reachability, not just SSH liveness structured audit event log per tunnel level confidence basis known_reliability_risks R1 low consumer_quality_signals operational tool with real production usage but no independent load/failure testing recorded in this sweep	intent includes excludes assumptions use_cases research_memos Named tunnels, reconnect, health and TTL-aware cert_command Named tunnels, reconnect, health and TTL-aware cert_command Private transport does not authenticate applications or decide access U06: Operator or automation obtains a bounded SSH certificate and maintains private connectivity	current_level target_level current_artifacts target_artifacts consumption_modes A2 A3 SCOPE.md CLI source	depends_on supports related_to capability.security.iam-tooling-suite	documentation tests consumer_feedback bug_reports incidents SCOPE.md tests/	recommended_for not_recommended_for known_limitations Operator or automation obtains a bounded SSH certificate and maintains private connectivity Private transport does not authenticate applications or decide access Private transport does not authenticate applications or decide access 2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

SSH tunnel lifecycle

Named tunnels, reconnect, health and TTL-aware cert_command.

Reuse boundary

Private transport does not authenticate applications or decide access.

Supported use cases

• U06: Operator or automation obtains a bounded SSH certificate and maintains private connectivity

Evidence and integration

• SCOPE.md

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.