coulomb/ops-warden
5
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
ops-warden/registry/capabilities/capability.security.access-routing.md
tegwick 11b2a9d7bc
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
docs(reuse): establish reviewed NetKingdom security capabilities 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
2026-10-14 06:41:08 +02:00

3.8 KiB
Raw Blame History

id owner status domain maturity external_evidence name summary tags discovery availability relations evidence consumer_guidance
capability.security.access-routing ops-warden draft infotech
discovery availability
current target confidence rationale
D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim.
current target confidence rationale
A3 A3 medium Source interface assessed 2026-10-14: warden route and access catalog; exact lane conduit and secret-exec routing. Availability describes the delivery form, not production acceptance. Routing grants no authority; interim delegates and attended high-risk lanes persist.
completeness reliability
level confidence basis
C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.
level confidence basis
R0 low No longitudinal consumer reliability measurement established by this review.
Credential routing and contained access warden route and access catalog; exact lane conduit and secret-exec routing.
security
netkingdom
framework-reuse
intent includes excludes use_cases
warden route and access catalog; exact lane conduit and secret-exec routing
warden route and access catalog; exact lane conduit and secret-exec routing
Routing grants no authority; interim delegates and attended high-risk lanes persist
U04: Protected operation obtains and consumes exact human approval before its side effect
U05: Operator provisions and delivers a scoped workload credential through the approved owner lane
U06: Operator or automation obtains a bounded SSH certificate and maintains private connectivity
current_level target_level current_artifacts consumption_modes
A3 A3
SCOPE.md
wiki/CredentialRouting.md
library
CLI
related_to
capability.security.credential-lifecycle
capability.authorization.policy-evaluate
capability.ops.tunnel-bridge
capability.security.structure-construction
documentation
SCOPE.md
wiki/CredentialRouting.md
recommended_for not_recommended_for known_limitations
Protected operation obtains and consumes exact human approval before its side effect
Operator provisions and delivers a scoped workload credential through the approved owner lane
Operator or automation obtains a bounded SSH certificate and maintains private connectivity
Routing grants no authority; interim delegates and attended high-risk lanes persist
Routing grants no authority; interim delegates and attended high-risk lanes persist
2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Credential routing and contained access

warden route and access catalog; exact lane conduit and secret-exec routing.

Reuse boundary

Routing grants no authority; interim delegates and attended high-risk lanes persist.

Supported use cases

  • U04: Protected operation obtains and consumes exact human approval before its side effect
  • U05: Operator provisions and delivers a scoped workload credential through the approved owner lane
  • U06: Operator or automation obtains a bounded SSH certificate and maintains private connectivity

Evidence and integration

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.