tegwick
90829d5505
Record the per-actor extension allow-list and max_ttl_hours ceiling with the agt-custodian profile. Point production examples at the ops-bridge OpenBao tunnel (127.0.0.1:18200) now that bao.coulomb.social is no longer public, and document the editable install. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 605711@bnt-lap001 Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
54 lines
1.4 KiB
YAML
54 lines
1.4 KiB
YAML
version: 1
|
|
updated: '2026-10-21'
|
|
domain: helix_forge
|
|
capabilities:
|
|
- id: capability.security.ssh-certificate-issuance
|
|
name: Decision-bound SSH certificates
|
|
summary: warden sign with local and OpenBao backends and adm/agt/atm actors.
|
|
domain: helix_forge
|
|
status: draft
|
|
owner: ops-warden
|
|
tags:
|
|
- ssh
|
|
- certificate
|
|
- ca
|
|
- ops-warden
|
|
- openbao
|
|
- security
|
|
- netkingdom
|
|
- framework-reuse
|
|
vector: D4 / A3 / C3 / R2
|
|
path: registry/capabilities/capability.security.ssh-certificate-issuance.md
|
|
consumption_modes:
|
|
- library
|
|
- CLI
|
|
- id: capability.security.access-routing
|
|
name: Credential routing and contained access
|
|
summary: warden route and access catalog; exact lane conduit and secret-exec routing.
|
|
domain: infotech
|
|
status: draft
|
|
owner: ops-warden
|
|
tags:
|
|
- security
|
|
- netkingdom
|
|
- framework-reuse
|
|
vector: D3 / A3 / C1 / R0
|
|
path: registry/capabilities/capability.security.access-routing.md
|
|
consumption_modes:
|
|
- library
|
|
- CLI
|
|
- id: capability.security.case-follow-through
|
|
name: Security case operational follow-through
|
|
summary: KnownSecurityCase route, plan and operational receipts.
|
|
domain: infotech
|
|
status: draft
|
|
owner: ops-warden
|
|
tags:
|
|
- security
|
|
- netkingdom
|
|
- framework-reuse
|
|
vector: D3 / A2 / C1 / R0
|
|
path: registry/capabilities/capability.security.case-follow-through.md
|
|
consumption_modes:
|
|
- CLI
|
|
- source
|