policy-nexus/registry/capabilities/capability.security.policy-publication.md
tegwick 19b65d5b31 docs: declare policy publication reuse scope
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
2026-10-19 11:24:51 +02:00

3.6 KiB

id owner status domain maturity external_evidence name summary tags discovery availability relations evidence consumer_guidance
capability.security.policy-publication policy-nexus draft infotech
discovery availability
current target confidence rationale
D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim.
current target confidence rationale
A2 A2 medium Source interface assessed 2026-10-14: Generated immutable publication, source currency and stable policy URLs. Availability describes the delivery form, not production acceptance. Publication does not ratify policy or enforce it.
completeness reliability
level confidence basis
C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.
level confidence basis
R0 low No longitudinal consumer reliability measurement established by this review.
Policy publication with source provenance Generated immutable publication, source currency and stable policy URLs.
security
netkingdom
framework-reuse
intent includes excludes use_cases
Generated immutable publication, source currency and stable policy URLs
Generated immutable publication, source currency and stable policy URLs
Publication does not ratify policy or enforce it
U01: Architect composes a security deployment from explicit owner contracts and case types
U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
U14: Framework adopter validates and reuses selected contracts, tools and reference compositions
current_level target_level current_artifacts consumption_modes
A2 A2
SCOPE.md
README.md
docs/publication-contract.md
CLI
source
related_to
capability.security.iam-tooling-suite
capability.security.practice-canon
capability.security.risk-register
documentation
SCOPE.md
README.md
docs/publication-contract.md
recommended_for not_recommended_for known_limitations
Architect composes a security deployment from explicit owner contracts and case types
Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
Framework adopter validates and reuses selected contracts, tools and reference compositions
Publication does not ratify policy or enforce it
Publication does not ratify policy or enforce it
2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Policy publication with source provenance

Generated immutable publication, source currency and stable policy URLs.

Reuse boundary

Publication does not ratify policy or enforce it.

Supported use cases

  • U01: Architect composes a security deployment from explicit owner contracts and case types
  • U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
  • U14: Framework adopter validates and reuses selected contracts, tools and reference compositions

Evidence and integration

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.