railiance-forge/registry/capabilities/capability.security.forge-secret-prevention.md

id	owner	status	domain	maturity	external_evidence	name	summary	tags	discovery	availability	relations	evidence	consumer_guidance
capability.security.forge-secret-prevention	railiance-forge	draft	infotech	discovery availability current target confidence rationale D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim. current target confidence rationale A2 A2 medium Source interface assessed 2026-10-14: Pinned receive adapter, lifecycle template and fail-closed scan. Availability describes the delivery form, not production acceptance. Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate.	completeness reliability level confidence basis C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review. level confidence basis R0 low No longitudinal consumer reliability measurement established by this review.	Independent introduced-history secret prevention	Pinned receive adapter, lifecycle template and fail-closed scan.	security netkingdom framework-reuse	intent includes excludes use_cases Pinned receive adapter, lifecycle template and fail-closed scan Pinned receive adapter, lifecycle template and fail-closed scan Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate U07: Owner inventories, rotates, revokes and detects exposure of credentials U12: Developer builds and publishes through controlled source, dependency and runner paths	current_level target_level current_artifacts consumption_modes A2 A2 workplans/FORGE-WP-0006-independent-secret-detection.md CLI source	related_to capability.security.repository-secret-prevention capability.railiance.ci-enablement capability.railiance.workload-deployment-tooling	documentation workplans/FORGE-WP-0006-independent-secret-detection.md	recommended_for not_recommended_for known_limitations Owner inventories, rotates, revokes and detects exposure of credentials Developer builds and publishes through controlled source, dependency and runner paths Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate 2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Independent introduced-history secret prevention

Pinned receive adapter, lifecycle template and fail-closed scan.

Reuse boundary

Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate.

Supported use cases

• U07: Owner inventories, rotates, revokes and detects exposure of credentials
• U12: Developer builds and publishes through controlled source, dependency and runner paths

Evidence and integration

• workplans/FORGE-WP-0006-independent-secret-detection.md

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.