railiance-telemetry/registry/capabilities/capability.observability.security-signals.md

id	owner	status	domain	maturity	external_evidence	name	summary	tags	discovery	availability	relations	evidence	consumer_guidance
capability.observability.security-signals	railiance-telemetry	draft	infotech	discovery availability current target confidence rationale D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim. current target confidence rationale A2 A2 medium Source interface assessed 2026-10-14: Signal contract, platform adapters, report exporter and absence/alert rules. Availability describes the delivery form, not production acceptance. Reference receiver is not a second production plane; end-to-end delivery acceptance pending.	completeness reliability level confidence basis C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review. level confidence basis R0 low No longitudinal consumer reliability measurement established by this review.	Security-relevant telemetry contracts and adapters	Signal contract, platform adapters, report exporter and absence/alert rules.	security netkingdom framework-reuse	intent includes excludes use_cases Signal contract, platform adapters, report exporter and absence/alert rules Signal contract, platform adapters, report exporter and absence/alert rules Reference receiver is not a second production plane; end-to-end delivery acceptance pending U08: Consumer emits security events and reconciles independently retained evidence U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes	current_level target_level current_artifacts consumption_modes A2 A2 SCOPE.md README.md CLI source	related_to capability.railiance.telemetry-package capability.audit.event-retain capability.security.posture-assessment	documentation SCOPE.md README.md	recommended_for not_recommended_for known_limitations Consumer emits security events and reconciles independently retained evidence Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes Reference receiver is not a second production plane; end-to-end delivery acceptance pending Reference receiver is not a second production plane; end-to-end delivery acceptance pending 2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Security-relevant telemetry contracts and adapters

Signal contract, platform adapters, report exporter and absence/alert rules.

Reuse boundary

Reference receiver is not a second production plane; end-to-end delivery acceptance pending.

Supported use cases

• U08: Consumer emits security events and reconciles independently retained evidence
• U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes

Evidence and integration

• SCOPE.md
• README.md

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.