railiance-telemetry/registry/capabilities/capability.observability.security-signals.md
tegwick 8cdb2d11dd docs(reuse): establish reviewed NetKingdom security capabilities
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
2026-10-14 06:42:52 +02:00

99 lines
3.4 KiB
Markdown

---
id: capability.observability.security-signals
owner: railiance-telemetry
status: draft
domain: infotech
maturity:
discovery:
current: D3
target: D5
confidence: medium
rationale: Owner scope, neighboring responsibilities, concrete use cases and limitations
are documented; no exhaustive or generalized maturity claim.
availability:
current: A2
target: A2
confidence: medium
rationale: 'Source interface assessed 2026-10-14: Signal contract, platform adapters,
report exporter and absence/alert rules. Availability describes the delivery
form, not production acceptance. Reference receiver is not a second production
plane; end-to-end delivery acceptance pending.'
external_evidence:
completeness:
level: C1
confidence: low
basis: Source artifacts establish a bounded capability; no independent consumer-completeness
assessment in this review.
reliability:
level: R0
confidence: low
basis: No longitudinal consumer reliability measurement established by this review.
name: Security-relevant telemetry contracts and adapters
summary: Signal contract, platform adapters, report exporter and absence/alert rules.
tags:
- security
- netkingdom
- framework-reuse
discovery:
intent: Signal contract, platform adapters, report exporter and absence/alert rules
includes:
- Signal contract, platform adapters, report exporter and absence/alert rules
excludes:
- Reference receiver is not a second production plane; end-to-end delivery acceptance
pending
use_cases:
- 'U08: Consumer emits security events and reconciles independently retained evidence'
- 'U09: Maintainer observes posture, prioritizes findings, coordinates work and
verifies outcomes'
availability:
current_level: A2
target_level: A2
current_artifacts:
- SCOPE.md
- README.md
consumption_modes:
- CLI
- source
relations:
related_to:
- capability.railiance.telemetry-package
- capability.audit.event-retain
- capability.security.posture-assessment
evidence:
documentation:
- SCOPE.md
- README.md
consumer_guidance:
recommended_for:
- Consumer emits security events and reconciles independently retained evidence
- Maintainer observes posture, prioritizes findings, coordinates work and verifies
outcomes
not_recommended_for:
- Reference receiver is not a second production plane; end-to-end delivery acceptance
pending
known_limitations:
- Reference receiver is not a second production plane; end-to-end delivery acceptance
pending
- 2026-10-14 architecture review estimates operational maturity separately; a registry
entry does not authorize execution or establish deployment.
---
# Security-relevant telemetry contracts and adapters
Signal contract, platform adapters, report exporter and absence/alert rules.
## Reuse boundary
Reference receiver is not a second production plane; end-to-end delivery acceptance pending.
## Supported use cases
- U08: Consumer emits security events and reconciles independently retained evidence
- U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
## Evidence and integration
- [SCOPE.md](../../SCOPE.md)
- [README.md](../../README.md)
Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.