coulomb/repo-manager
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
repo-manager/registry/capabilities/capability.security.repository-secret-prevention.md
tegwick 97ea248925 docs(reuse): establish reviewed NetKingdom security capabilities 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
2026-10-14 06:44:25 +02:00

3.3 KiB
Raw Blame History

id owner status domain maturity external_evidence name summary tags discovery availability relations evidence consumer_guidance
capability.security.repository-secret-prevention repo-manager draft infotech
discovery availability
current target confidence rationale
D3 D5 medium Owner scope, neighboring responsibilities, concrete use cases and limitations are documented; no exhaustive or generalized maturity claim.
current target confidence rationale
A2 A2 medium Source interface assessed 2026-10-14: Repository observation plus pinned staged-blob scanner and hook integration. Availability describes the delivery form, not production acceptance. Local hooks are bypassable; coverage is exact-checkout scoped.
completeness reliability
level confidence basis
C1 low Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.
level confidence basis
R0 low No longitudinal consumer reliability measurement established by this review.
Repository metadata and staged-secret prevention Repository observation plus pinned staged-blob scanner and hook integration.
security
netkingdom
framework-reuse
intent includes excludes use_cases
Repository observation plus pinned staged-blob scanner and hook integration
Repository observation plus pinned staged-blob scanner and hook integration
Local hooks are bypassable; coverage is exact-checkout scoped
U07: Owner inventories, rotates, revokes and detects exposure of credentials
U12: Developer builds and publishes through controlled source, dependency and runner paths
current_level target_level current_artifacts consumption_modes
A2 A2
SCOPE.md
README.md
CLI
source
related_to
capability.railiance.forge-infrastructure
capability.infotech.sbom-management
capability.statehub.workstream-coordinate
documentation
SCOPE.md
README.md
recommended_for not_recommended_for known_limitations
Owner inventories, rotates, revokes and detects exposure of credentials
Developer builds and publishes through controlled source, dependency and runner paths
Local hooks are bypassable; coverage is exact-checkout scoped
Local hooks are bypassable; coverage is exact-checkout scoped
2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Repository metadata and staged-secret prevention

Repository observation plus pinned staged-blob scanner and hook integration.

Reuse boundary

Local hooks are bypassable; coverage is exact-checkout scoped.

Supported use cases

  • U07: Owner inventories, rotates, revokes and detects exposure of credentials
  • U12: Developer builds and publishes through controlled source, dependency and runner paths

Evidence and integration

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.