diff --git a/docs/NetKingdomSecurityDiscovery.md b/docs/NetKingdomSecurityDiscovery.md new file mode 100644 index 0000000..5fe1446 --- /dev/null +++ b/docs/NetKingdomSecurityDiscovery.md @@ -0,0 +1,27 @@ +# NetKingdom security capability discovery + +The workstation federation includes 70 reviewed security and supporting capabilities from 60 sibling repositories. Two additional inspected repositories are nonproviders: rapp-secrets-engine is retired and rapp-forgejo is a placeholder without a package declaration. The owner capability entries are the reusable source; the architecture assessment is in the-custodian CUST-WP-0081. + +## Local discovery + +From a reuse-surface checkout beside those repositories: + +```sh +reuse-surface federation compose +reuse-surface plan-check --intent "bound approval consumption before credential delivery" --no-llm +reuse-surface plan-check --intent "deterministic posture feedback evidence expiry" --no-llm +``` + +The source manifest uses relative sibling paths for the reviewed cohort and requires their indexes to exist. Other federation sources are preserved. A missing sibling is a composition error rather than silent loss of a reviewed capability. The composed local index supports planning; it is not a runtime readiness or authorization grant. `reuse-surface query` searches this repository's own index, while `plan-check` uses the composed federation. + +## Hosted discovery + +```sh +reuse-surface plan-check --hub-url https://reuse.coulomb.social --intent "bound approval consumption" --no-llm +``` + +As checked on 2026-10-14, all 60 source registry commits are published, while the hosted hub contains 32 of the 70 reviewed capabilities. Thirty-eight new owner registrations remain pending scoped write access: the normal Warden lane was allowed by the PDP but OpenBao refused the current caller with HTTP 403. Seven of those indexes also require admitted private-source read access; anonymous retrieval returns 404. Do not change repository visibility or reuse another workload's credential to make discovery pass. + +The seven private sources are rapp-openbao, rapp-policy-nexus, rapp-postgres, rapp-telemetry, rapp-tenant-engine, rapp-user-engine and rapp-sbom-nexus. Hosted registration supports an `auth_env` reference to a credential already configured at the hub. Source-owner approval, scoped read provisioning and a successful native fetch must precede their registration. Thirty-one public-source registrations are otherwise ready. + +The exact registration plan, source commits, raw retrieval results and local/hosted verification receipts are retained in the-custodian at `docs/assessments/netkingdom-2026-10-14/`. Existing IDs were preserved where valid; the copied Secrets Engine repository-template entry was removed. Registry C/R values retained from older entries remain owner assessments, not renewed evidence. diff --git a/registry/federation/sources.yaml b/registry/federation/sources.yaml index 457f4e6..02a3e22 100644 --- a/registry/federation/sources.yaml +++ b/registry/federation/sources.yaml @@ -2,20 +2,26 @@ version: 1 domain: helix_forge collision_policy: warn sources: +- repo: access-engine + index: ../access-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: activity-core - url: https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml + index: ../activity-core/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: agentic-resources - url: https://forgejo.coulomb.social/coulomb/agentic-resources/raw/main/registry/indexes/capabilities.yaml + index: ../agentic-resources/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: approval-engine + index: ../approval-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: artifact-store url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -24,12 +30,10 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: audit-core - url: https://forgejo.coulomb.social/coulomb/audit-core/raw/main/registry/indexes/capabilities.yaml + index: ../audit-core/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: can-you-assist url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -58,6 +62,13 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: commerce-canon + url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization - repo: config-atlas url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -66,12 +77,10 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: coordination-engine - url: https://forgejo.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml + index: ../coordination-engine/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: core-hub url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml enabled: true @@ -93,6 +102,11 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: emergent-security + index: ../emergent-security/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: evidence-anchor url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -121,13 +135,21 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization -- repo: access-engine - url: https://forgejo.coulomb.social/coulomb/access-engine/raw/main/registry/indexes/capabilities.yaml +- repo: fin-hub + index: ../fin-hub/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: gate-house + index: ../gate-house/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: glas-harness + index: ../glas-harness/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: guide-board url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -156,13 +178,6 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization -- repo: commerce-canon - url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml - enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization - repo: ihp-railiance-probe url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -171,12 +186,15 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: info-tech-canon - url: https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/main/registry/indexes/capabilities.yaml + index: ../info-tech-canon/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: informed-decision + index: ../informed-decision/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: infospace-bench url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -185,12 +203,10 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: issue-core - url: https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml + index: ../issue-core/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: kaizen-agentic url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -199,12 +215,15 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: key-cape - url: https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml + index: ../key-cape/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: kings-guard + index: ../kings-guard/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: kontextual-engine url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -247,13 +266,16 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization -- repo: net-kingdom - url: https://forgejo.coulomb.social/coulomb/net-kingdom/raw/main/registry/indexes/capabilities.yaml +- repo: maturity-engine + index: ../maturity-engine/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: net-kingdom + index: ../net-kingdom/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: open-cmis-tck url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -269,12 +291,10 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: ops-bridge - url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml + index: ../ops-bridge/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: ops-hub url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -282,13 +302,16 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization -- repo: ops-warden - url: https://forgejo.coulomb.social/coulomb/ops-warden/raw/main/registry/indexes/capabilities.yaml +- repo: ops-mason + index: ../ops-mason/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: ops-warden + index: ../ops-warden/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: phase-memory url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -296,55 +319,131 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: policy-nexus + index: ../policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rail-knative + index: ../rail-knative/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rail-kubernetes + index: ../rail-kubernetes/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: railiance-apps - url: https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml + index: ../railiance-apps/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: railiance-bootstrap + index: ../railiance-bootstrap/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: railiance-cluster - url: https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml + index: ../railiance-cluster/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: railiance-enablement - url: https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml + index: ../railiance-enablement/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: railiance-fabric - url: https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/main/registry/indexes/capabilities.yaml + index: ../railiance-fabric/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: railiance-forge - url: https://forgejo.coulomb.social/coulomb/railiance-forge/raw/main/registry/indexes/capabilities.yaml + index: ../railiance-forge/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: railiance-infra - url: https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml + index: ../railiance-infra/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: railiance-master + index: ../railiance-master/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: railiance-platform - url: https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml + index: ../railiance-platform/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech +- repo: railiance-telemetry + index: ../railiance-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-openbao + index: ../rapp-openbao/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-playwright + index: ../rapp-playwright/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-policy-nexus + index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-postgres + index: ../rapp-postgres/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-sbom-nexus + index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-telemetry + index: ../rapp-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-tenant-engine + index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-user-engine + index: ../rapp-user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: reef-railiance + index: ../reef-railiance/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rein-aharness + index: ../rein-aharness/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rein-openweights + index: ../rein-openweights/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: repo-manager + index: ../repo-manager/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: repo-scoping url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -359,13 +458,51 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization -- repo: reuse-surface - # Include this checkout's entries in local plan-check before publication. - index: registry/indexes/capabilities.yaml +- repo: resource-control + index: ../resource-control/registry/indexes/capabilities.yaml enabled: true required: true - domain: helix_forge - description: Capability registry for helix_forge + domain: infotech +- repo: reuse-surface + index: ../reuse-surface/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: risk-nexus + index: ../risk-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: role-engine + index: ../role-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: runbook-tutorials + index: ../runbook-tutorials/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: sand-boxer + index: ../sand-boxer/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: sbom-nexus + index: ../sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: secrets-engine + index: ../secrets-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: security-canon + index: ../security-canon/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: shard-wiki url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -374,12 +511,10 @@ sources: cache_ttl_seconds: 86400 auth_header: Authorization - repo: state-hub - url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml + index: ../state-hub/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: tegwick-control url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -387,20 +522,21 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: tenant-engine + index: ../tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: the-custodian - url: https://forgejo.coulomb.social/coulomb/the-custodian/raw/main/registry/indexes/capabilities.yaml + index: ../the-custodian/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: user-engine - url: https://forgejo.coulomb.social/coulomb/user-engine/raw/main/registry/indexes/capabilities.yaml + index: ../user-engine/registry/indexes/capabilities.yaml enabled: true - required: false - domain: helix_forge - cache_ttl_seconds: 86400 - auth_header: Authorization + required: true + domain: infotech - repo: vantage-point url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -415,6 +551,11 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: whitehat-security + index: ../whitehat-security/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech - repo: whynot-control url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml enabled: true @@ -429,3 +570,8 @@ sources: domain: helix_forge cache_ttl_seconds: 86400 auth_header: Authorization +- repo: zone-engine + index: ../zone-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech diff --git a/registry/indexes/federated.yaml b/registry/indexes/federated.yaml index ba26a8e..520c63a 100644 --- a/registry/indexes/federated.yaml +++ b/registry/indexes/federated.yaml @@ -1,272 +1,366 @@ -# Composed federated capability index. Regenerate with: -# reuse-surface federation compose version: 1 -updated: '2026-10-13' +updated: '2026-10-14' domain: helix_forge collision_policy: warn sources: +- repo: access-engine + count: 1 + index: ../access-engine/registry/indexes/capabilities.yaml - repo: activity-core count: 1 - url: https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/activity-core.yaml + index: ../activity-core/registry/indexes/capabilities.yaml - repo: agentic-resources - count: 0 - url: https://forgejo.coulomb.social/coulomb/agentic-resources/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/agentic-resources.yaml + count: 1 + index: ../agentic-resources/registry/indexes/capabilities.yaml +- repo: approval-engine + count: 1 + index: ../approval-engine/registry/indexes/capabilities.yaml - repo: artifact-store count: 1 url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/artifact-store.yaml + cache: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml - repo: audit-core count: 1 - url: https://forgejo.coulomb.social/coulomb/audit-core/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/audit-core.yaml + index: ../audit-core/registry/indexes/capabilities.yaml - repo: can-you-assist count: 1 url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/can-you-assist.yaml + cache: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml - repo: citation-engine count: 1 url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/citation-engine.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml - repo: citation-evidence count: 1 url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/citation-evidence.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml - repo: citation-work count: 0 url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/citation-work.yaml -- repo: config-atlas - count: 1 - url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/config-atlas.yaml -- repo: coordination-engine - count: 0 - url: https://forgejo.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/coordination-engine.yaml -- repo: core-hub - count: 1 - url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/core-hub.yaml -- repo: domain-tree - count: 0 - url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/domain-tree.yaml -- repo: email-connect - count: 1 - url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/email-connect.yaml -- repo: evidence-anchor - count: 0 - url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/evidence-anchor.yaml -- repo: evidence-binder - count: 2 - url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/evidence-binder.yaml -- repo: evidence-source - count: 1 - url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/evidence-source.yaml -- repo: feature-control - count: 3 - url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/feature-control.yaml -- repo: access-engine - count: 1 - url: https://forgejo.coulomb.social/coulomb/access-engine/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/access-engine.yaml -- repo: guide-board - count: 1 - url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/guide-board.yaml -- repo: helix-forge - count: 0 - url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/helix-forge.yaml -- repo: hub-core - count: 1 - url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/hub-core.yaml -- repo: human-resources - count: 1 - url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/human-resources.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-work.yaml - repo: commerce-canon count: 2 url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/commerce-canon.yaml + cache: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml +- repo: config-atlas + count: 1 + url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml +- repo: coordination-engine + count: 1 + index: ../coordination-engine/registry/indexes/capabilities.yaml +- repo: core-hub + count: 1 + url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml +- repo: domain-tree + count: 0 + url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/domain-tree.yaml +- repo: email-connect + count: 1 + url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml +- repo: emergent-security + count: 1 + index: ../emergent-security/registry/indexes/capabilities.yaml +- repo: evidence-anchor + count: 0 + url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-anchor.yaml +- repo: evidence-binder + count: 2 + url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml +- repo: evidence-source + count: 1 + url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml +- repo: feature-control + count: 3 + url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- repo: fin-hub + count: 1 + index: ../fin-hub/registry/indexes/capabilities.yaml +- repo: gate-house + count: 1 + index: ../gate-house/registry/indexes/capabilities.yaml +- repo: glas-harness + count: 1 + index: ../glas-harness/registry/indexes/capabilities.yaml +- repo: guide-board + count: 1 + url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml +- repo: helix-forge + count: 0 + url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/helix-forge.yaml +- repo: hub-core + count: 1 + url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml +- repo: human-resources + count: 1 + url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml - repo: ihp-railiance-probe count: 0 url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/ihp-railiance-probe.yaml + cache: /tmp/netkingdom-reuse-federation-cache/ihp-railiance-probe.yaml - repo: info-tech-canon count: 1 - url: https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/info-tech-canon.yaml + index: ../info-tech-canon/registry/indexes/capabilities.yaml +- repo: informed-decision + count: 1 + index: ../informed-decision/registry/indexes/capabilities.yaml - repo: infospace-bench count: 1 url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/infospace-bench.yaml + cache: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml - repo: issue-core count: 1 - url: https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/issue-core.yaml + index: ../issue-core/registry/indexes/capabilities.yaml - repo: kaizen-agentic count: 1 url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/kaizen-agentic.yaml + cache: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml - repo: key-cape count: 1 - url: https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/key-cape.yaml + index: ../key-cape/registry/indexes/capabilities.yaml +- repo: kings-guard + count: 1 + index: ../kings-guard/registry/indexes/capabilities.yaml - repo: kontextual-engine count: 1 url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/kontextual-engine.yaml + cache: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml - repo: llm-connect count: 1 url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/llm-connect.yaml + cache: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml - repo: markitect-filter count: 1 url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/markitect-filter.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml - repo: markitect-main count: 1 url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/markitect-main.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml - repo: markitect-quarkdown count: 1 url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/markitect-quarkdown.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml - repo: markitect-tool count: 1 url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/markitect-tool.yaml -- repo: net-kingdom + cache: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml +- repo: maturity-engine count: 1 - url: https://forgejo.coulomb.social/coulomb/net-kingdom/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/net-kingdom.yaml + index: ../maturity-engine/registry/indexes/capabilities.yaml +- repo: net-kingdom + count: 6 + index: ../net-kingdom/registry/indexes/capabilities.yaml - repo: open-cmis-tck count: 1 url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/open-cmis-tck.yaml + cache: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml - repo: open-reuse count: 1 url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/open-reuse.yaml + cache: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml - repo: ops-bridge count: 1 - url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/ops-bridge.yaml + index: ../ops-bridge/registry/indexes/capabilities.yaml - repo: ops-hub count: 1 url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/ops-hub.yaml -- repo: ops-warden + cache: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml +- repo: ops-mason count: 1 - url: https://forgejo.coulomb.social/coulomb/ops-warden/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/ops-warden.yaml + index: ../ops-mason/registry/indexes/capabilities.yaml +- repo: ops-warden + count: 3 + index: ../ops-warden/registry/indexes/capabilities.yaml - repo: phase-memory count: 1 url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/phase-memory.yaml + cache: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml +- repo: policy-nexus + count: 1 + index: ../policy-nexus/registry/indexes/capabilities.yaml +- repo: rail-knative + count: 1 + index: ../rail-knative/registry/indexes/capabilities.yaml +- repo: rail-kubernetes + count: 1 + index: ../rail-kubernetes/registry/indexes/capabilities.yaml - repo: railiance-apps count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-apps.yaml + index: ../railiance-apps/registry/indexes/capabilities.yaml +- repo: railiance-bootstrap + count: 1 + index: ../railiance-bootstrap/registry/indexes/capabilities.yaml - repo: railiance-cluster count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-cluster.yaml + index: ../railiance-cluster/registry/indexes/capabilities.yaml - repo: railiance-enablement count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-enablement.yaml + index: ../railiance-enablement/registry/indexes/capabilities.yaml - repo: railiance-fabric count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-fabric.yaml + index: ../railiance-fabric/registry/indexes/capabilities.yaml - repo: railiance-forge - count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-forge/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-forge.yaml + count: 2 + index: ../railiance-forge/registry/indexes/capabilities.yaml - repo: railiance-infra count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-infra.yaml + index: ../railiance-infra/registry/indexes/capabilities.yaml +- repo: railiance-master + count: 1 + index: ../railiance-master/registry/indexes/capabilities.yaml - repo: railiance-platform count: 1 - url: https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/railiance-platform.yaml + index: ../railiance-platform/registry/indexes/capabilities.yaml +- repo: railiance-telemetry + count: 1 + index: ../railiance-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-openbao + count: 1 + index: ../rapp-openbao/registry/indexes/capabilities.yaml +- repo: rapp-playwright + count: 1 + index: ../rapp-playwright/registry/indexes/capabilities.yaml +- repo: rapp-policy-nexus + count: 1 + index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml +- repo: rapp-postgres + count: 1 + index: ../rapp-postgres/registry/indexes/capabilities.yaml +- repo: rapp-sbom-nexus + count: 1 + index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml +- repo: rapp-telemetry + count: 1 + index: ../rapp-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-tenant-engine + count: 1 + index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml +- repo: rapp-user-engine + count: 1 + index: ../rapp-user-engine/registry/indexes/capabilities.yaml +- repo: reef-railiance + count: 1 + index: ../reef-railiance/registry/indexes/capabilities.yaml +- repo: rein-aharness + count: 1 + index: ../rein-aharness/registry/indexes/capabilities.yaml +- repo: rein-openweights + count: 1 + index: ../rein-openweights/registry/indexes/capabilities.yaml +- repo: repo-manager + count: 1 + index: ../repo-manager/registry/indexes/capabilities.yaml - repo: repo-scoping count: 1 url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/repo-scoping.yaml + cache: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml - repo: repo-seed count: 1 url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/repo-seed.yaml + cache: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml +- repo: resource-control + count: 1 + index: ../resource-control/registry/indexes/capabilities.yaml - repo: reuse-surface count: 3 - index: registry/indexes/capabilities.yaml + index: ../reuse-surface/registry/indexes/capabilities.yaml +- repo: risk-nexus + count: 1 + index: ../risk-nexus/registry/indexes/capabilities.yaml +- repo: role-engine + count: 1 + index: ../role-engine/registry/indexes/capabilities.yaml +- repo: runbook-tutorials + count: 1 + index: ../runbook-tutorials/registry/indexes/capabilities.yaml +- repo: sand-boxer + count: 1 + index: ../sand-boxer/registry/indexes/capabilities.yaml +- repo: sbom-nexus + count: 1 + index: ../sbom-nexus/registry/indexes/capabilities.yaml +- repo: secrets-engine + count: 1 + index: ../secrets-engine/registry/indexes/capabilities.yaml +- repo: security-canon + count: 1 + index: ../security-canon/registry/indexes/capabilities.yaml - repo: shard-wiki count: 8 url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/shard-wiki.yaml + cache: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - repo: state-hub count: 2 - url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/state-hub.yaml + index: ../state-hub/registry/indexes/capabilities.yaml - repo: tegwick-control count: 0 url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/tegwick-control.yaml + cache: /tmp/netkingdom-reuse-federation-cache/tegwick-control.yaml +- repo: tenant-engine + count: 1 + index: ../tenant-engine/registry/indexes/capabilities.yaml - repo: the-custodian count: 1 - url: https://forgejo.coulomb.social/coulomb/the-custodian/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/the-custodian.yaml + index: ../the-custodian/registry/indexes/capabilities.yaml - repo: user-engine count: 1 - url: https://forgejo.coulomb.social/coulomb/user-engine/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/user-engine.yaml + index: ../user-engine/registry/indexes/capabilities.yaml - repo: vantage-point count: 1 url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/vantage-point.yaml + cache: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml - repo: vergabe-teilnahme count: 1 url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/vergabe-teilnahme.yaml + cache: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml +- repo: whitehat-security + count: 1 + index: ../whitehat-security/registry/indexes/capabilities.yaml - repo: whynot-control count: 0 url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/whynot-control.yaml + cache: /tmp/netkingdom-reuse-federation-cache/whynot-control.yaml - repo: whynot-design count: 1 url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml - cache: registry/federation/cache/whynot-design.yaml + cache: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml +- repo: zone-engine + count: 1 + index: ../zone-engine/registry/indexes/capabilities.yaml capabilities: - id: capability.activity.event-coordinate - name: Organizational Event Coordination - summary: Coordinate structured responses to cross-domain events through activity - workflows and automation. - vector: D3 / A1 / C1 / R0 + name: Durable automation and bounded operations + summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime + sinks. domain: helix_forge status: draft owner: activity-core - path: registry/capabilities/capability.activity.event-coordinate.md tags: - activity - coordination - automation + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.activity.event-coordinate.md consumption_modes: - - informational + - HTTP API + - source source_repo: activity-core - source_url: https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/activity-core.yaml + source_index: ../activity-core/registry/indexes/capabilities.yaml - id: capability.agents.cli-assistant name: Console-Native LLM Assistant (cya) summary: Console-native, backend-agnostic assistant CLI that expresses user intent @@ -285,27 +379,27 @@ capabilities: - cli source_repo: can-you-assist source_url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/can-you-assist.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml - id: capability.agents.custodian-runtime-tooling - name: Custodian Runtime And Repo-Classification Tooling - summary: 'Generic tooling from The Custodian''s runtime and ecosystem-management - surface: an agent runtime framework (context, actions, tool adapters, policies) - and repo-classification batch tooling used across the workstation''s 61 repos.' - vector: D2 / A1 / C1 / R0 + name: Generic agent runtime and repository tooling + summary: Agent runtime modules and repository classification tooling. domain: custodian status: draft owner: the-custodian - path: registry/capabilities/capability.agents.custodian-runtime-tooling.md tags: - agents - runtime - classification + - security + - netkingdom + - framework-reuse + vector: D2 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.custodian-runtime-tooling.md consumption_modes: - - library import (runtime/) - - cli (tools/ scripts) + - CLI + - source source_repo: the-custodian - source_url: https://forgejo.coulomb.social/coulomb/the-custodian/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/the-custodian.yaml + source_index: ../the-custodian/registry/indexes/capabilities.yaml - id: capability.agents.kaizen-framework name: Kaizen Agentic Framework summary: AI agency framework providing 20 deployable agent instruction sets, project @@ -329,7 +423,7 @@ capabilities: - file contracts source_repo: kaizen-agentic source_url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/kaizen-agentic.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml - id: capability.agents.llm-connector name: Pluggable LLM Adapter Library (llm-connect) summary: Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, @@ -349,7 +443,24 @@ capabilities: - cli source_repo: llm-connect source_url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/llm-connect.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml +- id: capability.agents.performance-learning + name: Agent performance learning + summary: Capture sessions, curate patterns, distribute lessons and measure outcomes. + domain: infotech + status: draft + owner: agentic-resources + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.performance-learning.md + consumption_modes: + - CLI + - source + source_repo: agentic-resources + source_index: ../agentic-resources/registry/indexes/capabilities.yaml - id: capability.agents.repo-scoping-service name: Repository Scoping Service summary: Maps repositories from usefulness to implementation (Ability -> Capability @@ -370,46 +481,44 @@ capabilities: - ui source_repo: repo-scoping source_url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/repo-scoping.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml - id: capability.audit.event-retain - name: Audit Event Retention - summary: Collect, normalize, retain, and search audit events with integrity evidence - across tenants. - joins: operations.audit - provision: data/capability/audit-core-operational.json - vector: D4 provision / A4 / C3 / R2 + name: Independent audit custody + summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation. domain: infotech - status: production + status: draft owner: audit-core - path: registry/capabilities/capability.audit.event-retain.md tags: - - audit - - retention - - compliance + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C3 / R2 + path: registry/capabilities/capability.audit.event-retain.md consumption_modes: - - http ingest - - source module + - HTTP API + - source source_repo: audit-core - source_url: https://forgejo.coulomb.social/coulomb/audit-core/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/audit-core.yaml + source_index: ../audit-core/registry/indexes/capabilities.yaml - id: capability.authorization.policy-evaluate - name: Authorization Policy Evaluation - summary: Evaluate access decisions from policy-as-code rules for subjects, resources, - and actions. - vector: D4 / A2 / C2 / R1 + name: Policy evaluation and decision evidence + summary: Check, batch, list-allowed, explain, binding, lifetime and decision records. domain: helix_forge status: draft - owner: flex-auth - path: registry/capabilities/capability.authorization.policy-evaluate.md + owner: access-engine tags: - authorization - policy - flex-auth + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.authorization.policy-evaluate.md consumption_modes: - - source module + - HTTP API + - source source_repo: access-engine - source_url: https://forgejo.coulomb.social/coulomb/access-engine/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/access-engine.yaml + source_index: ../access-engine/registry/indexes/capabilities.yaml - id: capability.cmis.tck name: OpenCMIS Conformance-Preparation Extension summary: CMIS conformance-preparation extension for guide-board, keeping CMIS-specific @@ -428,7 +537,7 @@ capabilities: - library import (guide-board extension) source_repo: open-cmis-tck source_url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/open-cmis-tck.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml - id: capability.communication.compliance-evidence-framework name: Certification And Compliance Evidence Framework summary: Framework that turns standards, conformance, regulatory, and repository-quality @@ -448,7 +557,7 @@ capabilities: - cli source_repo: guide-board source_url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/guide-board.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml - id: capability.communication.context-engine name: Kontextual Engine (Knowledge Operations Runtime) summary: Headless knowledge-operations engine turning heterogeneous information @@ -467,7 +576,7 @@ capabilities: - library import source_repo: kontextual-engine source_url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/kontextual-engine.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml - id: capability.communication.infospace-workspace name: Infospace Workspace And Evaluation Bench summary: Workspace and service for creating, developing, evaluating, and inspecting @@ -487,7 +596,7 @@ capabilities: - library import (consumed by info-tech-canon) source_repo: infospace-bench source_url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/infospace-bench.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml - id: capability.communication.markitect-legacy-platform name: MarkiTect Legacy Platform summary: Intelligent markdown engine and information-management platform treating @@ -507,7 +616,7 @@ capabilities: - application (legacy, not recommended for new integration) source_repo: markitect-main source_url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/markitect-main.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml - id: capability.communication.markitect-quarkdown-adapter name: Markitect Quarkdown Render Adapter summary: Concrete Quarkdown render/export adapter for Markitect, mapping Markitect @@ -526,7 +635,7 @@ capabilities: - library import (plugin/entry-point) source_repo: markitect-quarkdown source_url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/markitect-quarkdown.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml - id: capability.communication.markitect-source-adapters name: Markitect Source-Format Adapters summary: Concrete source-format adapters (EPUB3, PDF) converting external document @@ -545,7 +654,7 @@ capabilities: - library import (plugin/entry-point) source_repo: markitect-filter source_url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/markitect-filter.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml - id: capability.communication.markitect-toolkit name: Markitect Markdown Toolkit And CLI summary: Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown @@ -566,7 +675,24 @@ capabilities: - library import source_repo: markitect-tool source_url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/markitect-tool.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml +- id: capability.coordination.cross-owner-work + name: Cross-owner coordination lifecycle + summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime. + domain: infotech + status: draft + owner: coordination-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.coordination.cross-owner-work.md + consumption_modes: + - CLI + - source + source_repo: coordination-engine + source_index: ../coordination-engine/registry/indexes/capabilities.yaml - id: capability.design.whynot-system name: Whynot Design System summary: 'Framework-agnostic visual language for whynot prototype/market-signal @@ -587,7 +713,7 @@ capabilities: - django template adapter source_repo: whynot-design source_url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/whynot-design.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml - id: capability.evidence.binding name: Evidence-to-Target Binding summary: Links evidence items to structured targets with relation, status, and confidence @@ -609,7 +735,7 @@ capabilities: - React provider source_repo: evidence-binder source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/evidence-binder.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml - id: capability.evidence.rect-registry name: Visual-Guide Rect Registry summary: Coordinates field, evidence-card, and highlight rectangles from independent @@ -630,7 +756,83 @@ capabilities: - React component source_repo: evidence-binder source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/evidence-binder.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml +- id: capability.execution.openweight-rein + name: Bounded open-weight agent execution + summary: Tool loop, path guards, turn/budget limits and verified-commit result. + domain: infotech + status: draft + owner: rein-openweights + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.openweight-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-openweights + source_index: ../rein-openweights/registry/indexes/capabilities.yaml +- id: capability.execution.profile-harness + name: Profile-bound agent execution lifecycle + summary: Typed execution requests, profile/rein resolution, sandbox and cleanup + orchestration. + domain: infotech + status: draft + owner: glas-harness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.execution.profile-harness.md + consumption_modes: + - library + - CLI + source_repo: glas-harness + source_index: ../glas-harness/registry/indexes/capabilities.yaml +- id: capability.execution.sandbox-provision + name: Sandbox establishment and lifecycle + summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry. + domain: infotech + status: draft + owner: sand-boxer + tags: + - sandbox + - isolation + - provision + - e2e + - agentic + - execution + - profile + - security + - netkingdom + - framework-reuse + vector: D5 / A5 / C5 / R0 + path: registry/capabilities/execution.sandbox-provision.md + consumption_modes: + - containerized service + - CLI + source_repo: sand-boxer + source_index: ../sand-boxer/registry/indexes/capabilities.yaml +- id: capability.execution.scheduled-agent-rein + name: Scheduled agent intake and harness routing + summary: Activity Core lease claim/heartbeat and Glas profile execution. + domain: infotech + status: draft + owner: rein-aharness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.scheduled-agent-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-aharness + source_index: ../rein-aharness/registry/indexes/capabilities.yaml - id: capability.feature-control.evaluate name: Feature Availability Evaluation summary: Evaluate whether a feature is active, hidden, disabled, or unavailable @@ -649,7 +851,7 @@ capabilities: - service API source_repo: feature-control source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/feature-control.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml - id: capability.feature-control.rollout name: Feature Rollout Control summary: Gradually expose features to subjects across tenants, domains, groups, @@ -668,7 +870,7 @@ capabilities: - SDK source_repo: feature-control source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/feature-control.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml - id: capability.feature-control.visibility name: Feature Visibility Control summary: Control whether features are visible or hidden for subjects without changing @@ -685,7 +887,24 @@ capabilities: - source module source_repo: feature-control source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/feature-control.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- id: capability.finance.security-budget-evidence + name: Budget and cost evidence for security operations + summary: Budget, commitment, spend attribution and planning-evidence consumption. + domain: infotech + status: draft + owner: fin-hub + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.finance.security-budget-evidence.md + consumption_modes: + - HTTP API + - source + source_repo: fin-hub + source_index: ../fin-hub/registry/indexes/capabilities.yaml - id: capability.graph.nbgm-spec name: Network-Based Graph Model (NBGM) Specification summary: Generic system and versioned protocol specification for exploring dependency @@ -704,7 +923,7 @@ capabilities: - informational (specification only) source_repo: vantage-point source_url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/vantage-point.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml - id: capability.hr.workflow-catalog name: HR Workflow Catalog summary: Markdown-first registry of HR planning workflows with an iterative assessment @@ -723,27 +942,26 @@ capabilities: - informational source_repo: human-resources source_url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/human-resources.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml - id: capability.iam.key-cape - name: KeyCape Lightweight IAM (NetKingdom Profile) - summary: Lightweight-mode implementation of the NetKingdom IAM Profile (versioned - OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications - integrate against the profile, not against implementation internals. - vector: D4 / A2 / C2 / R1 + name: OIDC identity and assurance + summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI. domain: infotech status: draft owner: key-cape - path: registry/capabilities/capability.iam.key-cape.md tags: - iam - oidc - netkingdom - security + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.iam.key-cape.md consumption_modes: - - service (self-hosted deployment) + - HTTP API + - source source_repo: key-cape - source_url: https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/key-cape.yaml + source_index: ../key-cape/registry/indexes/capabilities.yaml - id: capability.identity.subject-resolution name: Identity Subject Resolution summary: Resolve who or what is acting by mapping principals, accounts, actors, @@ -761,26 +979,45 @@ capabilities: - informational source_repo: commerce-canon source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/commerce-canon.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml +- id: capability.identity.tenant-facts + name: Tenant lifecycle and guardrail facts + summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store. + domain: infotech + status: draft + owner: tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.identity.tenant-facts.md + consumption_modes: + - HTTP API + - source + source_repo: tenant-engine + source_index: ../tenant-engine/registry/indexes/capabilities.yaml - id: capability.identity.user-engine - name: Headless Multi-Tenant User Engine - summary: Headless, multi-application, multi-tenant user management engine covering - registration, identity/factor models, entitlement claims, hats/realms/services/assets - access profiles, and onboarding journeys. - vector: D4 / A1 / C2 / R0 + name: User lifecycle and account journeys + summary: Accounts, identity links, membership, MFA and recovery portal, advisory + catalog. domain: communication status: draft owner: user-engine - path: registry/capabilities/capability.identity.user-engine.md tags: - identity - user-management - multi-tenant + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R0 + path: registry/capabilities/capability.identity.user-engine.md consumption_modes: - - library import + - HTTP API + - source source_repo: user-engine - source_url: https://forgejo.coulomb.social/coulomb/user-engine/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/user-engine.yaml + source_index: ../user-engine/registry/indexes/capabilities.yaml - id: capability.identity.vocabulary-canonicalize name: Identity Vocabulary Canonicalization summary: Define an implementation-neutral vocabulary for identity-related concepts @@ -798,7 +1035,7 @@ capabilities: - informational source_repo: commerce-canon source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/commerce-canon.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml - id: capability.infotech.artifact-store name: Artifact Registry And Storage Gateway summary: Generic artifact registry and storage gateway for generated outputs, evidence @@ -818,27 +1055,27 @@ capabilities: - cli source_repo: artifact-store source_url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/artifact-store.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml - id: capability.infotech.canon-service - name: InfoTechCanon Service Surface - summary: Concrete service surface (CLI, importable functions, read-only local HTTP - API) over the InfoTechCanon information-processing infospace, backed by infospace-bench. - vector: D2 / A2 / C1 / R0 + name: Shared semantic contracts and validation + summary: Markdown canon with library, CLI and read-only API. domain: infotech status: draft owner: info-tech-canon - path: registry/capabilities/capability.infotech.canon-service.md tags: - canon - infospace - service + - security + - netkingdom + - framework-reuse + vector: D2 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.canon-service.md consumption_modes: - - cli - - library import - - http api (read-only, local) + - HTTP API + - source source_repo: info-tech-canon - source_url: https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/info-tech-canon.yaml + source_index: ../info-tech-canon/registry/indexes/capabilities.yaml - id: capability.infotech.citation-engine name: Citation Evidence Domain Engine summary: "Core domain model and engine services for the citation-evidence ecosystem\ @@ -857,7 +1094,7 @@ capabilities: - library import (workspace link) source_repo: citation-engine source_url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/citation-engine.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml - id: capability.infotech.citation-evidence-workspace name: Citation Evidence Workspace summary: "Document-centered evidence workspace for capturing, managing, presenting,\ @@ -876,7 +1113,7 @@ capabilities: - application (local dev server) source_repo: citation-evidence source_url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/citation-evidence.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml - id: capability.infotech.config-surface-atlas name: Configuration Surface Atlas summary: "Read-first, cross-kind map and evidence layer for configuration surfaces\ @@ -898,7 +1135,7 @@ capabilities: - source module source_repo: config-atlas source_url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/config-atlas.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml - id: capability.infotech.core-hub name: Core Hub Production Interaction Framework summary: Contract-first framework for cross-domain state, agent coordination, evidence, @@ -921,7 +1158,7 @@ capabilities: - cli source_repo: core-hub source_url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/core-hub.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml - id: capability.infotech.email-connector name: Mailbox Evidence Scanner (email-connect) summary: Headless, provider-neutral email communication and evidence service; first @@ -940,7 +1177,7 @@ capabilities: - cli source_repo: email-connect source_url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/email-connect.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml - id: capability.infotech.headless-browser name: Headless Browser Automation summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright @@ -980,7 +1217,7 @@ capabilities: - service API - container source_repo: reuse-surface - source_index: registry/indexes/capabilities.yaml + source_index: ../reuse-surface/registry/indexes/capabilities.yaml - id: capability.infotech.hub-core-library name: Reusable FOS Hub Core Primitives summary: Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State @@ -999,27 +1236,27 @@ capabilities: - library import source_repo: hub-core source_url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/hub-core.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml - id: capability.infotech.issue-tracking - name: Universal Issue Tracking Coordination - summary: Unified Python/CLI interface for issue tracking across Forgejo, GitHub, - and GitLab, preventing direct platform API usage and credential sprawl for coordinating - agents. - vector: D4 / A2 / C2 / R1 + name: External issue tracker connector + summary: CLI and Python adapters for external issue systems. domain: infotech status: draft owner: issue-core - path: registry/capabilities/capability.infotech.issue-tracking.md tags: - issue-tracking - - coordination - - multi-platform + - connector + - work-record + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.infotech.issue-tracking.md consumption_modes: - - cli - - library import + - CLI + - source source_repo: issue-core - source_url: https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/issue-core.yaml + source_index: ../issue-core/registry/indexes/capabilities.yaml - id: capability.infotech.oss-integration-continuity name: Managed Continuity For OSS Integrations summary: Turns proven open-source integrations into structured, maintainable, continuously @@ -1038,7 +1275,7 @@ capabilities: - library import source_repo: open-reuse source_url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/open-reuse.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml - id: capability.infotech.pdf-evidence-ingest name: Headless PDF Evidence Ingest summary: "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation\ @@ -1059,7 +1296,7 @@ capabilities: - library import source_repo: evidence-source source_url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/evidence-source.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml - id: capability.infotech.repo-template name: Coulomb Repository Template summary: Bootstrap new git repositories with agent instructions, registry scaffold, @@ -1079,7 +1316,41 @@ capabilities: - informational source_repo: repo-seed source_url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/repo-seed.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml +- id: capability.infotech.runbook-tutorials + name: Guided administrative runbooks + summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence. + domain: infotech + status: draft + owner: runbook-tutorials + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.infotech.runbook-tutorials.md + consumption_modes: + - CLI + - source + source_repo: runbook-tutorials + source_index: ../runbook-tutorials/registry/indexes/capabilities.yaml +- id: capability.infotech.sbom-management + name: Dependency provenance and SBOM evidence + summary: Controlled archive ingest, immutable snapshots, freshness and license review. + domain: infotech + status: draft + owner: sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.sbom-management.md + consumption_modes: + - HTTP API + - source + source_repo: sbom-nexus + source_index: ../sbom-nexus/registry/indexes/capabilities.yaml - id: capability.memory.phase-planning name: Profile-Driven Memory Phase Planning (phase-memory) summary: Interprets Markitect memory profiles as runtime plans, modeling memory @@ -1098,7 +1369,24 @@ capabilities: - library import source_repo: phase-memory source_url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/phase-memory.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml +- id: capability.observability.security-signals + name: Security-relevant telemetry contracts and adapters + summary: Signal contract, platform adapters, report exporter and absence/alert rules. + domain: infotech + status: draft + owner: railiance-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.observability.security-signals.md + consumption_modes: + - CLI + - source + source_repo: railiance-telemetry + source_index: ../railiance-telemetry/registry/indexes/capabilities.yaml - id: capability.operations.ops-hub name: Operations Hub Extension Contract summary: Versioned hub-extension package and bootstrap client for operational truth, @@ -1118,27 +1406,44 @@ capabilities: - command-line bootstrap source_repo: ops-hub source_url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/ops-hub.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml - id: capability.ops.tunnel-bridge - name: SSH Reverse Tunnel Lifecycle Manager (ops-bridge) - summary: CLI that manages named SSH reverse tunnels keeping remote execution environments - connected to the local Custodian State Hub, with auto-reconnect, health checks, - and structured audit events. - vector: D3 / A2 / C2 / R1 + name: SSH tunnel lifecycle + summary: Named tunnels, reconnect, health and TTL-aware cert_command. domain: infotech status: draft owner: ops-bridge - path: registry/capabilities/capability.ops.tunnel-bridge.md tags: - ssh - tunnel - ops - connectivity + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.ops.tunnel-bridge.md consumption_modes: - - cli + - CLI + - source source_repo: ops-bridge - source_url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/ops-bridge.yaml + source_index: ../ops-bridge/registry/indexes/capabilities.yaml +- id: capability.organization.role-catalog + name: Organizational role definitions + summary: Versioned documentation catalog. + domain: infotech + status: draft + owner: role-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.organization.role-catalog.md + consumption_modes: + - informational + source_repo: role-engine + source_index: ../role-engine/registry/indexes/capabilities.yaml - id: capability.procurement.vergabe-teilnahme name: Vergabe Teilnahme (Public Procurement Participation) Application summary: "Django application (with a Vite/Tailwind frontend) for managing German\ @@ -1157,222 +1462,802 @@ capabilities: - application (Django + Vite, local dev via docker-compose) source_repo: vergabe-teilnahme source_url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/vergabe-teilnahme.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml +- id: capability.railiance.bootstrap-sequencing + name: Bootstrap sequencing contracts + summary: Bare-VM to estate sequence and handoff contract. + domain: infotech + status: draft + owner: railiance-bootstrap + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.bootstrap-sequencing.md + consumption_modes: + - informational + source_repo: railiance-bootstrap + source_index: ../railiance-bootstrap/registry/indexes/capabilities.yaml +- id: capability.railiance.browser-verification + name: Managed browser verification pilot + summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts. + domain: infotech + status: draft + owner: rapp-playwright + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.railiance.browser-verification.md + consumption_modes: + - HTTP API + - source + source_repo: rapp-playwright + source_index: ../rapp-playwright/registry/indexes/capabilities.yaml - id: capability.railiance.ci-enablement - name: Railiance Developer Enablement And CI/CD Templates - summary: "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable\ - \ CI/CD workflow templates, developer portal paths, platform templates, SDKs,\ - \ and buildpacks, using forge capabilities without owning forge runtime." - vector: D3 / A2 / C2 / R1 + name: Developer delivery and CI templates + summary: Reusable CI workflows, build and deployment patterns. domain: financials status: draft owner: railiance-enablement - path: registry/capabilities/capability.railiance.ci-enablement.md tags: - railiance - ci-cd - developer-enablement - forgejo + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.ci-enablement.md consumption_modes: - - ci workflow template (copy/reference) - - cli (promote-repo-to-forgejo.sh) + - CLI + - source source_repo: railiance-enablement - source_url: https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-enablement.yaml + source_index: ../railiance-enablement/registry/indexes/capabilities.yaml - id: capability.railiance.cluster-bootstrap - name: Railiance Cluster Runtime Bootstrap - summary: 'Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: - from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated - Kubernetes-based environment.' - vector: D3 / A2 / C1 / R0 + name: Kubernetes runtime and cluster controls + summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks. domain: financials status: draft owner: railiance-cluster - path: registry/capabilities/capability.railiance.cluster-bootstrap.md tags: - railiance - kubernetes - iac - bootstrap + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.cluster-bootstrap.md consumption_modes: - - cli - - ansible playbook + - CLI + - source source_repo: railiance-cluster - source_url: https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-cluster.yaml + source_index: ../railiance-cluster/registry/indexes/capabilities.yaml - id: capability.railiance.fabric-graph - name: Railiance Fabric Ecosystem Graph - summary: 'Models the durable infrastructure-responsibility graph of the Railiance - netkingdom: schemas, discovery tools, registry services, graph queries, and State - Hub export contracts for services, machines, repos, deployables, endpoints, ownership, - dependencies, and bindings.' - vector: D3 / A1 / C1 / R0 + name: Infrastructure ownership and dependency graph + summary: Schemas, validation, graph queries and State Hub exports. domain: financials status: draft owner: railiance-fabric - path: registry/capabilities/capability.railiance.fabric-graph.md tags: - railiance - graph - ownership - discovery + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.fabric-graph.md consumption_modes: - - library import - - cli (validation) + - CLI + - source source_repo: railiance-fabric - source_url: https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-fabric.yaml + source_index: ../railiance-fabric/registry/indexes/capabilities.yaml - id: capability.railiance.forge-infrastructure - name: Railiance Forge And Artifact Infrastructure - summary: Source forge, registry, and automation-runner infrastructure for Railiance, - separated out from railiance-apps/railiance-enablement; covers current Gitea operation, - the Forgejo migration, container/package registries, and Actions runner substrate. - vector: D3 / A1 / C1 / R0 + name: Source forge, registries and runner substrate + summary: Forgejo operation, package registries and runner lifecycle. domain: financials status: draft owner: railiance-forge - path: registry/capabilities/capability.railiance.forge-infrastructure.md tags: - railiance - forgejo - forge - ci-runner + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.forge-infrastructure.md consumption_modes: - - cli (operator tooling) - - documentation/runbooks + - CLI + - source source_repo: railiance-forge - source_url: https://forgejo.coulomb.social/coulomb/railiance-forge/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-forge.yaml + source_index: ../railiance-forge/registry/indexes/capabilities.yaml - id: capability.railiance.infra-provisioning - name: RailianceHosts Infrastructure Provisioning - summary: Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud - using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets - and a servers.yaml inventory as source of truth. - vector: D4 / A2 / C2 / R1 + name: Host convergence and security baseline + summary: Ansible inventory, firewall, SSH bootstrap and baseline verification. domain: financials status: draft owner: railiance-infra - path: registry/capabilities/capability.railiance.infra-provisioning.md tags: - railiance - terraform - ansible - infrastructure + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.infra-provisioning.md consumption_modes: - - cli (terraform/ansible) - - gitops + - CLI + - source source_repo: railiance-infra - source_url: https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-infra.yaml -- id: capability.railiance.platform-services - name: Railiance Platform Services - summary: "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster\ - \ services: PostgreSQL HA, Valkey cache, secret management, identity integration,\ - \ and object storage." + source_index: ../railiance-infra/registry/indexes/capabilities.yaml +- id: capability.railiance.knative-rail + name: Knative workload lifecycle + summary: Derived rail for activation, revisions, traffic, scaling and rollback. + domain: infotech + status: draft + owner: rail-knative + tags: + - security + - netkingdom + - framework-reuse vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.knative-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-knative + source_index: ../rail-knative/registry/indexes/capabilities.yaml +- id: capability.railiance.kubernetes-rail + name: Generic Kubernetes workload lifecycle + summary: Workload declaration, rollout, observe, promote and rollback surfaces. + domain: infotech + status: draft + owner: rail-kubernetes + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.kubernetes-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-kubernetes + source_index: ../rail-kubernetes/registry/indexes/capabilities.yaml +- id: capability.railiance.openbao-package + name: Managed OpenBao deployment package + summary: Helm values, package deploy/status/smoke/rollback and custody boundary. + domain: infotech + status: draft + owner: rapp-openbao + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.openbao-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-openbao + source_index: ../rapp-openbao/registry/indexes/capabilities.yaml +- id: capability.railiance.platform-services + name: Secret custody and platform data services + summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup + contracts. domain: financials status: draft owner: railiance-platform - path: registry/capabilities/capability.railiance.platform-services.md tags: - railiance - platform - secrets - postgres + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.platform-services.md consumption_modes: - - cli (shell/python scripts) + - CLI + - source source_repo: railiance-platform - source_url: https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-platform.yaml + source_index: ../railiance-platform/registry/indexes/capabilities.yaml +- id: capability.railiance.policy-publication-package + name: Policy publication runtime package + summary: Immutable image, non-root/read-only runtime and approved TLS exposure. + domain: infotech + status: draft + owner: rapp-policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.policy-publication-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-policy-nexus + source_index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.postgres-isolation-recovery + name: Database isolation and recovery package + summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore + procedures. + domain: infotech + status: draft + owner: rapp-postgres + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md + consumption_modes: + - CLI + - source + source_repo: rapp-postgres + source_index: ../rapp-postgres/registry/indexes/capabilities.yaml +- id: capability.railiance.sbom-runtime-package + name: Private SBOM runtime and dynamic database delivery + summary: Immutable deployment, private network policy, dynamic database leases and + migration/rollback. + domain: infotech + status: draft + owner: rapp-sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.sbom-runtime-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-sbom-nexus + source_index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.security-consumption-contracts + name: Platform security consumption architecture + summary: Rail/rapp/reef boundaries, exposure and security consumption contracts. + domain: infotech + status: draft + owner: railiance-master + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.security-consumption-contracts.md + consumption_modes: + - informational + source_repo: railiance-master + source_index: ../railiance-master/registry/indexes/capabilities.yaml +- id: capability.railiance.substrate-bindings + name: Substrate topology and bindings + summary: Grouped home-reef identity, topology and placement declarations. + domain: infotech + status: draft + owner: reef-railiance + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.substrate-bindings.md + consumption_modes: + - informational + source_repo: reef-railiance + source_index: ../reef-railiance/registry/indexes/capabilities.yaml +- id: capability.railiance.telemetry-package + name: Private monitoring package + summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence. + domain: infotech + status: draft + owner: rapp-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.telemetry-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-telemetry + source_index: ../rapp-telemetry/registry/indexes/capabilities.yaml +- id: capability.railiance.tenant-engine-package + name: Tenant Engine runtime package + summary: Package declaration, smoke and rollback. + domain: infotech + status: draft + owner: rapp-tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.tenant-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-tenant-engine + source_index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.user-engine-package + name: User Engine runtime package + summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback. + domain: infotech + status: draft + owner: rapp-user-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.user-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-user-engine + source_index: ../rapp-user-engine/registry/indexes/capabilities.yaml - id: capability.railiance.workload-deployment-tooling - name: Railiance Application Workload Deployment Tooling - summary: "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack\ - \ \u2014 application Helm releases, Kubernetes workload manifests, deployment\ - \ guardrails, and smoke-test/check tooling for user-facing services." - vector: D3 / A2 / C1 / R1 + name: Workload release configuration and guards + summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback. domain: financials status: draft owner: railiance-apps - path: registry/capabilities/capability.railiance.workload-deployment-tooling.md tags: - railiance - kubernetes - helm - deployment + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.railiance.workload-deployment-tooling.md consumption_modes: - - cli (shell scripts) - - helm/kubernetes deployment + - CLI + - source source_repo: railiance-apps - source_url: https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/railiance-apps.yaml + source_index: ../railiance-apps/registry/indexes/capabilities.yaml - id: capability.registry.register - name: Capability Registration - summary: Register a new capability so it becomes visible for planning and implementation - reuse. - vector: D3 / A4 / C2 / R3 + name: Capability registry and federation + summary: Owner Markdown entries, indexes, federation hub and planning queries. domain: helix_forge status: draft owner: reuse-surface - path: registry/capabilities/capability.registry.register.md tags: - registry - governance - meta + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C2 / R3 + path: registry/capabilities/capability.registry.register.md consumption_modes: - - informational - - markdown authoring - - cli - - service API + - library + - CLI source_repo: reuse-surface - source_index: registry/indexes/capabilities.yaml + source_index: ../reuse-surface/registry/indexes/capabilities.yaml - id: capability.registry.validate - name: Registry Entry Validation - summary: Validate capability registry entries against schema, index consistency, - and relation integrity. - vector: D4 / A3 / C3 / R3 + name: Capability registry validation + summary: Schema, index consistency and relation checks. domain: helix_forge status: draft owner: reuse-surface - path: registry/capabilities/capability.registry.validate.md tags: - registry - validation - cli + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R3 + path: registry/capabilities/capability.registry.validate.md consumption_modes: - - cli + - library + - CLI source_repo: reuse-surface - source_index: registry/indexes/capabilities.yaml -- id: capability.security.iam-tooling-suite - name: NetKingdom Security/IAM Tooling Suite - summary: Canonical security architecture and executable reference tooling for IAM, - bootstrap, posture validation, deterministic plan-only security scenario composition, - and proposal-only posture feedback. - vector: D3 / A2 / C1 / R1 + source_index: ../reuse-surface/registry/indexes/capabilities.yaml +- id: capability.resources.security-capacity + name: Capacity and recovery resource planning + summary: Provider-neutral inventory, procurement evidence and optimization reports. + domain: infotech + status: draft + owner: resource-control + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.resources.security-capacity.md + consumption_modes: + - CLI + - source + source_repo: resource-control + source_index: ../resource-control/registry/indexes/capabilities.yaml +- id: capability.security.access-routing + name: Credential routing and contained access + summary: warden route and access catalog; exact lane conduit and secret-exec routing. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.security.access-routing.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.adversarial-evidence + name: Authorized adversarial evidence harness + summary: Offline ASM and tenancy calibrations and engagement admission. + domain: infotech + status: draft + owner: whitehat-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.adversarial-evidence.md + consumption_modes: + - CLI + - source + source_repo: whitehat-security + source_index: ../whitehat-security/registry/indexes/capabilities.yaml +- id: capability.security.agent-knowledge + name: Verified security orientation for agents + summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed + exports. + domain: infotech + status: draft + owner: emergent-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.agent-knowledge.md + consumption_modes: + - CLI + - source + source_repo: emergent-security + source_index: ../emergent-security/registry/indexes/capabilities.yaml +- id: capability.security.approval-lifecycle + name: Bound approval lifecycle + summary: Authenticated issue, claim, revoke, supersede and atomic consume API with + outbox. + domain: infotech + status: draft + owner: approval-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.approval-lifecycle.md + consumption_modes: + - HTTP API + - source + source_repo: approval-engine + source_index: ../approval-engine/registry/indexes/capabilities.yaml +- id: capability.security.bootstrap-recovery + name: Guarded bootstrap and recovery preparation + summary: Local identity, bootstrap console, encrypted custody handoff and caller + tools. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.bootstrap-recovery.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-contracts + name: Security case types and instance validation + summary: Versioned types, cases and schema validation. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-contracts.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-follow-through + name: Security case operational follow-through + summary: KnownSecurityCase route, plan and operational receipts. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-follow-through.md + consumption_modes: + - CLI + - source + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.credential-lifecycle + name: Cataloged credential lifecycle + summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, + delivery and revoke. + domain: infotech + status: draft + owner: secrets-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.credential-lifecycle.md + consumption_modes: + - CLI + - source + source_repo: secrets-engine + source_index: ../secrets-engine/registry/indexes/capabilities.yaml +- id: capability.security.doctrine-review + name: Security doctrine and architecture review + summary: Layer rules, authority context, ASM criteria and interpretations. + domain: infotech + status: draft + owner: gate-house + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.doctrine-review.md + consumption_modes: + - informational + source_repo: gate-house + source_index: ../gate-house/registry/indexes/capabilities.yaml +- id: capability.security.emission-profile + name: Security emission cadence validation + summary: Security profile over generic emission contracts and validator. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.emission-profile.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.forge-secret-prevention + name: Independent introduced-history secret prevention + summary: Pinned receive adapter, lifecycle template and fail-closed scan. + domain: infotech + status: draft + owner: railiance-forge + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.forge-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: ../railiance-forge/registry/indexes/capabilities.yaml +- id: capability.security.human-decision-workspace + name: Human security decision presentation and disposition + summary: Headless lifecycle and browser workspace with exact native approval references. + domain: infotech + status: draft + owner: informed-decision + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.human-decision-workspace.md + consumption_modes: + - HTTP API + - source + source_repo: informed-decision + source_index: ../informed-decision/registry/indexes/capabilities.yaml +- id: capability.security.iam-tooling-suite + name: NetKingdom security architecture and conformance tooling + summary: Versioned IAM, layer, tenancy and credential contracts plus validators. domain: infotech status: draft owner: net-kingdom - path: registry/capabilities/capability.security.iam-tooling-suite.md tags: - security - iam - kubernetes - conformance + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.security.iam-tooling-suite.md consumption_modes: - - cli - - local web ui + - CLI + - source source_repo: net-kingdom - source_url: https://forgejo.coulomb.social/coulomb/net-kingdom/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/net-kingdom.yaml + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.maturity-claims + name: Evidence-based maturity claims and gap register + summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and + stance inventory. + domain: infotech + status: draft + owner: maturity-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.maturity-claims.md + consumption_modes: + - CLI + - source + source_repo: maturity-engine + source_index: ../maturity-engine/registry/indexes/capabilities.yaml +- id: capability.security.policy-publication + name: Policy publication with source provenance + summary: Generated immutable publication, source currency and stable policy URLs. + domain: infotech + status: draft + owner: policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.policy-publication.md + consumption_modes: + - CLI + - source + source_repo: policy-nexus + source_index: ../policy-nexus/registry/indexes/capabilities.yaml +- id: capability.security.posture-assessment + name: Security posture assessment and response proposals + summary: Normalized observation evaluator, cadence checks and secret-use snapshot + adapter. + domain: infotech + status: draft + owner: kings-guard + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-assessment.md + consumption_modes: + - CLI + - source + source_repo: kings-guard + source_index: ../kings-guard/registry/indexes/capabilities.yaml +- id: capability.security.posture-feedback + name: Deterministic posture feedback + summary: CLI evaluates evidence age and posture into owner-routed findings. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-feedback.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.practice-canon + name: Security practice and authority vocabulary + summary: Versioned SEC-DSM and Mode of Authority documents. + domain: infotech + status: draft + owner: security-canon + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.practice-canon.md + consumption_modes: + - informational + source_repo: security-canon + source_index: ../security-canon/registry/indexes/capabilities.yaml +- id: capability.security.repository-secret-prevention + name: Repository metadata and staged-secret prevention + summary: Repository observation plus pinned staged-blob scanner and hook integration. + domain: infotech + status: draft + owner: repo-manager + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.repository-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: repo-manager + source_index: ../repo-manager/registry/indexes/capabilities.yaml +- id: capability.security.risk-register + name: Security risk and exception review register + summary: Markdown findings and Python review, verification and due-work reports. + domain: infotech + status: draft + owner: risk-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.risk-register.md + consumption_modes: + - CLI + - source + source_repo: risk-nexus + source_index: ../risk-nexus/registry/indexes/capabilities.yaml +- id: capability.security.scenario-compose + name: Deterministic security scenario composition + summary: CLI selects pinned providers and orders trust transitions. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.scenario-compose.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml - id: capability.security.ssh-certificate-issuance - name: SSH Certificate Issuance - summary: Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors - through a stable cert_command CLI interface; steward NetKingdom operational access - routing. - vector: D4 / A3 / C3 / R2 + name: Decision-bound SSH certificates + summary: warden sign with local and OpenBao backends and adm/agt/atm actors. domain: helix_forge status: draft owner: ops-warden - path: registry/capabilities/capability.security.ssh-certificate-issuance.md tags: - ssh - certificate @@ -1380,49 +2265,90 @@ capabilities: - ops-warden - openbao - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R2 + path: registry/capabilities/capability.security.ssh-certificate-issuance.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.structure-construction + name: Reviewed security structure construction + summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply. + domain: infotech + status: draft + owner: ops-mason + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.structure-construction.md consumption_modes: - CLI - - cert_command subprocess - source_repo: ops-warden - source_url: https://forgejo.coulomb.social/coulomb/ops-warden/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/ops-warden.yaml + - source + source_repo: ops-mason + source_index: ../ops-mason/registry/indexes/capabilities.yaml +- id: capability.security.zone-reference + name: Zone membership reference conformance + summary: Offline resolution, exception and lineage checks. + domain: infotech + status: draft + owner: zone-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.zone-reference.md + consumption_modes: + - CLI + - source + source_repo: zone-engine + source_index: ../zone-engine/registry/indexes/capabilities.yaml - id: capability.statehub.progress-log - name: Work Progress Logging - summary: Record progress events, decisions, and session notes against workstreams - and tasks in State Hub. - vector: D4 / A4 / C3 / R3 + name: Progress and work evidence indexing + summary: REST progress and task evidence references. domain: helix_forge status: draft owner: state-hub - path: registry/capabilities/capability.statehub.progress-log.md tags: - state-hub - progress - coordination + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R3 + path: registry/capabilities/capability.statehub.progress-log.md consumption_modes: - - service API + - HTTP API + - source source_repo: state-hub - source_url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/state-hub.yaml + source_index: ../state-hub/registry/indexes/capabilities.yaml - id: capability.statehub.workstream-coordinate - name: Workstream And Task Coordination - summary: Track active workstreams, tasks, progress, and consistency across domain - repositories. - vector: D4 / A4 / C3 / R2 + name: Cross-repository work tracking + summary: File-derived workplans, tasks, dependencies, decisions and coordination + views. domain: helix_forge status: draft owner: state-hub - path: registry/capabilities/capability.statehub.workstream-coordinate.md tags: - state-hub - coordination - workplans + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R2 + path: registry/capabilities/capability.statehub.workstream-coordinate.md consumption_modes: - - service API - - HTTP REST + - HTTP API + - source source_repo: state-hub - source_url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/state-hub.yaml + source_index: ../state-hub/registry/indexes/capabilities.yaml - id: capability.wiki.adapter-contract name: Capability-Aware Shard Adapter Contract summary: A versioned backend interface where each binding declares a verified capability @@ -1443,7 +2369,7 @@ capabilities: - source module source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.coordination-journal name: Event-Sourced Coordination Journal summary: An append-only, totally-ordered-per-space decision log whose current state @@ -1464,7 +2390,7 @@ capabilities: - source module source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.derived-views name: Wiki Derived Views summary: "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges,\ @@ -1485,7 +2411,7 @@ capabilities: - informational source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.engine-typed-extensions name: Wiki Engine with Typed Extensions summary: A small-core wiki engine realizing a typed-extension framework that addresses @@ -1505,7 +2431,7 @@ capabilities: - informational source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.federation-models name: Selectable Federation-Model Taxonomy summary: Federation as a plural, composable coordination axis (fork+journal, VCS-replication, @@ -1525,7 +2451,7 @@ capabilities: - informational source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.overlay name: Overlay-Before-Mutation Write Path summary: Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only @@ -1546,7 +2472,7 @@ capabilities: - source module source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.page-model name: Backend-Neutral Wiki Page Model summary: A Markdown-first but stretchable page model with stable identity separate @@ -1567,7 +2493,7 @@ capabilities: - source module source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml - id: capability.wiki.shard-orchestration name: Wiki Shard Orchestration summary: Present a union of pages across heterogeneous wiki-shaped shards while @@ -1587,4 +2513,4 @@ capabilities: - source module source_repo: shard-wiki source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml - source_index: registry/federation/cache/shard-wiki.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml