diff --git a/registry/federation/sources.yaml b/registry/federation/sources.yaml
index 02a3e22..4a8cd06 100644
--- a/registry/federation/sources.yaml
+++ b/registry/federation/sources.yaml
@@ -551,6 +551,11 @@ sources:
   domain: helix_forge
   cache_ttl_seconds: 86400
   auth_header: Authorization
+- repo: web-fetcher
+  index: ../web-fetcher/registry/indexes/capabilities.yaml
+  enabled: true
+  required: true
+  domain: infotech
 - repo: whitehat-security
   index: ../whitehat-security/registry/indexes/capabilities.yaml
   enabled: true
diff --git a/registry/indexes/federated.yaml b/registry/indexes/federated.yaml
index ba83e2f..020ad40 100644
--- a/registry/indexes/federated.yaml
+++ b/registry/indexes/federated.yaml
@@ -1,7 +1,7 @@
 # Composed federated capability index. Regenerate with:
 # reuse-surface federation compose
 version: 1
-updated: '2026-10-16'
+updated: '2026-10-19'
 domain: helix_forge
 collision_policy: warn
 sources:
@@ -327,6 +327,9 @@ sources:
   count: 1
   url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/vergabe-teilnahme.yaml
+- repo: web-fetcher
+  count: 1
+  index: ../web-fetcher/registry/indexes/capabilities.yaml
 - repo: whitehat-security
   count: 1
   index: ../whitehat-security/registry/indexes/capabilities.yaml
@@ -1183,15 +1186,12 @@ capabilities:
 - id: capability.infotech.headless-browser
   name: Headless Browser Automation
   summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright
-    0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container;
-    managed Railiance admission is pending. Download the Python 3.10+ standalone client
-    from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py
-    and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then
-    `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01`
-    with a fresh output directory. This endpoint was verified locally on 2026-10-13
-    and is ephemeral; it installs no browser for the caller. If unreachable, follow
-    the local container setup in the capability card or adapt its A2 source examples;
-    this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.'
+    0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Human and coding-agent managed
+    trials passed on 2026-10-18 through the existing supervised workstation connection.
+    Use the documented kubectl port-forward to 127.0.0.1:18081, then the pinned standalone
+    Python client preflight/trial commands. No local browser installation. Independent
+    per-caller managed admission remains pending; availability stays A5. Contract:
+    https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.'
   vector: D3 / A5 / C2 / R2
   domain: infotech
   status: reviewed
@@ -1299,6 +1299,39 @@ capabilities:
   source_repo: evidence-source
   source_url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml
   source_index: registry/federation/cache/evidence-source.yaml
+- id: capability.infotech.provenance-fetch
+  name: Provenance-first Web and API Data Fetching
+  summary: Standard-library Python fetcher that turns declarative JSON specs into
+    Observation records carrying value, source, URL, source publication time, retrieval
+    time and payload SHA-256. Adapters for Eurostat JSON-stat, generic JSON, CSV and
+    wide XLSX endpoints; missing data is an explicit not_found, never estimated. Optional
+    content-addressed cache replays a run from the exact bytes it used.
+  domain: infotech
+  status: draft
+  owner: web-fetcher
+  tags:
+  - fetch
+  - http
+  - api
+  - provenance
+  - research
+  - statistics
+  - eurostat
+  - csv
+  - json
+  - xlsx
+  - cache
+  - replay
+  - data-ingestion
+  - stdlib
+  vector: D2 / A2 / C1 / R1
+  path: registry/capabilities/capability.infotech.provenance-fetch.md
+  consumption_modes:
+  - Python library
+  - cli
+  - source
+  source_repo: web-fetcher
+  source_index: ../web-fetcher/registry/indexes/capabilities.yaml
 - id: capability.infotech.repo-template
   name: Coulomb Repository Template
   summary: Bootstrap new git repositories with agent instructions, registry scaffold,
@@ -1467,7 +1500,7 @@ capabilities:
   source_index: registry/federation/cache/vergabe-teilnahme.yaml
 - id: capability.railiance.bootstrap-sequencing
   name: Bootstrap sequencing contracts
-  summary: Bare-VM sequencing with NetKingdom identity backup recovery handoff.
+  summary: Bare-VM to estate sequence and handoff contract.
   domain: infotech
   status: draft
   owner: railiance-bootstrap
@@ -1475,9 +1508,6 @@ capabilities:
   - security
   - netkingdom
   - framework-reuse
-  - backup
-  - restore
-  - disaster-recovery
   vector: D3 / A0 / C1 / R0
   path: registry/capabilities/capability.railiance.bootstrap-sequencing.md
   consumption_modes:
@@ -1965,8 +1995,8 @@ capabilities:
   source_index: ../approval-engine/registry/indexes/capabilities.yaml
 - id: capability.security.bootstrap-recovery
   name: Guarded bootstrap and recovery preparation
-  summary: Encrypted identity backup, independent retrieval and isolated recovery
-    verification with bootstrap handoff.
+  summary: Guarded bootstrap custody, encrypted identity backup capture, independent
+    retrieval and isolated recovery verification.
   domain: infotech
   status: draft
   owner: net-kingdom