version: 1
updated: '2026-10-21'
domain: infotech
capabilities:
- id: capability.security.credential-lifecycle
  name: Cataloged credential lifecycle
  summary: Decision-gated CLI for cataloged OpenBao lanes covering catalog, plan, exact metadata
    apply, provisioning, verification, exec delivery (exec-env/npm-config/exec-file), wrapped
    handoff, rotate, revoke and lifecycle, with founder-signed trust admission and a local
    evidence outbox.
  domain: infotech
  status: draft
  owner: secrets-engine
  tags:
  - security
  - netkingdom
  - framework-reuse
  vector: D3 / A2 / C1 / R0
  path: registry/capabilities/capability.security.credential-lifecycle.md
  consumption_modes:
  - CLI
  - source