tegwick
551dd76dc3
Capability summary/artifacts now cover exec-file, wrap, rotate, lifecycle, founder-signed trust admission and the service-JWT boundary verifier (maturity unchanged). SCOPE exec block corrected. WP14/WP15 T04 notes name the upstream decisions and owner tasks; NK49 pins confirmed unchanged at HEAD. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 17890@bnt-lap001 Assistant-Session: 7d96d43c-0154-4a22-af71-71c349ac6dc3
22 lines
710 B
YAML
22 lines
710 B
YAML
version: 1
|
|
updated: '2026-10-21'
|
|
domain: infotech
|
|
capabilities:
|
|
- id: capability.security.credential-lifecycle
|
|
name: Cataloged credential lifecycle
|
|
summary: Decision-gated CLI for cataloged OpenBao lanes covering catalog, plan, exact metadata
|
|
apply, provisioning, verification, exec delivery (exec-env/npm-config/exec-file), wrapped
|
|
handoff, rotate, revoke and lifecycle, with founder-signed trust admission and a local
|
|
evidence outbox.
|
|
domain: infotech
|
|
status: draft
|
|
owner: secrets-engine
|
|
tags:
|
|
- security
|
|
- netkingdom
|
|
- framework-reuse
|
|
vector: D3 / A2 / C1 / R0
|
|
path: registry/capabilities/capability.security.credential-lifecycle.md
|
|
consumption_modes:
|
|
- CLI
|
|
- source
|