docs(reuse): establish reviewed NetKingdom security capabilities

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684

registry/capabilities/capability.statehub.workstream-coordinate.md

@@ -1,31 +1,34 @@
 ---
 id: capability.statehub.workstream-coordinate
-name: Workstream And Task Coordination
-summary: Track active workstreams, tasks, progress, and consistency across domain repositories through a local-first coordination service.
+name: Cross-repository work tracking
+summary: File-derived workplans, tasks, dependencies, decisions and coordination views.
 owner: state-hub
 status: draft
 domain: helix_forge
 tags:
-  - state-hub
-  - coordination
-  - workplans
-
+- state-hub
+- coordination
+- workplans
+- security
+- netkingdom
+- framework-reuse
 maturity:
   discovery:
     current: D4
     target: D5
     confidence: medium
-    rationale: >
-      State Hub intent, scope, and ADR-001 workplan conventions are documented;
+    rationale: 'State Hub intent, scope, and ADR-001 workplan conventions are documented;
       concrete agent workflows are still being standardized across repos.
+
+      '
   availability:
     current: A4
     target: A6
     confidence: medium
-    rationale: >
-      Consumers integrate through the State Hub HTTP API and custodian scripts.
-      Managed platform operation is the natural target for multi-repo agents.
-
+    rationale: 'Source interface assessed 2026-10-14: File-derived workplans, tasks,
+      dependencies, decisions and coordination views. Availability describes the delivery
+      form, not production acceptance. Read/cache/index of owner work; not runtime
+      approval authority.'
 external_evidence:
   completeness:
     level: C3
@@ -33,89 +36,93 @@ external_evidence:
     confidence: medium
     basis: scope_vs_intent_and_consumer_expectations
     satisfied_expectations:
-      - workstream and task tracking via HTTP API
-      - workplan file to database consistency sync
-      - progress event logging
+    - workstream and task tracking via HTTP API
+    - workplan file to database consistency sync
+    - progress event logging
     broken_expectations:
-      - no native MCP server for all agent environments
+    - no native MCP server for all agent environments
     out_of_scope_expectations:
-      - replacing git-backed workplan canon
-      - identity authority
+    - replacing git-backed workplan canon
+    - identity authority
   reliability:
     level: R2
     name: Tolerable
     confidence: low
     basis: consumer_quality_signals
     known_reliability_risks:
-      - depends on local hub availability and operator maintenance
-
+    - depends on local hub availability and operator maintenance
 discovery:
-  intent: >
-    Give agents and operators a live, queryable memory of work across domains
-    without replacing file-backed workplans and governance canon.
+  intent: File-derived workplans, tasks, dependencies, decisions and coordination
+    views
   includes:
-    - workstream and task indexing
-    - progress and decision events
-    - repo consistency synchronization
-    - inbox and human-review flags
+  - File-derived workplans, tasks, dependencies, decisions and coordination views
   excludes:
-    - canon ownership
-    - task factory for all work origins
-    - identity authority
+  - Read/cache/index of owner work; not runtime approval authority
   assumptions:
-    - workplans remain authoritative in git for ADR-001 repos
+  - workplans remain authoritative in git for ADR-001 repos
   use_cases:
-    - UC-RS-013
+  - UC-RS-013
+  - 'U09: Maintainer observes posture, prioritizes findings, coordinates work and
+    verifies outcomes'
   research_memos:
-    - state-hub/INTENT.md
-
+  - state-hub/INTENT.md
 availability:
   current_level: A4
   target_level: A6
   current_artifacts:
-    - state-hub/api/
-    - state-hub/scripts/consistency_check.py
+  - README.md
+  - SCOPE.md
   target_artifacts:
-    - state-hub/platform/state-hub-service
+  - state-hub/platform/state-hub-service
   consumption_modes:
-    - service API
-    - HTTP REST
-
+  - HTTP API
+  - source
 relations:
   depends_on:
-    - capability.infotech.hub-core-library
+  - capability.infotech.hub-core-library
   supports:
-    - capability.registry.register
-    - capability.infotech.core-hub
+  - capability.registry.register
+  - capability.infotech.core-hub
   related_to:
-    - capability.statehub.progress-log
-    - capability.infotech.hub-core-library
-    - capability.infotech.core-hub
-
+  - capability.statehub.progress-log
+  - capability.infotech.hub-core-library
+  - capability.infotech.core-hub
+  - capability.security.iam-tooling-suite
 evidence:
   documentation:
-    - state-hub/INTENT.md
-    - state-hub/AGENTS.md
+  - README.md
+  - SCOPE.md
   tests: []
   consumer_feedback: []
   bug_reports: []
   incidents: []
-
 consumer_guidance:
   recommended_for:
-    - cross-repo agent orientation and task status sync
-    - logging progress after workplan changes
+  - Maintainer observes posture, prioritizes findings, coordinates work and verifies
+    outcomes
   not_recommended_for:
-    - storing canonical requirements or architecture canon
-    - assuming hub state overrides git workplan files
+  - Read/cache/index of owner work; not runtime approval authority
   known_limitations:
-    - requires running State Hub locally or via tunnel
+  - Read/cache/index of owner work; not runtime approval authority
+  - 2026-10-14 architecture review estimates operational maturity separately; a registry
+    entry does not authorize execution or establish deployment.
 ---
 
-# Workstream And Task Coordination
+# Cross-repository work tracking
 
-## Overview
+File-derived workplans, tasks, dependencies, decisions and coordination views.
 
-State Hub provides live coordination for helix_forge repositories while
-workplans remain file-backed. This entry represents the service/API consumption
-mode for cross-repo agent work.
+## Reuse boundary
+
+Read/cache/index of owner work; not runtime approval authority.
+
+## Supported use cases
+
+- U09: Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes
+
+## Evidence and integration
+
+- [README.md](../../README.md)
+- [SCOPE.md](../../SCOPE.md)
+
+Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.