diff --git a/docs/assessments/netkingdom-2026-10-14/completion-audit.json b/docs/assessments/netkingdom-2026-10-14/completion-audit.json index aa029d0f..38f3a7cd 100644 --- a/docs/assessments/netkingdom-2026-10-14/completion-audit.json +++ b/docs/assessments/netkingdom-2026-10-14/completion-audit.json @@ -37,6 +37,24 @@ "evidence": "32/70 hosted; 38 registrations pending caller access; seven also require private-source admission" } ], - "goal_status": "active", - "remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity." + "remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity.", + "checked_at": "2026-10-14T09:04:58.199989+00:00", + "owner_gate": "5cd22087-e5d8-5d5e-a252-610a6ac13653", + "fresh_hosted_evidence": "hosted-current-verification.json", + "blocked_turn_audit": { + "same_blocker": "Owner-provisioned hub write access and seven private-source admissions remain unavailable/unverified", + "consecutive_goal_turns": 3, + "turns": [ + "Original review turn: Warden/OpenBao 403; no helper execution", + "User choice turn: Arrange scoped owner access recorded; no provisioning evidence", + "Continuation: inbox empty; fresh hosted32/70; owner setup confirmation still pending" + ], + "other_work": "Report publication recovered and verified with exact tree parity; final receipt/workplan publication and sync follow before goal status update." + }, + "publication": { + "complete": true, + "commit": "a3b894eb42c177e97fd8885afce07b21ca36d416", + "receipt": "publication-batches-receipt.json", + "original_backup": "cust-wp-0081-original-unpublished" + } } diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-current-verification.json b/docs/assessments/netkingdom-2026-10-14/hosted-current-verification.json new file mode 100644 index 00000000..bfe5d0e1 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-current-verification.json @@ -0,0 +1,48 @@ +{ + "checked_at": "2026-10-14T07:46:03.943569+00:00", + "matched": 32, + "expected": 70, + "missing": [ + "capability.execution.openweight-rein", + "capability.execution.profile-harness", + "capability.execution.sandbox-provision", + "capability.execution.scheduled-agent-rein", + "capability.finance.security-budget-evidence", + "capability.identity.tenant-facts", + "capability.infotech.runbook-tutorials", + "capability.infotech.sbom-management", + "capability.observability.security-signals", + "capability.organization.role-catalog", + "capability.railiance.bootstrap-sequencing", + "capability.railiance.browser-verification", + "capability.railiance.knative-rail", + "capability.railiance.kubernetes-rail", + "capability.railiance.openbao-package", + "capability.railiance.policy-publication-package", + "capability.railiance.postgres-isolation-recovery", + "capability.railiance.sbom-runtime-package", + "capability.railiance.security-consumption-contracts", + "capability.railiance.substrate-bindings", + "capability.railiance.telemetry-package", + "capability.railiance.tenant-engine-package", + "capability.railiance.user-engine-package", + "capability.resources.security-capacity", + "capability.security.adversarial-evidence", + "capability.security.agent-knowledge", + "capability.security.approval-lifecycle", + "capability.security.credential-lifecycle", + "capability.security.doctrine-review", + "capability.security.human-decision-workspace", + "capability.security.maturity-claims", + "capability.security.policy-publication", + "capability.security.posture-assessment", + "capability.security.practice-canon", + "capability.security.repository-secret-prevention", + "capability.security.risk-register", + "capability.security.structure-construction", + "capability.security.zone-reference" + ], + "duplicate_reviewed_ids": [], + "stale": false, + "composed_at": "2026-10-14T06:17:44+00:00" +} diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-current.json b/docs/assessments/netkingdom-2026-10-14/hosted-current.json new file mode 100644 index 00000000..51ceb37d --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-current.json @@ -0,0 +1,2154 @@ +{ + "version": 1, + "updated": "2026-10-14", + "domain": "helix_forge", + "collision_policy": "warn", + "sources": [ + { + "repo": "access-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/access-engine.yaml" + }, + { + "repo": "activity-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/activity-core.yaml" + }, + { + "repo": "agentic-resources", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/agentic-resources.yaml" + }, + { + "repo": "artifact-store", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/artifact-store.yaml" + }, + { + "repo": "audit-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/audit-core.yaml" + }, + { + "repo": "can-you-assist", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/can-you-assist.yaml" + }, + { + "repo": "citation-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-engine.yaml" + }, + { + "repo": "citation-evidence", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-evidence.yaml" + }, + { + "repo": "citation-work", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-work.yaml" + }, + { + "repo": "commerce-canon", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/commerce-canon.yaml" + }, + { + "repo": "config-atlas", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/config-atlas.yaml" + }, + { + "repo": "coordination-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/coordination-engine.yaml" + }, + { + "repo": "core-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/core-hub.yaml" + }, + { + "repo": "domain-tree", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/domain-tree.yaml" + }, + { + "repo": "email-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/email-connect.yaml" + }, + { + "repo": "evidence-anchor", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-anchor.yaml" + }, + { + "repo": "evidence-binder", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-binder.yaml" + }, + { + "repo": "evidence-source", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-source.yaml" + }, + { + "repo": "feature-control", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/feature-control.yaml" + }, + { + "repo": "guide-board", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/guide-board.yaml" + }, + { + "repo": "helix-forge", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/helix-forge.yaml" + }, + { + "repo": "hub-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/hub-core.yaml" + }, + { + "repo": "human-resources", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/human-resources.yaml" + }, + { + "repo": "ihp-railiance-probe", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ihp-railiance-probe.yaml" + }, + { + "repo": "info-tech-canon", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/info-tech-canon.yaml" + }, + { + "repo": "infospace-bench", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/infospace-bench.yaml" + }, + { + "repo": "issue-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/issue-core.yaml" + }, + { + "repo": "kaizen-agentic", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kaizen-agentic.yaml" + }, + { + "repo": "key-cape", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/key-cape.yaml" + }, + { + "repo": "kontextual-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kontextual-engine.yaml" + }, + { + "repo": "llm-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/llm-connect.yaml" + }, + { + "repo": "markitect-filter", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-filter.yaml" + }, + { + "repo": "markitect-main", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-main.yaml" + }, + { + "repo": "markitect-quarkdown", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-quarkdown.yaml" + }, + { + "repo": "markitect-tool", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-tool.yaml" + }, + { + "repo": "net-kingdom", + "count": 6, + "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/net-kingdom.yaml" + }, + { + "repo": "open-cmis-tck", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-cmis-tck.yaml" + }, + { + "repo": "open-reuse", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-reuse.yaml" + }, + { + "repo": "ops-bridge", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-bridge.yaml" + }, + { + "repo": "ops-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-hub.yaml" + }, + { + "repo": "ops-warden", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-warden.yaml" + }, + { + "repo": "phase-memory", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/phase-memory.yaml" + }, + { + "repo": "railiance-apps", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-apps.yaml" + }, + { + "repo": "railiance-cluster", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-cluster.yaml" + }, + { + "repo": "railiance-enablement", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-enablement.yaml" + }, + { + "repo": "railiance-fabric", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-fabric.yaml" + }, + { + "repo": "railiance-forge", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-forge.yaml" + }, + { + "repo": "railiance-infra", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-infra.yaml" + }, + { + "repo": "railiance-platform", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-platform.yaml" + }, + { + "repo": "repo-scoping", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-scoping.yaml" + }, + { + "repo": "repo-seed", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-seed.yaml" + }, + { + "repo": "reuse-surface", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/reuse-surface.yaml" + }, + { + "repo": "shard-wiki", + "count": 8, + "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/shard-wiki.yaml" + }, + { + "repo": "state-hub", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/state-hub.yaml" + }, + { + "repo": "tegwick-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/tegwick-control.yaml" + }, + { + "repo": "the-custodian", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/the-custodian.yaml" + }, + { + "repo": "user-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/user-engine.yaml" + }, + { + "repo": "vantage-point", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vantage-point.yaml" + }, + { + "repo": "vergabe-teilnahme", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "repo": "whynot-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-control.yaml" + }, + { + "repo": "whynot-design", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-design.yaml" + } + ], + "capabilities": [ + { + "id": "capability.activity.event-coordinate", + "name": "Durable automation and bounded operations", + "summary": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks.", + "domain": "helix_forge", + "status": "draft", + "owner": "activity-core", + "tags": [ + "activity", + "coordination", + "automation", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A4 / C1 / R0", + "path": "registry/capabilities/capability.activity.event-coordinate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "activity-core", + "source_url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/activity-core.yaml" + }, + { + "id": "capability.agents.cli-assistant", + "name": "Console-Native LLM Assistant (cya)", + "summary": "Console-native, backend-agnostic assistant CLI that expresses user intent in natural language and returns safe, explainable, context-aware help.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "can-you-assist", + "path": "registry/capabilities/capability.agents.cli-assistant.md", + "tags": [ + "cli", + "assistant", + "llm", + "safety" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "can-you-assist", + "source_url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/can-you-assist.yaml" + }, + { + "id": "capability.agents.custodian-runtime-tooling", + "name": "Generic agent runtime and repository tooling", + "summary": "Agent runtime modules and repository classification tooling.", + "domain": "custodian", + "status": "draft", + "owner": "the-custodian", + "tags": [ + "agents", + "runtime", + "classification", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D2 / A2 / C1 / R0", + "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "the-custodian", + "source_url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/the-custodian.yaml" + }, + { + "id": "capability.agents.kaizen-framework", + "name": "Kaizen Agentic Framework", + "summary": "AI agency framework providing 20 deployable agent instruction sets, project memory, metrics, role and engagement contracts, and scheduled preparation for governed execution.", + "vector": "D3 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "kaizen-agentic", + "path": "registry/capabilities/capability.agents.kaizen-framework.md", + "tags": [ + "agents", + "memory", + "coordination", + "metrics", + "scheduling", + "engagements" + ], + "consumption_modes": [ + "cli", + "library import", + "file contracts" + ], + "source_repo": "kaizen-agentic", + "source_url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kaizen-agentic.yaml" + }, + { + "id": "capability.agents.llm-connector", + "name": "Pluggable LLM Adapter Library (llm-connect)", + "summary": "Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract interface for adding new providers.", + "vector": "D3 / A2 / C2 / R1", + "domain": "agents", + "status": "draft", + "owner": "llm-connect", + "path": "registry/capabilities/capability.agents.llm-connector.md", + "tags": [ + "llm", + "adapter", + "provider-neutral" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "llm-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/llm-connect.yaml" + }, + { + "id": "capability.agents.performance-learning", + "name": "Agent performance learning", + "summary": "Capture sessions, curate patterns, distribute lessons and measure outcomes.", + "domain": "infotech", + "status": "draft", + "owner": "agentic-resources", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.agents.performance-learning.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "agentic-resources", + "source_url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/agentic-resources.yaml" + }, + { + "id": "capability.agents.repo-scoping-service", + "name": "Repository Scoping Service", + "summary": "Maps repositories from usefulness to implementation (Ability -> Capability -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP API, and curator UI.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "repo-scoping", + "path": "registry/capabilities/capability.agents.repo-scoping-service.md", + "tags": [ + "classification", + "scoping", + "registry" + ], + "consumption_modes": [ + "http api", + "library import", + "ui" + ], + "source_repo": "repo-scoping", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-scoping.yaml" + }, + { + "id": "capability.audit.event-retain", + "name": "Independent audit custody", + "summary": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.", + "domain": "infotech", + "status": "draft", + "owner": "audit-core", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A4 / C3 / R2", + "path": "registry/capabilities/capability.audit.event-retain.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "audit-core", + "source_url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/audit-core.yaml" + }, + { + "id": "capability.authorization.policy-evaluate", + "name": "Policy evaluation and decision evidence", + "summary": "Check, batch, list-allowed, explain, binding, lifetime and decision records.", + "domain": "helix_forge", + "status": "draft", + "owner": "access-engine", + "tags": [ + "authorization", + "policy", + "flex-auth", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R1", + "path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "access-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/access-engine.yaml" + }, + { + "id": "capability.cmis.tck", + "name": "OpenCMIS Conformance-Preparation Extension", + "summary": "CMIS conformance-preparation extension for guide-board, keeping CMIS-specific runner code, profiles, capability mappings, and workplans outside the generic compliance framework.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "open-cmis-tck", + "path": "registry/capabilities/capability.cmis.tck.md", + "tags": [ + "cmis", + "compliance", + "guide-board-extension" + ], + "consumption_modes": [ + "library import (guide-board extension)" + ], + "source_repo": "open-cmis-tck", + "source_url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-cmis-tck.yaml" + }, + { + "id": "capability.communication.compliance-evidence-framework", + "name": "Certification And Compliance Evidence Framework", + "summary": "Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture.", + "vector": "D2 / A2 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "guide-board", + "path": "registry/capabilities/capability.communication.compliance-evidence-framework.md", + "tags": [ + "compliance", + "certification", + "evidence", + "extensions" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "guide-board", + "source_url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/guide-board.yaml" + }, + { + "id": "capability.communication.context-engine", + "name": "Kontextual Engine (Knowledge Operations Runtime)", + "summary": "Headless knowledge-operations engine turning heterogeneous information assets into persistent, contextual, governed, retrievable, transformable, and agent-operable knowledge.", + "vector": "D4 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "kontextual-engine", + "path": "registry/capabilities/capability.communication.context-engine.md", + "tags": [ + "knowledge", + "context", + "runtime" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "kontextual-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kontextual-engine.yaml" + }, + { + "id": "capability.communication.infospace-workspace", + "name": "Infospace Workspace And Evaluation Bench", + "summary": "Workspace and service for creating, developing, evaluating, and inspecting structured knowledge spaces (infospaces); application-layer successor to the infospace work begun in markitect-main.", + "vector": "D3 / A1 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "infospace-bench", + "path": "registry/capabilities/capability.communication.infospace-workspace.md", + "tags": [ + "infospace", + "knowledge", + "evaluation" + ], + "consumption_modes": [ + "cli", + "library import (consumed by info-tech-canon)" + ], + "source_repo": "infospace-bench", + "source_url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/infospace-bench.yaml" + }, + { + "id": "capability.communication.markitect-legacy-platform", + "name": "MarkiTect Legacy Platform", + "summary": "Intelligent markdown engine and information-management platform treating documents as structured, queryable information spaces with schema validation, transclusion, and LLM-driven evaluation; the legacy umbrella now being split into markitect-tool, infospace-bench, and kontextual-engine.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-main", + "path": "registry/capabilities/capability.communication.markitect-legacy-platform.md", + "tags": [ + "markitect", + "markdown", + "legacy" + ], + "consumption_modes": [ + "application (legacy, not recommended for new integration)" + ], + "source_repo": "markitect-main", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-main.yaml" + }, + { + "id": "capability.communication.markitect-quarkdown-adapter", + "name": "Markitect Quarkdown Render Adapter", + "summary": "Concrete Quarkdown render/export adapter for Markitect, mapping Markitect profiles to Quarkdown profiles and running controlled Quarkdown CLI execution plans without forking or reimplementing Quarkdown.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-quarkdown", + "path": "registry/capabilities/capability.communication.markitect-quarkdown-adapter.md", + "tags": [ + "markitect", + "quarkdown", + "adapter" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-quarkdown", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-quarkdown.yaml" + }, + { + "id": "capability.communication.markitect-source-adapters", + "name": "Markitect Source-Format Adapters", + "summary": "Concrete source-format adapters (EPUB3, PDF) converting external document formats into canonical Markitect Markdown, implementing the markitect-tool source adapter contract.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-filter", + "path": "registry/capabilities/capability.communication.markitect-source-adapters.md", + "tags": [ + "markitect", + "adapter", + "document-conversion" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-filter", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-filter.yaml" + }, + { + "id": "capability.communication.markitect-toolkit", + "name": "Markitect Markdown Toolkit And CLI", + "summary": "Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown into structured, queryable, reusable knowledge artifacts; syntax-layer successor to markitect-main.", + "vector": "D4 / A2 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "markitect-tool", + "path": "registry/capabilities/capability.communication.markitect-toolkit.md", + "tags": [ + "markitect", + "markdown", + "cli", + "toolkit" + ], + "consumption_modes": [ + "cli", + "library import" + ], + "source_repo": "markitect-tool", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-tool.yaml" + }, + { + "id": "capability.coordination.cross-owner-work", + "name": "Cross-owner coordination lifecycle", + "summary": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime.", + "domain": "infotech", + "status": "draft", + "owner": "coordination-engine", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.coordination.cross-owner-work.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "coordination-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/coordination-engine.yaml" + }, + { + "id": "capability.design.whynot-system", + "name": "Whynot Design System", + "summary": "Framework-agnostic visual language for whynot prototype/market-signal artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain HTML, and Django template adapters.", + "vector": "D3 / A2 / C2 / R1", + "domain": "consumer", + "status": "draft", + "owner": "whynot-design", + "path": "registry/capabilities/capability.design.whynot-system.md", + "tags": [ + "design-system", + "web-components", + "frontend" + ], + "consumption_modes": [ + "library import (npm)", + "cli", + "django template adapter" + ], + "source_repo": "whynot-design", + "source_url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/whynot-design.yaml" + }, + { + "id": "capability.evidence.binding", + "name": "Evidence-to-Target Binding", + "summary": "Links evidence items to structured targets with relation, status, and confidence metadata, bidirectional queries, active-state coordination, and canonical engine events.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.binding.md", + "tags": [ + "evidence", + "binding", + "evidence-link", + "form-field", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React provider" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.evidence.rect-registry", + "name": "Visual-Guide Rect Registry", + "summary": "Coordinates field, evidence-card, and highlight rectangles from independent renderers so an SVG overlay can draw the active visual guide without polling.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.rect-registry.md", + "tags": [ + "rect-registry", + "visual-guide", + "overlay", + "active-state", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React component" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.feature-control.evaluate", + "name": "Feature Availability Evaluation", + "summary": "Evaluate whether a feature is active, hidden, disabled, or unavailable for a subject in context.", + "vector": "D5 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.evaluate.md", + "tags": [ + "feature-control", + "evaluation", + "sdk" + ], + "consumption_modes": [ + "SDK", + "service API" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.rollout", + "name": "Feature Rollout Control", + "summary": "Gradually expose features to subjects across tenants, domains, groups, or cohorts using rollout rules.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.rollout.md", + "tags": [ + "feature-control", + "rollout", + "planning" + ], + "consumption_modes": [ + "source module", + "SDK" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.visibility", + "name": "Feature Visibility Control", + "summary": "Control whether features are visible or hidden for subjects without changing entitlement or authorization.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.visibility.md", + "tags": [ + "feature-control", + "visibility" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.graph.nbgm-spec", + "name": "Network-Based Graph Model (NBGM) Specification", + "summary": "Generic system and versioned protocol specification for exploring dependency structures as network-based graph models (NBGM), unifying entity/relationship inspection and reasoning across arbitrary domains.", + "vector": "D2 / A0 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "vantage-point", + "path": "registry/capabilities/capability.graph.nbgm-spec.md", + "tags": [ + "graph", + "nbgm", + "specification" + ], + "consumption_modes": [ + "informational (specification only)" + ], + "source_repo": "vantage-point", + "source_url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vantage-point.yaml" + }, + { + "id": "capability.hr.workflow-catalog", + "name": "HR Workflow Catalog", + "summary": "Markdown-first registry of HR planning workflows with an iterative assessment loop tied to INTENT phases.", + "vector": "D3 / A1 / C1 / R0", + "domain": "consumer", + "status": "draft", + "owner": "human-resources", + "path": "registry/capabilities/capability.hr.workflow-catalog.md", + "tags": [ + "hr", + "workflows", + "assessment", + "planning" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "human-resources", + "source_url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/human-resources.yaml" + }, + { + "id": "capability.iam.key-cape", + "name": "OIDC identity and assurance", + "summary": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.", + "domain": "infotech", + "status": "draft", + "owner": "key-cape", + "tags": [ + "iam", + "oidc", + "netkingdom", + "security", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R1", + "path": "registry/capabilities/capability.iam.key-cape.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "key-cape", + "source_url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/key-cape.yaml" + }, + { + "id": "capability.identity.subject-resolution", + "name": "Identity Subject Resolution", + "summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.", + "vector": "D3 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.subject-resolution.md", + "tags": [ + "identity", + "subject", + "architecture" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.identity.user-engine", + "name": "User lifecycle and account journeys", + "summary": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog.", + "domain": "communication", + "status": "draft", + "owner": "user-engine", + "tags": [ + "identity", + "user-management", + "multi-tenant", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R0", + "path": "registry/capabilities/capability.identity.user-engine.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "user-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/user-engine.yaml" + }, + { + "id": "capability.identity.vocabulary-canonicalize", + "name": "Identity Vocabulary Canonicalization", + "summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.", + "vector": "D4 / A0 / C2 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md", + "tags": [ + "identity", + "terminology", + "research" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.infotech.artifact-store", + "name": "Artifact Registry And Storage Gateway", + "summary": "Generic artifact registry and storage gateway for generated outputs, evidence packages, reports, logs, snapshots, exports, and release artifacts.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "artifact-store", + "path": "registry/capabilities/capability.infotech.artifact-store.md", + "tags": [ + "artifact", + "storage", + "provenance", + "registry" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "artifact-store", + "source_url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/artifact-store.yaml" + }, + { + "id": "capability.infotech.canon-service", + "name": "Shared semantic contracts and validation", + "summary": "Markdown canon with library, CLI and read-only API.", + "domain": "infotech", + "status": "draft", + "owner": "info-tech-canon", + "tags": [ + "canon", + "infospace", + "service", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D2 / A4 / C1 / R0", + "path": "registry/capabilities/capability.infotech.canon-service.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "info-tech-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/info-tech-canon.yaml" + }, + { + "id": "capability.infotech.citation-engine", + "name": "Citation Evidence Domain Engine", + "summary": "Core domain model and engine services for the citation-evidence ecosystem \u2014 shared vocabulary, in-memory repositories, orchestration services, event bus, and citation card renderers.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-engine", + "path": "registry/capabilities/capability.infotech.citation-engine.md", + "tags": [ + "citation", + "evidence", + "domain-model" + ], + "consumption_modes": [ + "library import (workspace link)" + ], + "source_repo": "citation-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-engine.yaml" + }, + { + "id": "capability.infotech.citation-evidence-workspace", + "name": "Citation Evidence Workspace", + "summary": "Document-centered evidence workspace for capturing, managing, presenting, and re-opening citations \u2014 the umbrella application over the citation-evidence six-package design.", + "vector": "D4 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-evidence", + "path": "registry/capabilities/capability.infotech.citation-evidence-workspace.md", + "tags": [ + "citation", + "evidence", + "workspace" + ], + "consumption_modes": [ + "application (local dev server)" + ], + "source_repo": "citation-evidence", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-evidence.yaml" + }, + { + "id": "capability.infotech.config-surface-atlas", + "name": "Configuration Surface Atlas", + "summary": "Read-first, cross-kind map and evidence layer for configuration surfaces \u2014 what configures a system, who owns it, its scope, and where the source of truth lives.", + "vector": "D5 / A0 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "config-atlas", + "path": "registry/capabilities/capability.infotech.config-surface-atlas.md", + "tags": [ + "configuration", + "registry", + "control-plane", + "effective-config", + "evidence" + ], + "consumption_modes": [ + "informational", + "source module" + ], + "source_repo": "config-atlas", + "source_url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/config-atlas.yaml" + }, + { + "id": "capability.infotech.core-hub", + "name": "Core Hub Production Interaction Framework", + "summary": "Contract-first framework for cross-domain state, agent coordination, evidence, registries, workplans, and operator interaction surfaces.", + "vector": "D3 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "core-hub", + "path": "registry/capabilities/capability.infotech.core-hub.md", + "tags": [ + "interaction-framework", + "state-hub", + "inter-hub-successor", + "agent-coordination", + "registry", + "api" + ], + "consumption_modes": [ + "informational", + "planning", + "cli" + ], + "source_repo": "core-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/core-hub.yaml" + }, + { + "id": "capability.infotech.email-connector", + "name": "Mailbox Evidence Scanner (email-connect)", + "summary": "Headless, provider-neutral email communication and evidence service; first slice scans a mailbox or fixture directory and produces timestamped CSV evidence reports.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "email-connect", + "path": "registry/capabilities/capability.infotech.email-connector.md", + "tags": [ + "email", + "evidence", + "coordination" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "email-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/email-connect.yaml" + }, + { + "id": "capability.infotech.headless-browser", + "name": "Headless Browser Automation", + "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.", + "vector": "D3 / A5 / C2 / R2", + "domain": "infotech", + "status": "reviewed", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.infotech.headless-browser.md", + "tags": [ + "headless", + "browser", + "automation", + "playwright", + "chromium", + "testing", + "screenshots", + "extraction", + "firefox", + "webkit", + "selenium", + "puppeteer" + ], + "consumption_modes": [ + "informational", + "source adaptation", + "JavaScript library", + "Python library", + "cli", + "service API", + "container" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.infotech.hub-core-library", + "name": "Reusable FOS Hub Core Primitives", + "summary": "Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State Hub for use by other FOS (Federation of Services) hubs.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "hub-core", + "path": "registry/capabilities/capability.infotech.hub-core-library.md", + "tags": [ + "hub", + "fastapi", + "sqlalchemy", + "mcp" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "hub-core", + "source_url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/hub-core.yaml" + }, + { + "id": "capability.infotech.issue-tracking", + "name": "External issue tracker connector", + "summary": "CLI and Python adapters for external issue systems.", + "domain": "infotech", + "status": "draft", + "owner": "issue-core", + "tags": [ + "issue-tracking", + "connector", + "work-record", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A2 / C2 / R1", + "path": "registry/capabilities/capability.infotech.issue-tracking.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "issue-core", + "source_url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/issue-core.yaml" + }, + { + "id": "capability.infotech.oss-integration-continuity", + "name": "Managed Continuity For OSS Integrations", + "summary": "Turns proven open-source integrations into structured, maintainable, continuously managed assets with clear boundaries and update loops, so they remain robust and transparent as upstream evolves.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "open-reuse", + "path": "registry/capabilities/capability.infotech.oss-integration-continuity.md", + "tags": [ + "oss", + "integration", + "maintenance" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "open-reuse", + "source_url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-reuse.yaml" + }, + { + "id": "capability.infotech.pdf-evidence-ingest", + "name": "Headless PDF Evidence Ingest", + "summary": "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "evidence-source", + "path": "registry/capabilities/capability.infotech.pdf-evidence-ingest.md", + "tags": [ + "pdf", + "ingest", + "fingerprint", + "canonical-text", + "evidence" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "evidence-source", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-source.yaml" + }, + { + "id": "capability.infotech.repo-template", + "name": "Coulomb Repository Template", + "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.", + "vector": "D3 / A3 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "repo-seed", + "path": "registry/capabilities/capability.infotech.repo-template.md", + "tags": [ + "template", + "bootstrap", + "state-hub", + "onboarding" + ], + "consumption_modes": [ + "git clone", + "informational" + ], + "source_repo": "repo-seed", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-seed.yaml" + }, + { + "id": "capability.memory.phase-planning", + "name": "Profile-Driven Memory Phase Planning (phase-memory)", + "summary": "Interprets Markitect memory profiles as runtime plans, modeling memory phases and producing deterministic dry-run actions for retention, refresh, compaction, stabilization, and activation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "phase-memory", + "path": "registry/capabilities/capability.memory.phase-planning.md", + "tags": [ + "memory", + "agentic", + "planning" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "phase-memory", + "source_url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/phase-memory.yaml" + }, + { + "id": "capability.operations.ops-hub", + "name": "Operations Hub Extension Contract", + "summary": "Versioned hub-extension package and bootstrap client for operational truth, service-catalog records, readiness evidence, and migration gates.", + "vector": "D3 / A1 / C1 / R1", + "domain": "operations", + "status": "reviewed", + "owner": "ops-hub", + "path": "registry/capabilities/capability.operations.ops-hub.md", + "tags": [ + "operations", + "service-catalog", + "readiness", + "hub-extension" + ], + "consumption_modes": [ + "contract package", + "command-line bootstrap" + ], + "source_repo": "ops-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-hub.yaml" + }, + { + "id": "capability.ops.tunnel-bridge", + "name": "SSH tunnel lifecycle", + "summary": "Named tunnels, reconnect, health and TTL-aware cert_command.", + "domain": "infotech", + "status": "draft", + "owner": "ops-bridge", + "tags": [ + "ssh", + "tunnel", + "ops", + "connectivity", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C2 / R1", + "path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "ops-bridge", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-bridge.yaml" + }, + { + "id": "capability.procurement.vergabe-teilnahme", + "name": "Vergabe Teilnahme (Public Procurement Participation) Application", + "summary": "Django application (with a Vite/Tailwind frontend) for managing German public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und Teilnahme-Management-System.", + "vector": "D3 / A1 / C1 / R1", + "domain": "communication", + "status": "draft", + "owner": "vergabe-teilnahme", + "path": "registry/capabilities/capability.procurement.vergabe-teilnahme.md", + "tags": [ + "procurement", + "django", + "vergabe" + ], + "consumption_modes": [ + "application (Django + Vite, local dev via docker-compose)" + ], + "source_repo": "vergabe-teilnahme", + "source_url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "id": "capability.railiance.ci-enablement", + "name": "Developer delivery and CI templates", + "summary": "Reusable CI workflows, build and deployment patterns.", + "domain": "financials", + "status": "draft", + "owner": "railiance-enablement", + "tags": [ + "railiance", + "ci-cd", + "developer-enablement", + "forgejo", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C2 / R1", + "path": "registry/capabilities/capability.railiance.ci-enablement.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-enablement", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-enablement.yaml" + }, + { + "id": "capability.railiance.cluster-bootstrap", + "name": "Kubernetes runtime and cluster controls", + "summary": "k3s, ingress, CNI, operators and kubeconfig/runtime checks.", + "domain": "financials", + "status": "draft", + "owner": "railiance-cluster", + "tags": [ + "railiance", + "kubernetes", + "iac", + "bootstrap", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-cluster", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-cluster.yaml" + }, + { + "id": "capability.railiance.fabric-graph", + "name": "Infrastructure ownership and dependency graph", + "summary": "Schemas, validation, graph queries and State Hub exports.", + "domain": "financials", + "status": "draft", + "owner": "railiance-fabric", + "tags": [ + "railiance", + "graph", + "ownership", + "discovery", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.fabric-graph.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-fabric", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-fabric.yaml" + }, + { + "id": "capability.railiance.forge-infrastructure", + "name": "Source forge, registries and runner substrate", + "summary": "Forgejo operation, package registries and runner lifecycle.", + "domain": "financials", + "status": "draft", + "owner": "railiance-forge", + "tags": [ + "railiance", + "forgejo", + "forge", + "ci-runner", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-forge", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-forge.yaml" + }, + { + "id": "capability.railiance.infra-provisioning", + "name": "Host convergence and security baseline", + "summary": "Ansible inventory, firewall, SSH bootstrap and baseline verification.", + "domain": "financials", + "status": "draft", + "owner": "railiance-infra", + "tags": [ + "railiance", + "terraform", + "ansible", + "infrastructure", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A2 / C2 / R1", + "path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-infra", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-infra.yaml" + }, + { + "id": "capability.railiance.platform-services", + "name": "Secret custody and platform data services", + "summary": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts.", + "domain": "financials", + "status": "draft", + "owner": "railiance-platform", + "tags": [ + "railiance", + "platform", + "secrets", + "postgres", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.platform-services.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-platform", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-platform.yaml" + }, + { + "id": "capability.railiance.workload-deployment-tooling", + "name": "Workload release configuration and guards", + "summary": "Helm/manifests, exact image pins, application runbooks and rollout/rollback.", + "domain": "financials", + "status": "draft", + "owner": "railiance-apps", + "tags": [ + "railiance", + "kubernetes", + "helm", + "deployment", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R1", + "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-apps", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-apps.yaml" + }, + { + "id": "capability.registry.register", + "name": "Capability registry and federation", + "summary": "Owner Markdown entries, indexes, federation hub and planning queries.", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "tags": [ + "registry", + "governance", + "meta", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A3 / C2 / R3", + "path": "registry/capabilities/capability.registry.register.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.registry.validate", + "name": "Capability registry validation", + "summary": "Schema, index consistency and relation checks.", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "tags": [ + "registry", + "validation", + "cli", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A3 / C3 / R3", + "path": "registry/capabilities/capability.registry.validate.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.security.access-routing", + "name": "Credential routing and contained access", + "summary": "warden route and access catalog; exact lane conduit and secret-exec routing.", + "domain": "infotech", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A3 / C1 / R0", + "path": "registry/capabilities/capability.security.access-routing.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.security.bootstrap-recovery", + "name": "Guarded bootstrap and recovery preparation", + "summary": "Local identity, bootstrap console, encrypted custody handoff and caller tools.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.bootstrap-recovery.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.case-contracts", + "name": "Security case types and instance validation", + "summary": "Versioned types, cases and schema validation.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.case-contracts.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.case-follow-through", + "name": "Security case operational follow-through", + "summary": "KnownSecurityCase route, plan and operational receipts.", + "domain": "infotech", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.case-follow-through.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.security.emission-profile", + "name": "Security emission cadence validation", + "summary": "Security profile over generic emission contracts and validator.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.emission-profile.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.forge-secret-prevention", + "name": "Independent introduced-history secret prevention", + "summary": "Pinned receive adapter, lifecycle template and fail-closed scan.", + "domain": "infotech", + "status": "draft", + "owner": "railiance-forge", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.forge-secret-prevention.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-forge", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-forge.yaml" + }, + { + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom security architecture and conformance tooling", + "summary": "Versioned IAM, layer, tenancy and credential contracts plus validators.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "iam", + "kubernetes", + "conformance", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R1", + "path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.posture-feedback", + "name": "Deterministic posture feedback", + "summary": "CLI evaluates evidence age and posture into owner-routed findings.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.posture-feedback.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.scenario-compose", + "name": "Deterministic security scenario composition", + "summary": "CLI selects pinned providers and orders trust transitions.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.scenario-compose.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.ssh-certificate-issuance", + "name": "Decision-bound SSH certificates", + "summary": "warden sign with local and OpenBao backends and adm/agt/atm actors.", + "domain": "helix_forge", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "ssh", + "certificate", + "ca", + "ops-warden", + "openbao", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A3 / C3 / R2", + "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.statehub.progress-log", + "name": "Progress and work evidence indexing", + "summary": "REST progress and task evidence references.", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "tags": [ + "state-hub", + "progress", + "coordination", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C3 / R3", + "path": "registry/capabilities/capability.statehub.progress-log.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.statehub.workstream-coordinate", + "name": "Cross-repository work tracking", + "summary": "File-derived workplans, tasks, dependencies, decisions and coordination views.", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "tags": [ + "state-hub", + "coordination", + "workplans", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C3 / R2", + "path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.wiki.adapter-contract", + "name": "Capability-Aware Shard Adapter Contract", + "summary": "A versioned backend interface where each binding declares a verified capability profile, so federation ops degrade by capability.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.adapter-contract.md", + "tags": [ + "wiki", + "adapter", + "capability", + "contract", + "conformance", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.coordination-journal", + "name": "Event-Sourced Coordination Journal", + "summary": "An append-only, totally-ordered-per-space decision log whose current state is a derived fold; git-addressable history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.coordination-journal.md", + "tags": [ + "wiki", + "event-sourcing", + "coordination", + "git", + "journal", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.derived-views", + "name": "Wiki Derived Views", + "summary": "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges, AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.derived-views.md", + "tags": [ + "wiki", + "derived-views", + "backlinks", + "recentchanges", + "search", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.engine-typed-extensions", + "name": "Wiki Engine with Typed Extensions", + "summary": "A small-core wiki engine realizing a typed-extension framework that addresses all wiki use cases and lets each shard activate only the features it needs.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.engine-typed-extensions.md", + "tags": [ + "wiki", + "engine", + "typed-extensions", + "feature-activation", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.federation-models", + "name": "Selectable Federation-Model Taxonomy", + "summary": "Federation as a plural, composable coordination axis (fork+journal, VCS-replication, query-join, feed, activity-streams, engine-mirror) selected per space.", + "vector": "D4 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.federation-models.md", + "tags": [ + "wiki", + "federation", + "taxonomy", + "composable", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.overlay", + "name": "Overlay-Before-Mutation Write Path", + "summary": "Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only or limited backends be edited safely without silent remote mutation.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.overlay.md", + "tags": [ + "wiki", + "overlay", + "patch", + "write-path", + "conflict", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.page-model", + "name": "Backend-Neutral Wiki Page Model", + "summary": "A Markdown-first but stretchable page model with stable identity separate from placement and layered provenance.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.page-model.md", + "tags": [ + "wiki", + "page-model", + "identity", + "provenance", + "markdown", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.shard-orchestration", + "name": "Wiki Shard Orchestration", + "summary": "Present a union of pages across heterogeneous wiki-shaped shards while preserving each shard's provenance, capabilities, and history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.shard-orchestration.md", + "tags": [ + "wiki", + "federation", + "orchestration", + "union", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + } + ], + "composed_at": "2026-10-14T06:17:44+00:00", + "stale": false +} diff --git a/docs/assessments/netkingdom-2026-10-14/owner-access-gate.json b/docs/assessments/netkingdom-2026-10-14/owner-access-gate.json new file mode 100644 index 00000000..514edc14 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/owner-access-gate.json @@ -0,0 +1,18 @@ +{ + "workplan_id": "e8992815-389a-5c40-8569-a2b0ee3945f0", + "id": "5cd22087-e5d8-5d5e-a252-610a6ac13653", + "topic_id": "cee7bedf-2b48-46ef-8601-006474f2ad7a", + "title": "Complete scoped owner provisioning for reuse-surface discovery", + "description": "Execution/evidence gate for CUST-WP-0081-T02. The user selected Arrange scoped owner access; that direction is already recorded and is not being requested again. railiance-platform must confirm caller admission through reuse-surface-hub-write-token (the actual attempt was denied by OpenBao 403), and provide the non-secret hub auth_env reference plus scoped-read and metadata-publication admission evidence for rapp-openbao, rapp-policy-nexus, rapp-postgres, rapp-sbom-nexus, rapp-telemetry, rapp-tenant-engine and rapp-user-engine. Exact requirements: docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json. No secret values in this record. Resolve on verified provisioning receipts; resolution alone is not a runtime credential grant. Do not attach to the already-resolved general October 11 provisioning decision or mark completed based on user intent.", + "decision_type": "pending", + "status": "open", + "rationale": "All 70 owner capability records are established locally and published; hosted discovery remains 32/70. The remaining 38 registrations need this owner setup.", + "decided_by": null, + "decided_at": null, + "deadline": null, + "escalation_note": null, + "superseded_by": null, + "created_at": "2026-10-14T07:51:34.426143Z", + "updated_at": "2026-10-14T07:51:34.426143Z", + "workstream_id": "e8992815-389a-5c40-8569-a2b0ee3945f0" +} diff --git a/docs/assessments/netkingdom-2026-10-14/publication-batches-receipt.json b/docs/assessments/netkingdom-2026-10-14/publication-batches-receipt.json new file mode 100644 index 00000000..ef4577c6 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/publication-batches-receipt.json @@ -0,0 +1,340 @@ +{ + "proposal_id": "CUST81-PUBLICATION-001", + "target": "ea57268a6eae4de8313113e5b1f98c7d7b657999", + "base": "e8bd394c8b79741a4bb3b1d09c8b495ca41d7c0f", + "temporary_ref": "refs/heads/cust-wp-0081-publication-batches", + "method": "Every file and object introduced through normal scanned pushes; original report history preserved; no scanner suppression or configuration change.", + "batches": [ + { + "commit": "2b6901eb9ce7922d6cb036affd6e3eac2c5098e0", + "files": [ + "docs/assessments/netkingdom-2026-10-14/apply_registry.py", + "docs/assessments/netkingdom-2026-10-14/build_inventory.py", + "docs/assessments/netkingdom-2026-10-14/capability-inventory.md", + "docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json", + "docs/assessments/netkingdom-2026-10-14/completion-audit.json", + "docs/assessments/netkingdom-2026-10-14/federated-local.yaml", + "docs/assessments/netkingdom-2026-10-14/federated-staged.yaml", + "docs/assessments/netkingdom-2026-10-14/federation-local.yaml", + "docs/assessments/netkingdom-2026-10-14/federation-staged.yaml", + "docs/assessments/netkingdom-2026-10-14/full-inventory.json", + "docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json", + "docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json", + "docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json", + "docs/assessments/netkingdom-2026-10-14/hosted-verification.json", + "docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json", + "docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json", + "docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json", + "docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json", + "docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json", + "docs/assessments/netkingdom-2026-10-14/inventory.json", + "docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml", + "docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json", + "docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json", + "docs/assessments/netkingdom-2026-10-14/local-federation-guide.md", + "docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml", + "docs/assessments/netkingdom-2026-10-14/local-sources.yaml", + "docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py", + "docs/assessments/netkingdom-2026-10-14/prepare_registry.py", + "docs/assessments/netkingdom-2026-10-14/publication-preflight.json", + "docs/assessments/netkingdom-2026-10-14/publication_preflight.py", + "docs/assessments/netkingdom-2026-10-14/publish_registry.py", + "docs/assessments/netkingdom-2026-10-14/published-source-verification.json", + "docs/assessments/netkingdom-2026-10-14/register_hub.py", + "docs/assessments/netkingdom-2026-10-14/registry-application.json", + "docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/capabilities/capability.authorization.policy-evaluate.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml" + ], + "local_scan": "[detached HEAD 2b6901e] docs: publish reviewed NetKingdom evidence batch 1\n 40 files changed, 21549 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/apply_registry.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/build_inventory.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/capability-inventory.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/completion-audit.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-local.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-staged.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-local.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-staged.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/full-inventory.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-after-public", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":57,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n * [new branch] HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "f728073b4d9214df2ca00a2fea090a72a0a47d77", + "files": [ + "docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/capabilities/capability.audit.event-retain.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/NO_CAPABILITIES.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/glas-harness/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/issue-core/registry/capabilities/capability.infotech.issue-tracking.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/issue-core/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/key-cape/registry/capabilities/capability.iam.key-cape.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/key-cape/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/net-kingdom/registry/capabilities/capability.security.iam-tooling-suite.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/net-kingdom/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/ops-bridge/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/ops-warden/registry/capabilities/capability.security.ssh-certificate-issuance.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/ops-warden/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-apps/registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-apps/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-bootstrap/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-cluster/registry/capabilities/capability.railiance.cluster-bootstrap.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-cluster/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-enablement/registry/capabilities/capability.railiance.ci-enablement.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-enablement/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-fabric/registry/capabilities/capability.railiance.fabric-graph.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-fabric/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-forge/registry/capabilities/capability.railiance.forge-infrastructure.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-forge/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-infra/registry/capabilities/capability.railiance.infra-provisioning.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-infra/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-platform/registry/capabilities/capability.railiance.platform-services.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/railiance-platform/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/capabilities/capability.registry.register.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/capabilities/capability.registry.validate.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/reuse-surface/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/runbook-tutorials/registry/capabilities/capability.infotech.runbook-tutorials.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/runbook-tutorials/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/sand-boxer/registry/capabilities/execution.sandbox-provision.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/sand-boxer/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md" + ], + "local_scan": "[detached HEAD f728073] docs: publish reviewed NetKingdom evidence batch 2\n 40 files changed, 2505 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/capabilities/capability.audit.event-retain.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/audit-core/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/NO_CAPABILITIES.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/coordination-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/glas-harness/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/info-tech-canon/registry", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":118,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 2b6901e..f728073 HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "d260b123bd316d21f3049255748429a854be909c", + "files": [ + "docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/capabilities/capability.infotech.repo-template.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.progress-log.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/tenant-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/the-custodian/registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/the-custodian/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-before/user-engine/registry/capabilities/capability.identity.user-engine.md", + "docs/assessments/netkingdom-2026-10-14/registry-before/user-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-changes.json", + "docs/assessments/netkingdom-2026-10-14/registry-publication.json", + "docs/assessments/netkingdom-2026-10-14/registry-stage-validation.json", + "docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/capabilities/capability.authorization.policy-evaluate.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/capabilities/capability.activity.event-coordinate.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/capabilities/capability.agents.performance-learning.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/capabilities/capability.security.approval-lifecycle.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/capabilities/capability.audit.event-retain.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/capabilities/capability.coordination.cross-owner-work.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/capabilities/capability.security.agent-knowledge.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/capabilities/capability.finance.security-budget-evidence.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/capabilities/capability.security.doctrine-review.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/capabilities/capability.execution.profile-harness.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/capabilities/capability.infotech.canon-service.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/capabilities/capability.security.human-decision-workspace.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/capabilities/capability.infotech.issue-tracking.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml" + ], + "local_scan": "[detached HEAD d260b12] docs: publish reviewed NetKingdom evidence batch 3\n 40 files changed, 4252 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/capabilities/capability.infotech.repo-template.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/secrets-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.progress-log.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/state-hub/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/te", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":121,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n f728073..d260b12 HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "2f302e8815de59999fb0691a0c28c04b6b7f46f6", + "files": [ + "docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/capabilities/capability.iam.key-cape.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/capabilities/capability.security.posture-assessment.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/capabilities/capability.security.maturity-claims.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.bootstrap-recovery.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.case-contracts.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.emission-profile.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.iam-tooling-suite.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.posture-feedback.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/capabilities/capability.security.scenario-compose.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/capabilities/capability.security.structure-construction.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.access-routing.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.case-follow-through.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/capabilities/capability.security.ssh-certificate-issuance.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/capabilities/capability.security.policy-publication.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/capabilities/capability.railiance.kubernetes-rail.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/capabilities/capability.railiance.bootstrap-sequencing.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/capabilities/capability.railiance.cluster-bootstrap.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/capabilities/capability.railiance.ci-enablement.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/capabilities/capability.railiance.fabric-graph.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/capabilities/capability.railiance.forge-infrastructure.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/capabilities/capability.security.forge-secret-prevention.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/capabilities/capability.railiance.infra-provisioning.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml" + ], + "local_scan": "[detached HEAD 2f302e8] docs: publish reviewed NetKingdom evidence batch 4\n 40 files changed, 3114 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/capabilities/capability.iam.key-cape.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/capabilities/capability.security.posture-assessment.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/capabilities/capability.security.maturity-claims.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/regi", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":110,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n d260b12..2f302e8 HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "164116a219205de3de74ed0baceaa7861057a894", + "files": [ + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/capabilities/capability.railiance.security-consumption-contracts.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/capabilities/capability.railiance.platform-services.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/capabilities/capability.observability.security-signals.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/capabilities/capability.railiance.openbao-package.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/capabilities/capability.railiance.browser-verification.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/capabilities/capability.railiance.policy-publication-package.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/capabilities/capability.railiance.postgres-isolation-recovery.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/capabilities/capability.railiance.telemetry-package.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/capabilities/capability.railiance.tenant-engine-package.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/capabilities/capability.railiance.user-engine-package.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/capabilities/capability.railiance.substrate-bindings.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/capabilities/capability.execution.scheduled-agent-rein.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/capabilities/capability.execution.openweight-rein.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/capabilities/capability.security.repository-secret-prevention.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/capabilities/capability.resources.security-capacity.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.infotech.headless-browser.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.registry.register.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/capabilities/capability.registry.validate.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/capabilities/capability.security.risk-register.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/capabilities/capability.organization.role-catalog.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/capabilities/capability.infotech.runbook-tutorials.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml" + ], + "local_scan": "[detached HEAD 164116a] docs: publish reviewed NetKingdom evidence batch 5\n 40 files changed, 2858 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/capabilities/capability.railiance.security-consumption-contracts.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/capabilities/capability.railiance.platform-services.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/capabilities/capability.observability.security-signals.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml\n create mode 10064", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":122,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 2f302e8..164116a HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "db1411247162321e51953fcaedef761bda000ad0", + "files": [ + "docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/capabilities/execution.sandbox-provision.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/capabilities/capability.security.credential-lifecycle.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/capabilities/capability.security.practice-canon.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/capabilities/capability.statehub.progress-log.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/capabilities/capability.statehub.workstream-coordinate.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/capabilities/capability.identity.tenant-facts.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/capabilities/capability.identity.user-engine.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/capabilities/capability.security.adversarial-evidence.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/capabilities/capability.security.zone-reference.md", + "docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/review-integrity.json", + "docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json", + "docs/assessments/netkingdom-2026-10-14/source-test-receipt.json", + "docs/assessments/netkingdom-2026-10-14/supplement/apply_registry.py", + "docs/assessments/netkingdom-2026-10-14/supplement/build_inventory.py", + "docs/assessments/netkingdom-2026-10-14/supplement/federated-staged.yaml", + "docs/assessments/netkingdom-2026-10-14/supplement/federation-staged.yaml", + "docs/assessments/netkingdom-2026-10-14/supplement/hosted-before-federated.json", + "docs/assessments/netkingdom-2026-10-14/supplement/hosted-before-repos.json", + "docs/assessments/netkingdom-2026-10-14/supplement/inventory.json", + "docs/assessments/netkingdom-2026-10-14/supplement/prepare_registry.py", + "docs/assessments/netkingdom-2026-10-14/supplement/publication-preflight.json", + "docs/assessments/netkingdom-2026-10-14/supplement/publication_preflight.py", + "docs/assessments/netkingdom-2026-10-14/supplement/publish_registry.py", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-application.json", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-changes.json", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-publication.json", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-stage-validation.json", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/capabilities/capability.railiance.knative-rail.md" + ], + "local_scan": "[detached HEAD db14112] docs: publish reviewed NetKingdom evidence batch 6\n 40 files changed, 4738 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/capabilities/execution.sandbox-provision.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/capabilities/capability.infotech.sbom-management.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/capabilities/capability.security.credential-lifecycle.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-stage/security-c", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":84,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 164116a..db14112 HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + }, + { + "commit": "55f2090ff9f75cd0675b2c70bf9f62b5f1af7251", + "files": [ + "docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/capabilities/capability.railiance.sbom-runtime-package.md", + "docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/indexes/capabilities.yaml", + "docs/assessments/netkingdom-2026-10-14/supplement/use-cases.json", + "docs/assessments/netkingdom-2026-10-14/supplement/verification-staged.json", + "docs/assessments/netkingdom-2026-10-14/supplement/verify_registry.py", + "docs/assessments/netkingdom-2026-10-14/use-cases.json", + "docs/assessments/netkingdom-2026-10-14/verification-local.json", + "docs/assessments/netkingdom-2026-10-14/verification-staged.json", + "docs/assessments/netkingdom-2026-10-14/verify_publication.py", + "docs/assessments/netkingdom-2026-10-14/verify_registry.py", + "docs/netkingdom-security-architecture-review.md", + "workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md" + ], + "local_scan": "[detached HEAD 55f2090] docs: publish reviewed NetKingdom evidence batch 7\n 13 files changed, 1318 insertions(+)\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rail-knative/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/capabilities/capability.railiance.sbom-runtime-package.md\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/registry-stage/rapp-sbom-nexus/registry/indexes/capabilities.yaml\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/use-cases.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/verification-staged.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/supplement/verify_registry.py\n create mode 100644 docs/assessments/netkingdom-2026-10-14/use-cases.json\n create mode 100644 docs/assessments/netkingdom-2026-10-14/verification-local.json\n create mode 100644 docs", + "remote_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":27,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n db14112..55f2090 HEAD -> cust-wp-0081-publication-batches\n", + "verified_remote": true + } + ], + "complete": true, + "worktree": "/tmp/cust81-publish-758drpdv/worktree", + "tree_parity": true, + "initial_original_push_failure": "remote: {\"status\":\"unverified\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"reason\":\"scanner-failed\",\"scanned_objects\":137,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n ! [remote rejected] ea57268a6eae4de8313113e5b1f98c7d7b657999 -> main (pre-receive hook declined)\nerror: failed to push some refs to 'forgejo-remote:coulomb/the-custodian.git'\n", + "refinement": "Publish complete original snapshots sequentially; rev-list over-counted objects through earlier unmatched intermediate tree.", + "snapshot_refinement": { + "commit": "0d47c325678db9928cffbe200b30ea28cd5fcf0d", + "tree_parity": true, + "push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":7,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 55f2090..0d47c32 HEAD -> cust-wp-0081-publication-batches\n", + "local_scan": "[detached HEAD 0d47c32] docs: verify first original review snapshot\n 2 files changed, 1 insertion(+), 24 deletions(-)\n delete mode 100644 docs/assessments/netkingdom-2026-10-14/scoped-access-handoff.json\n" + }, + "first_original_introduced_objects": 597, + "snapshot_refinement_failure": "Unexpected remaining object count", + "final_method": "Fast-forward main to fully scanned batched history with exact original tree; preserve unpublished original commits on a local backup branch.", + "complete_snapshot_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":8,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nremote: \nremote: Create a new pull request for 'cust-wp-0081-publication-batches': \nremote: https://forgejo.coulomb.social/coulomb/the-custodian/compare/main...cust-wp-0081-publication-batches \nremote: \nTo forgejo-remote:coulomb/the-custodian.git\n 0d47c32..a3b894e HEAD -> cust-wp-0081-publication-batches\n", + "published_head": "a3b894eb42c177e97fd8885afce07b21ca36d416", + "local_original_backup": "cust-wp-0081-original-unpublished", + "final_main_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":0,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n e8bd394..a3b894e a3b894eb42c177e97fd8885afce07b21ca36d416 -> main\n", + "equivalent_history_published": true, + "local_main_aligned": true, + "cleanup_push": "remote: {\"status\":\"clean\",\"scope\":\"introduced-reachable-git-objects-and-updated-ref-names\",\"scanned_objects\":0,\"scanned_refs\":1,\"scanner_version\":\"8.30.1\"} \nTo forgejo-remote:coulomb/the-custodian.git\n - [deleted] cust-wp-0081-publication-batches\n", + "temporary_ref_removed": true +} diff --git a/docs/netkingdom-security-architecture-review.md b/docs/netkingdom-security-architecture-review.md index 857a1b23..be56abd2 100644 --- a/docs/netkingdom-security-architecture-review.md +++ b/docs/netkingdom-security-architecture-review.md @@ -146,10 +146,13 @@ Stable reuse surfaces should be schemas, versioned request/claim/decision/receip | Lower recurring work | Reopened/duplicate findings, overdue owner work and manual handoffs; Guard/Activity/State Hub | Repeat observation windows with stable source denominator | | Better security coverage | Credentials, PEPs, repositories and event classes with complete evidence divided by explicitly inventoried totals | Unknowns reported separately; no denominator shrink to improve a score | | Cheaper operation | Resource requests versus measured demand, recovery storage and operator effort; Resource Control/Fin Hub | Native capacity/recovery checks and error rate remain within the agreed bounds | +| Reliable preventive checks | Scan duration, objects per push and unverified refusals; Forge/Repo Manager | Representative evidence publication passes within declared bounds while introduced-history and negative-secret checks remain enforced | | Better reuse | Successful second installation, time to integrate, adapter-specific code and upgrade failures; NetKingdom/Reuse Surface | Independent consumer acceptance against pinned contracts | A useful automatic loop observes and proposes. Any actuation still passes existing authority, cost/risk, approval and rollback controls. A maturity score, performance lesson or optimization target must never manufacture a permission. +Publication of this review exposed a concrete efficiency issue: the normal receive scanner refused the large evidence push with `scanner-failed` after 135–138 objects, while its source declares a 90-second total budget. Smaller batches passed the same scanner. This supports measuring startup/per-object overhead and testing representative publication sizes under rank 12; it does not prove the precise failure cause or justify weakening detection. The [publication receipt](assessments/netkingdom-2026-10-14/publication-batches-receipt.json) retains accepted batch results and final tree parity. + ## Capability establishment status **Owner registries and local reuse-surface discovery are established; hosted establishment remains incomplete.** All 70 reviewed capabilities validate and occur exactly once in the composed local federation. The normal `plan-check` command finds Approval Engine for bound approval consumption and NetKingdom Posture Feedback for evidence expiry. The default local federation preserves unrelated sources: 99 source registrations compose 114 total capabilities without warnings. [Local verification](assessments/netkingdom-2026-10-14/verification-local.json), [normal CLI discovery](assessments/netkingdom-2026-10-14/local-discovery-receipt.json). diff --git a/workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md b/workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md index a1174fc2..c0ad48d1 100644 --- a/workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md +++ b/workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md @@ -4,7 +4,7 @@ type: workplan title: "Review NetKingdom architecture and establish security reuse capabilities" domain: infotech repo: the-custodian -status: active +status: blocked owner: codex topic_slug: custodian created: "2026-10-14" @@ -41,8 +41,11 @@ Delivered `docs/netkingdom-security-architecture-review.md` and the linked inven ```task id: CUST-WP-0081-T02 -status: progress +status: wait priority: high +needs_human: true +blocking_reason: "Await owner-provisioned hub write access and private-source read/disclosure admission; OpenBao denied the current caller." +decision_id: "5cd22087-e5d8-5d5e-a252-610a6ac13653" state_hub_task_id: "80b037cd-876d-53c2-9272-b1dfe0524446" ``` @@ -58,8 +61,10 @@ does not prove hosted federation. Preserve unrelated worktree changes. ```task id: CUST-WP-0081-T03 -status: progress +status: wait priority: high +depends_on: [CUST-WP-0081-T02] +blocking_reason: "Final coverage audit requires all reviewed capabilities established in hosted reuse-surface." state_hub_task_id: "9bccb18e-0501-5319-a18c-f1fb36312cb7" ```