diff --git a/docs/assessments/netkingdom-2026-10-14/apply_registry.py b/docs/assessments/netkingdom-2026-10-14/apply_registry.py
new file mode 100644
index 00000000..d8ad3e01
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/apply_registry.py
@@ -0,0 +1,20 @@
+"""Apply only the hash-pinned, reviewed metadata patch; never stage or commit."""
+from pathlib import Path
+import hashlib,json
+OUT=Path(__file__).resolve().parent;BASE=Path('/home/worsch')
+changes=json.loads((OUT/'registry-changes.json').read_text())
+# Check the entire patch before the first write. Do not overwrite concurrent edits.
+for c in changes:
+ p=BASE/c['repo']/c['path'];actual=hashlib.sha256(p.read_bytes()).hexdigest() if p.exists() else None
+ if actual!=c['before_sha256']:raise SystemExit('Concurrent change: '+str(p))
+ if c['operation']=='write':
+ stage=OUT/'registry-stage'/c['repo']/c['path']
+ if hashlib.sha256(stage.read_bytes()).hexdigest()!=c['after_sha256']:raise SystemExit('Staged digest differs: '+str(stage))
+for c in changes:
+ p=BASE/c['repo']/c['path']
+ if p.exists():
+ backup=OUT/'registry-before'/c['repo']/c['path'];backup.parent.mkdir(parents=True,exist_ok=True);backup.write_bytes(p.read_bytes())
+ if c['operation']=='delete':p.unlink()
+ else:p.parent.mkdir(parents=True,exist_ok=True);p.write_bytes((OUT/'registry-stage'/c['repo']/c['path']).read_bytes())
+(OUT/'registry-application.json').write_text(json.dumps({'applied':len(changes),'repositories':len({c['repo'] for c in changes}),'verified_sha256':True,'git_staging_or_commits':False},indent=2)+'\n')
+print('Applied',len(changes),'reviewed metadata edits')
diff --git a/docs/assessments/netkingdom-2026-10-14/build_inventory.py b/docs/assessments/netkingdom-2026-10-14/build_inventory.py
new file mode 100644
index 00000000..1e244120
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/build_inventory.py
@@ -0,0 +1,98 @@
+"""Build the review's explicit capability denominator and staged registry patch."""
+from pathlib import Path
+import hashlib, json, subprocess, yaml
+BASE=Path('/home/worsch'); OUT=Path(__file__).resolve().parent
+# repo | id suffix | capability | availability | operational estimate (1..5) | surface | limitation | use cases | artifacts
+DATA='''
+security-canon|security.practice-canon|Security practice and authority vocabulary|A0|2|Versioned SEC-DSM and Mode of Authority documents|Normative practice; no runtime control or certification|U01 U07 U10 U14|SCOPE.md;infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md
+net-kingdom|security.iam-tooling-suite|NetKingdom security architecture and conformance tooling|A2|2|Versioned IAM, layer, tenancy and credential contracts plus validators|Mixed accepted and proposed standards; framework integration remains incomplete|U01 U02 U03 U14|SCOPE.md;SECURITY-COMPANION.md
+net-kingdom|security.scenario-compose|Deterministic security scenario composition|A2|2|CLI selects pinned providers and orders trust transitions|Plan only; execution.permitted is always false|U01 U14|tools/security-scenario-composer/README.md;tools/security-scenario-composer/security_scenario_composer.py
+net-kingdom|security.posture-feedback|Deterministic posture feedback|A2|2|CLI evaluates evidence age and posture into owner-routed findings|Proposal only; no policy changes or remediation execution|U09 U14|tools/posture-feedback/README.md;tools/posture-feedback/posture_feedback.py
+net-kingdom|security.case-contracts|Security case types and instance validation|A2|2|Versioned types, cases and schema validation|Type acknowledgment, case acceptance, structural materialization and native execution are distinct|U01 U05 U06|tools/security-case-types/README.md;canon/standards/security-case-types_v0.1.md
+net-kingdom|security.bootstrap-recovery|Guarded bootstrap and recovery preparation|A2|2|Local identity, bootstrap console, encrypted custody handoff and caller tools|Source repairs and disposable native fixtures do not prove estate root isolation or recovery|U10|tools/security-bootstrap-console/README.md;tools/custody-record/README.md
+net-kingdom|security.emission-profile|Security emission cadence validation|A2|2|Security profile over generic emission contracts and validator|Profile adoption and source completeness require owner-native evidence|U08 U09|tools/emission-cadence-profile/README.md
+key-cape|iam.key-cape|OIDC identity and assurance|A4|3|OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI|Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates|U02 U03 U04 U10|SCOPE.md;README.md
+user-engine|identity.user-engine|User lifecycle and account journeys|A4|3|Accounts, identity links, membership, MFA and recovery portal, advisory catalog|Application readback is advisory; applications must enforce their own authorization|U02 U03 U10|SCOPE.md;README.md
+tenant-engine|identity.tenant-facts|Tenant lifecycle and guardrail facts|A4|3|Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store|Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate|U03 U04|SCOPE.md;README.md
+zone-engine|security.zone-reference|Zone membership reference conformance|A2|2|Offline resolution, exception and lineage checks|No live zone engine, PDP or protected side effects|U01 U03 U14|SCOPE.md;README.md
+access-engine|authorization.policy-evaluate|Policy evaluation and decision evidence|A4|3|Check, batch, list-allowed, explain, binding, lifetime and decision records|One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct|U03 U04 U05 U06|SCOPE.md;README.md
+approval-engine|security.approval-lifecycle|Bound approval lifecycle|A4|2|Authenticated issue, claim, revoke, supersede and atomic consume API with outbox|Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open|U04 U05 U06|SCOPE.md;approval_engine/api.py;docs/production-dependencies.md
+secrets-engine|security.credential-lifecycle|Cataloged credential lifecycle|A2|2|CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke|Production protected execution and independently anchored PDP authentication remain incomplete|U04 U05 U07|SCOPE.md;src/secrets_engine/decision_check.py
+ops-warden|security.ssh-certificate-issuance|Decision-bound SSH certificates|A3|3|warden sign with local and OpenBao backends and adm/agt/atm actors|Direct Tooling contact is a declared gap; certificate reachability is not target authorization|U06|SCOPE.md;README.md
+ops-warden|security.access-routing|Credential routing and contained access|A3|3|warden route and access catalog; exact lane conduit and secret-exec routing|Routing grants no authority; interim delegates and attended high-risk lanes persist|U04 U05 U06|SCOPE.md;wiki/CredentialRouting.md
+ops-warden|security.case-follow-through|Security case operational follow-through|A2|2|KnownSecurityCase route, plan and operational receipts|Execution requires accepted structure and exact owner contracts; case closure is not automatic|U01 U05 U06|workplans/WARDEN-WP-0044-security-case-follow-through.md
+ops-mason|security.structure-construction|Reviewed security structure construction|A2|2|Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply|Founder plan gate is an explicit exception; not full PDP conformance|U01 U05 U06|SCOPE.md;docs/construction-plan-format.md
+ops-bridge|ops.tunnel-bridge|SSH tunnel lifecycle|A2|3|Named tunnels, reconnect, health and TTL-aware cert_command|Private transport does not authenticate applications or decide access|U06|SCOPE.md
+audit-core|audit.event-retain|Independent audit custody|A4|3|Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation|Custody after arrival does not prove source completeness; freshness bounds integrity assertions|U08 U09 U10|SCOPE.md;docs/stream-completeness.md
+maturity-engine|security.maturity-claims|Evidence-based maturity claims and gap register|A2|2|SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory|No production deployment claimed; levels supply facts and cannot authorize actions|U09 U14|SCOPE.md;docs/claim-contract.md
+kings-guard|security.posture-assessment|Security posture assessment and response proposals|A2|2|Normalized observation evaluator, cadence checks and secret-use snapshot adapter|Bounded reference pilot; containment proposals only; deployed-stream admission remains open|U08 U09|SCOPE.md;docs/SecretUseSnapshotAdmission.md
+whitehat-security|security.adversarial-evidence|Authorized adversarial evidence harness|A2|2|Offline ASM and tenancy calibrations and engagement admission|Live probes require a complete engagement; no blanket target authorization|U03 U08 U10 U14|SCOPE.md;README.md
+gate-house|security.doctrine-review|Security doctrine and architecture review|A0|3|Layer rules, authority context, ASM criteria and interpretations|Staff judgment; no runtime PDP, credential issuer or automatic enforcement|U01 U09 U14|SCOPE.md;INTENT.md
+emergent-security|security.agent-knowledge|Verified security orientation for agents|A2|2|Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports|Current start card withheld for source drift; orientation never grants authority|U01 U11 U14|SCOPE.md;knowledge/cards/start.md
+informed-decision|security.human-decision-workspace|Human security decision presentation and disposition|A4|3|Headless lifecycle and browser workspace with exact native approval references|Initial audience is bounded; Approval Engine owns approval state, Access Engine decides|U04 U05 U09|SCOPE.md;README.md
+policy-nexus|security.policy-publication|Policy publication with source provenance|A2|3|Generated immutable publication, source currency and stable policy URLs|Publication does not ratify policy or enforce it|U01 U09 U14|README.md;docs/publication-contract.md
+risk-nexus|security.risk-register|Security risk and exception review register|A2|2|Markdown findings and Python review, verification and due-work reports|Judgment remains human or agent; no live EUR risk gate or autonomous response|U09 U14|SCOPE.md
+role-engine|organization.role-catalog|Organizational role definitions|A0|1|Versioned documentation catalog|Not IAM roles, assignments or runtime authorization|U01 U11|README.md;INTENT.md
+glas-harness|execution.profile-harness|Profile-bound agent execution lifecycle|A3|2|Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration|No ready profile asserted by SCOPE; Custodian native isolation remains open|U11|SCOPE.md;README.md
+sand-boxer|execution.sandbox-provision|Sandbox establishment and lifecycle|A5|2|Profiles, extensions, provision, checkpoints, TTL teardown and telemetry|Backend-specific guarantees; a created sandbox alone proves no credential isolation|U11 U14|SCOPE.md;README.md
+rein-aharness|execution.scheduled-agent-rein|Scheduled agent intake and harness routing|A2|3|Activity Core lease claim/heartbeat and Glas profile execution|Legacy paths are time-gated; task success is not privileged authority|U09 U11|SCOPE.md;README.md
+rein-openweights|execution.openweight-rein|Bounded open-weight agent execution|A2|2|Tool loop, path guards, turn/budget limits and verified-commit result|Provider credential acquisition and runtime authority need separate custody controls|U11|SCOPE.md;README.md
+agentic-resources|agents.performance-learning|Agent performance learning|A2|2|Capture sessions, curate patterns, distribute lessons and measure outcomes|Workforce assignments and broader authority contracts remain proposed|U09 U11|SCOPE.md
+runbook-tutorials|infotech.runbook-tutorials|Guided administrative runbooks|A2|2|Pack schema, loader, local UI/CLI, gates, verification and rollback evidence|Owner supplies procedures; UI progress is not runtime approval|U05 U10 U14|SCOPE.md;docs/pack-spec.md
+repo-manager|security.repository-secret-prevention|Repository metadata and staged-secret prevention|A2|3|Repository observation plus pinned staged-blob scanner and hook integration|Local hooks are bypassable; coverage is exact-checkout scoped|U07 U12|SCOPE.md;README.md
+sbom-nexus|infotech.sbom-management|Dependency provenance and SBOM evidence|A4|3|Controlled archive ingest, immutable snapshots, freshness and license review|SBOM and license evidence do not prove vulnerability exploitability or artifact trust|U12 U09|README.md
+activity-core|activity.event-coordinate|Durable automation and bounded operations|A4|3|Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks|Not a general shell executor; first unassisted security-flow cadence acceptance remains open|U09 U12|SCOPE.md;README.md
+issue-core|infotech.issue-tracking|External issue tracker connector|A2|2|CLI and Python adapters for external issue systems|Internal work originates in owner files; external projection is optional|U09|README.md
+state-hub|statehub.workstream-coordinate|Cross-repository work tracking|A4|3|File-derived workplans, tasks, dependencies, decisions and coordination views|Read/cache/index of owner work; not runtime approval authority|U09|README.md;SCOPE.md
+state-hub|statehub.progress-log|Progress and work evidence indexing|A4|3|REST progress and task evidence references|Not independent security event custody|U08 U09|README.md;SCOPE.md
+the-custodian|agents.custodian-runtime-tooling|Generic agent runtime and repository tooling|A2|2|Agent runtime modules and repository classification tooling|Only generic tooling is reusable; confidential canon and session memory are excluded|U09 U11 U14|runtime/README.md
+coordination-engine|coordination.cross-owner-work|Cross-owner coordination lifecycle|A2|2|Observation, lease, wake-up, checkpoint and receipt contracts/runtime|Coordinates owners without replacing their execution or security authority|U09|SCOPE.md;spec/cross-owner-wait-mode-v0.1.md
+reuse-surface|registry.register|Capability registry and federation|A3|3|Owner Markdown entries, indexes, federation hub and planning queries|Discovery is not readiness; empty and stale entries need evidence-led maintenance|U01 U09 U14|docs/RegistryFederation.md;specs/CapabilityMaturityStandard.md
+reuse-surface|registry.validate|Capability registry validation|A3|3|Schema, index consistency and relation checks|Schema validity alone proves neither capability behavior nor hosted freshness|U01 U14|docs/RegistryFederation.md;schemas/capability.schema.yaml
+info-tech-canon|infotech.canon-service|Shared semantic contracts and validation|A4|2|Markdown canon with library, CLI and read-only API|Mixed seed/candidate maturity; validation is not owner runtime conformance|U01 U08 U14|SCOPE.md
+railiance-master|railiance.security-consumption-contracts|Platform security consumption architecture|A0|2|Rail/rapp/reef boundaries, exposure and security consumption contracts|Architecture declarations do not prove implementation or production admission|U01 U13 U14|SCOPE.md;docs/netkingdom-security-consumption-contract.md
+railiance-platform|railiance.platform-services|Secret custody and platform data services|A2|3|OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts|Package ownership is split to rapp repos; caches and object services are demand-led|U04 U05 U07 U10 U13|SCOPE.md;docs/openbao.md
+railiance-infra|railiance.infra-provisioning|Host convergence and security baseline|A2|3|Ansible inventory, firewall, SSH bootstrap and baseline verification|Current hosts differ from the retained Hetzner provisioning path|U06 U10 U13|SCOPE.md
+railiance-cluster|railiance.cluster-bootstrap|Kubernetes runtime and cluster controls|A2|3|k3s, ingress, CNI, operators and kubeconfig/runtime checks|Single-node runtime and workload recovery are distinct from bootstrap success|U10 U13|SCOPE.md
+railiance-enablement|railiance.ci-enablement|Developer delivery and CI templates|A2|2|Reusable CI workflows, build and deployment patterns|Templates do not prove mandatory checks or runner isolation|U12 U14|SCOPE.md
+railiance-forge|railiance.forge-infrastructure|Source forge, registries and runner substrate|A2|3|Forgejo operation, package registries and runner lifecycle|Runner workload authority and independent verification coverage remain open|U12|SCOPE.md;workplans/FORGE-WP-0006-independent-secret-detection.md
+railiance-forge|security.forge-secret-prevention|Independent introduced-history secret prevention|A2|3|Pinned receive adapter, lifecycle template and fail-closed scan|Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate|U07 U12|workplans/FORGE-WP-0006-independent-secret-detection.md
+railiance-apps|railiance.workload-deployment-tooling|Workload release configuration and guards|A2|3|Helm/manifests, exact image pins, application runbooks and rollout/rollback|Release settings depend on underlying platform and workload owners|U12 U13|SCOPE.md
+railiance-bootstrap|railiance.bootstrap-sequencing|Bootstrap sequencing contracts|A0|1|Bare-VM to estate sequence and handoff contract|End-to-end unattended rebuild is not established|U10 U14|SCOPE.md
+rail-kubernetes|railiance.kubernetes-rail|Generic Kubernetes workload lifecycle|A2|2|Workload declaration, rollout, observe, promote and rollback surfaces|Compatibility extraction remains; not cluster or application-domain ownership|U13 U14|SCOPE.md
+reef-railiance|railiance.substrate-bindings|Substrate topology and bindings|A0|2|Grouped home-reef identity, topology and placement declarations|Declarations are not automatic placement or authorization|U13 U14|SCOPE.md
+railiance-fabric|railiance.fabric-graph|Infrastructure ownership and dependency graph|A2|2|Schemas, validation, graph queries and State Hub exports|Graph assertions need current owner evidence; not an enforcement registry|U09 U13 U14|SCOPE.md
+rapp-openbao|railiance.openbao-package|Managed OpenBao deployment package|A2|3|Helm values, package deploy/status/smoke/rollback and custody boundary|Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit|U04 U10 U13|README.md;docs/retained-s3-handoff.md
+rapp-postgres|railiance.postgres-isolation-recovery|Database isolation and recovery package|A2|3|CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures|Host-loss proof and consumer schemas stay with their owners|U03 U10 U13|SCOPE.md
+rapp-user-engine|railiance.user-engine-package|User Engine runtime package|A2|3|Pinned deployment, dedicated CNPG, ExternalSecret references and rollback|Domain, identity, PDP and custody authority are separate|U02 U10 U13|SCOPE.md
+rapp-tenant-engine|railiance.tenant-engine-package|Tenant Engine runtime package|A2|2|Package declaration, smoke and rollback|No tenant-domain ownership or credential values|U03 U13|SCOPE.md
+rapp-policy-nexus|railiance.policy-publication-package|Policy publication runtime package|A2|3|Immutable image, non-root/read-only runtime and approved TLS exposure|No policy authoring or DNS/issuer administration|U01 U13|SCOPE.md
+rapp-playwright|railiance.browser-verification|Managed browser verification pilot|A4|2|Bounded jobs, cancellation, artifacts, origin checks and restart receipts|Pilot deployed; human/agent authentication and per-caller self-service connectivity pending|U02 U14|SCOPE.md
+railiance-telemetry|observability.security-signals|Security-relevant telemetry contracts and adapters|A2|2|Signal contract, platform adapters, report exporter and absence/alert rules|Reference receiver is not a second production plane; end-to-end delivery acceptance pending|U08 U09|SCOPE.md;README.md
+rapp-telemetry|railiance.telemetry-package|Private monitoring package|A2|2|Prometheus, Alertmanager and Grafana package with isolated restore evidence|Private installation only; recurring recovery capture and audited confirmation pending|U08 U09 U10|SCOPE.md
+resource-control|resources.security-capacity|Capacity and recovery resource planning|A2|2|Provider-neutral inventory, procurement evidence and optimization reports|No payment authority or irreversible procurement; metrics do not prove usable runtime capacity|U09 U10 U13|SCOPE.md
+fin-hub|finance.security-budget-evidence|Budget and cost evidence for security operations|A4|2|Budget, commitment, spend attribution and planning-evidence consumption|No verified concurrent runtime EUR risk/cost enforcement for agents|U09 U11|SCOPE.md
+'''
+rows=[]
+for line in DATA.strip().splitlines():
+ repo,suffix,name,a,op,surface,limit,ucs,arts=line.split('|')
+ rows.append(dict(repo=repo,id='capability.'+suffix,name=name,availability=a,operational_estimate=int(op),surface=surface,limitation=limit,use_cases=ucs.split(),artifacts=arts.split(';')))
+# Source and current registry evidence, content hashes only (never credentials).
+repos={}
+for repo in sorted({r['repo'] for r in rows}):
+ root=BASE/repo
+ def git(*args):
+ p=subprocess.run(['git','-C',str(root),*args],capture_output=True,text=True);return p.stdout.strip()
+ ix=root/'registry/indexes/capabilities.yaml'
+ index=yaml.safe_load(ix.read_text()) if ix.exists() else {}
+ sources=sorted(set(['INTENT.md','SCOPE.md','README.md']+[a for r in rows if r['repo']==repo for a in r['artifacts']]))
+ hashes={p:'sha256:'+hashlib.sha256((root/p).read_bytes()).hexdigest() for p in sources if (root/p).is_file()}
+ missing=[p for r in rows if r['repo']==repo for p in r['artifacts'] if not (root/p).is_file()]
+ repos[repo]={'head':git('rev-parse','HEAD'),'branch':git('branch','--show-current'),'dirty_paths':git('status','--short').splitlines(),'source_sha256':hashes,'missing_review_artifacts':missing,'existing_index':index}
+ for r in [x for x in rows if x['repo']==repo]:
+ old=next((c for c in (index or {}).get('capabilities',[]) if c.get('id')==r['id']),None)
+ r['existing_entry_path']=old.get('path') if old else None
+ r['prior_vector']=old.get('vector') if old else None
+ r['vector']='D3 / '+r['availability']+' / C1 / R0'
+(OUT/'inventory.json').write_text(json.dumps({'as_of':'2026-10-14','capabilities':rows,'repositories':repos},indent=2)+'\n')
+print(json.dumps({'repos':len(repos),'capabilities':len(rows),'existing':sum(bool(r['existing_entry_path']) for r in rows),'missing_artifacts':{k:v['missing_review_artifacts'] for k,v in repos.items() if v['missing_review_artifacts']}},indent=2))
diff --git a/docs/assessments/netkingdom-2026-10-14/capability-inventory.md b/docs/assessments/netkingdom-2026-10-14/capability-inventory.md
new file mode 100644
index 00000000..5b02cb26
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/capability-inventory.md
@@ -0,0 +1,504 @@
+# NetKingdom repository and capability inventory
+
+Assessed 2026-10-14. See the [architecture review](../../netkingdom-security-architecture-review.md) for use cases U01–U14, evidence rules, operational maturity M1–M5 and D/A/C/R definitions. Existing external evidence levels are owner claims, not newly certified scores.
+
+**60 capability-owning repositories, 70 reviewed capabilities, plus two inspected nonproviders.**
+
+## access-engine
+
+Source revision `16ca97b2776789f730cc7049a2d6533612faaccd`. [Owner scope](../../../../access-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Policy evaluation and decision evidence](../../../../access-engine/SCOPE.md)
`capability.authorization.policy-evaluate` | Check, batch, list-allowed, explain, binding, lifetime and decision records.
U03, U04, U05, U06 | D4 / A4 / C2 / R1
M3 estimate | One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct. |
+
+## activity-core
+
+Source revision `83e6446807c4b36f3aa5023a5c16d4c7df8bd3df`. [Owner scope](../../../../activity-core/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Durable automation and bounded operations](../../../../activity-core/SCOPE.md)
`capability.activity.event-coordinate` | Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks.
U09, U12 | D3 / A4 / C1 / R0
M3 estimate | Not a general shell executor; first unassisted security-flow cadence acceptance remains open. |
+
+## agentic-resources
+
+Source revision `65b3a5cb6bf3eb214b492b95a38f2eb729f89709`. [Owner scope](../../../../agentic-resources/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Agent performance learning](../../../../agentic-resources/SCOPE.md)
`capability.agents.performance-learning` | Capture sessions, curate patterns, distribute lessons and measure outcomes.
U09, U11 | D3 / A2 / C1 / R0
M2 estimate | Workforce assignments and broader authority contracts remain proposed. |
+
+## approval-engine
+
+Source revision `e1649617e8ad321f79632d5fd33e973ae5d5ae51`. [Owner scope](../../../../approval-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Bound approval lifecycle](../../../../approval-engine/SCOPE.md)
`capability.security.approval-lifecycle` | Authenticated issue, claim, revoke, supersede and atomic consume API with outbox.
U04, U05, U06 | D3 / A4 / C1 / R0
M2 estimate | Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open. |
+
+## audit-core
+
+Source revision `f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9`. [Owner scope](../../../../audit-core/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Independent audit custody](../../../../audit-core/SCOPE.md)
`capability.audit.event-retain` | Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.
U08, U09, U10 | D3 / A4 / C3 / R2
M3 estimate | Custody after arrival does not prove source completeness; freshness bounds integrity assertions. |
+
+## coordination-engine
+
+Source revision `c401067842072b75717f76480dd6e7db1836059c`. [Owner scope](../../../../coordination-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Cross-owner coordination lifecycle](../../../../coordination-engine/SCOPE.md)
`capability.coordination.cross-owner-work` | Observation, lease, wake-up, checkpoint and receipt contracts/runtime.
U09 | D3 / A2 / C1 / R0
M2 estimate | Coordinates owners without replacing their execution or security authority. |
+
+## emergent-security
+
+Source revision `4c6fda38298fa50665ead41526b893adf069d335`. [Owner scope](../../../../emergent-security/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Verified security orientation for agents](../../../../emergent-security/SCOPE.md)
`capability.security.agent-knowledge` | Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports.
U01, U11, U14 | D3 / A2 / C1 / R0
M2 estimate | Current start card withheld for source drift; orientation never grants authority. |
+
+## fin-hub
+
+Source revision `8f527c6705bbf5d7ffed43559411ca748bec8fe4`. [Owner scope](../../../../fin-hub/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Budget and cost evidence for security operations](../../../../fin-hub/SCOPE.md)
`capability.finance.security-budget-evidence` | Budget, commitment, spend attribution and planning-evidence consumption.
U09, U11 | D3 / A4 / C1 / R0
M2 estimate | No verified concurrent runtime EUR risk/cost enforcement for agents. |
+
+## gate-house
+
+Source revision `bc890c4d050a2e726ce8988a8260ab9caea133e3`. [Owner scope](../../../../gate-house/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Security doctrine and architecture review](../../../../gate-house/SCOPE.md)
`capability.security.doctrine-review` | Layer rules, authority context, ASM criteria and interpretations.
U01, U09, U14 | D3 / A0 / C1 / R0
M3 estimate | Staff judgment; no runtime PDP, credential issuer or automatic enforcement. |
+
+## glas-harness
+
+Source revision `7b1557ba14f483569b90ebfdc2d0136fa69602fe`. [Owner scope](../../../../glas-harness/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Profile-bound agent execution lifecycle](../../../../glas-harness/SCOPE.md)
`capability.execution.profile-harness` | Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration.
U11 | D3 / A3 / C1 / R0
M2 estimate | No ready profile asserted by SCOPE; Custodian native isolation remains open. |
+
+## info-tech-canon
+
+Source revision `3d206a56f4ece439f6ee87f9ee4d1800ab82166e`. [Owner scope](../../../../info-tech-canon/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Shared semantic contracts and validation](../../../../info-tech-canon/SCOPE.md)
`capability.infotech.canon-service` | Markdown canon with library, CLI and read-only API.
U01, U08, U14 | D2 / A4 / C1 / R0
M2 estimate | Mixed seed/candidate maturity; validation is not owner runtime conformance. |
+
+## informed-decision
+
+Source revision `ee6a65b80a0fea1a914dfa31434b903669656c09`. [Owner scope](../../../../informed-decision/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Human security decision presentation and disposition](../../../../informed-decision/SCOPE.md)
`capability.security.human-decision-workspace` | Headless lifecycle and browser workspace with exact native approval references.
U04, U05, U09 | D3 / A4 / C1 / R0
M3 estimate | Initial audience is bounded; Approval Engine owns approval state, Access Engine decides. |
+
+## issue-core
+
+Source revision `de368271f6ffc06353ec409998a0d6d0ec0bf25e`. [Owner scope](../../../../issue-core/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [External issue tracker connector](../../../../issue-core/README.md)
`capability.infotech.issue-tracking` | CLI and Python adapters for external issue systems.
U09 | D4 / A2 / C2 / R1
M2 estimate | Internal work originates in owner files; external projection is optional. |
+
+## key-cape
+
+Source revision `1344fc80e56315c5c99f58993f9ee02ce79e8a76`. [Owner scope](../../../../key-cape/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [OIDC identity and assurance](../../../../key-cape/SCOPE.md)
`capability.iam.key-cape` | OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.
U02, U03, U04, U10 | D4 / A4 / C2 / R1
M3 estimate | Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates. |
+
+## kings-guard
+
+Source revision `af02e2547598d6ec0e83f482d9ea3ef943ea67b7`. [Owner scope](../../../../kings-guard/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Security posture assessment and response proposals](../../../../kings-guard/SCOPE.md)
`capability.security.posture-assessment` | Normalized observation evaluator, cadence checks and secret-use snapshot adapter.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Bounded reference pilot; containment proposals only; deployed-stream admission remains open. |
+
+## maturity-engine
+
+Source revision `2f1de542cc8f24a79452f906d99f95be39d8b6a9`. [Owner scope](../../../../maturity-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Evidence-based maturity claims and gap register](../../../../maturity-engine/SCOPE.md)
`capability.security.maturity-claims` | SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | No production deployment claimed; levels supply facts and cannot authorize actions. |
+
+## net-kingdom
+
+Source revision `1a36e857cc5aae6fe738f794417126c46dd94627`. [Owner scope](../../../../net-kingdom/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [NetKingdom security architecture and conformance tooling](../../../../net-kingdom/SCOPE.md)
`capability.security.iam-tooling-suite` | Versioned IAM, layer, tenancy and credential contracts plus validators.
U01, U02, U03, U14 | D3 / A2 / C1 / R1
M2 estimate | Mixed accepted and proposed standards; framework integration remains incomplete. |
+| [Deterministic security scenario composition](../../../../net-kingdom/tools/security-scenario-composer/README.md)
`capability.security.scenario-compose` | CLI selects pinned providers and orders trust transitions.
U01, U14 | D3 / A2 / C1 / R0
M2 estimate | Plan only; execution.permitted is always false. |
+| [Deterministic posture feedback](../../../../net-kingdom/tools/posture-feedback/README.md)
`capability.security.posture-feedback` | CLI evaluates evidence age and posture into owner-routed findings.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | Proposal only; no policy changes or remediation execution. |
+| [Security case types and instance validation](../../../../net-kingdom/tools/security-case-types/README.md)
`capability.security.case-contracts` | Versioned types, cases and schema validation.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Type acknowledgment, case acceptance, structural materialization and native execution are distinct. |
+| [Guarded bootstrap and recovery preparation](../../../../net-kingdom/tools/security-bootstrap-console/README.md)
`capability.security.bootstrap-recovery` | Local identity, bootstrap console, encrypted custody handoff and caller tools.
U10 | D3 / A2 / C1 / R0
M2 estimate | Source repairs and disposable native fixtures do not prove estate root isolation or recovery. |
+| [Security emission cadence validation](../../../../net-kingdom/tools/emission-cadence-profile/README.md)
`capability.security.emission-profile` | Security profile over generic emission contracts and validator.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Profile adoption and source completeness require owner-native evidence. |
+
+## ops-bridge
+
+Source revision `190ef1e188e12c606f1359325fd9fdd1dbef29e2`. [Owner scope](../../../../ops-bridge/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [SSH tunnel lifecycle](../../../../ops-bridge/SCOPE.md)
`capability.ops.tunnel-bridge` | Named tunnels, reconnect, health and TTL-aware cert_command.
U06 | D3 / A2 / C2 / R1
M3 estimate | Private transport does not authenticate applications or decide access. |
+
+## ops-mason
+
+Source revision `d86ad141befb6800468f5132d4c7c9ce2f852bb5`. [Owner scope](../../../../ops-mason/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Reviewed security structure construction](../../../../ops-mason/SCOPE.md)
`capability.security.structure-construction` | Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Founder plan gate is an explicit exception; not full PDP conformance. |
+
+## ops-warden
+
+Source revision `6d2f1be9691b19e826898a2166ae4451e4802ae2`. [Owner scope](../../../../ops-warden/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Decision-bound SSH certificates](../../../../ops-warden/SCOPE.md)
`capability.security.ssh-certificate-issuance` | warden sign with local and OpenBao backends and adm/agt/atm actors.
U06 | D4 / A3 / C3 / R2
M3 estimate | Direct Tooling contact is a declared gap; certificate reachability is not target authorization. |
+| [Credential routing and contained access](../../../../ops-warden/SCOPE.md)
`capability.security.access-routing` | warden route and access catalog; exact lane conduit and secret-exec routing.
U04, U05, U06 | D3 / A3 / C1 / R0
M3 estimate | Routing grants no authority; interim delegates and attended high-risk lanes persist. |
+| [Security case operational follow-through](../../../../ops-warden/workplans/WARDEN-WP-0044-security-case-follow-through.md)
`capability.security.case-follow-through` | KnownSecurityCase route, plan and operational receipts.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Execution requires accepted structure and exact owner contracts; case closure is not automatic. |
+
+## policy-nexus
+
+Source revision `f784f017b0822f34c785f0b34c7c55fcf39c9d99`. [Owner scope](../../../../policy-nexus/README.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Policy publication with source provenance](../../../../policy-nexus/README.md)
`capability.security.policy-publication` | Generated immutable publication, source currency and stable policy URLs.
U01, U09, U14 | D3 / A2 / C1 / R0
M3 estimate | Publication does not ratify policy or enforce it. |
+
+## rail-knative
+
+Source revision `cd38dba3653e7fc85d3b2d3a074811b9a7216f25`. [Owner scope](../../../../rail-knative/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Knative workload lifecycle](../../../../rail-knative/SCOPE.md)
`capability.railiance.knative-rail` | Derived rail for activation, revisions, traffic, scaling and rollback.
U09, U13, U14 | D3 / A2 / C1 / R0
M3 estimate | Inherits Kubernetes common contract; verified readiness is not production approval. |
+
+## rail-kubernetes
+
+Source revision `35159e49c1340b7a0e30c49188975c8839d346f6`. [Owner scope](../../../../rail-kubernetes/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Generic Kubernetes workload lifecycle](../../../../rail-kubernetes/SCOPE.md)
`capability.railiance.kubernetes-rail` | Workload declaration, rollout, observe, promote and rollback surfaces.
U13, U14 | D3 / A2 / C1 / R0
M2 estimate | Compatibility extraction remains; not cluster or application-domain ownership. |
+
+## railiance-apps
+
+Source revision `706461b845086ee2df8ce9acae3dae7feebfffda`. [Owner scope](../../../../railiance-apps/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Workload release configuration and guards](../../../../railiance-apps/SCOPE.md)
`capability.railiance.workload-deployment-tooling` | Helm/manifests, exact image pins, application runbooks and rollout/rollback.
U12, U13 | D3 / A2 / C1 / R1
M3 estimate | Release settings depend on underlying platform and workload owners. |
+
+## railiance-bootstrap
+
+Source revision `ae00b2652737aaf18358431e66f59eeb7c01e16b`. [Owner scope](../../../../railiance-bootstrap/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Bootstrap sequencing contracts](../../../../railiance-bootstrap/SCOPE.md)
`capability.railiance.bootstrap-sequencing` | Bare-VM to estate sequence and handoff contract.
U10, U14 | D3 / A0 / C1 / R0
M1 estimate | End-to-end unattended rebuild is not established. |
+
+## railiance-cluster
+
+Source revision `12d1e881ff2086566712fbc591db293b38ea2bcf`. [Owner scope](../../../../railiance-cluster/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Kubernetes runtime and cluster controls](../../../../railiance-cluster/SCOPE.md)
`capability.railiance.cluster-bootstrap` | k3s, ingress, CNI, operators and kubeconfig/runtime checks.
U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Single-node runtime and workload recovery are distinct from bootstrap success. |
+
+## railiance-enablement
+
+Source revision `51a7c4cee68b48ed7a236e661b39c1d3cca92063`. [Owner scope](../../../../railiance-enablement/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Developer delivery and CI templates](../../../../railiance-enablement/SCOPE.md)
`capability.railiance.ci-enablement` | Reusable CI workflows, build and deployment patterns.
U12, U14 | D3 / A2 / C2 / R1
M2 estimate | Templates do not prove mandatory checks or runner isolation. |
+
+## railiance-fabric
+
+Source revision `96d19127125e85bdab7ff0ff79fc3ecf7d19045e`. [Owner scope](../../../../railiance-fabric/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Infrastructure ownership and dependency graph](../../../../railiance-fabric/SCOPE.md)
`capability.railiance.fabric-graph` | Schemas, validation, graph queries and State Hub exports.
U09, U13, U14 | D3 / A2 / C1 / R0
M2 estimate | Graph assertions need current owner evidence; not an enforcement registry. |
+
+## railiance-forge
+
+Source revision `a15fac8e938c11b041eb39386f05b63d46ae566a`. [Owner scope](../../../../railiance-forge/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Source forge, registries and runner substrate](../../../../railiance-forge/SCOPE.md)
`capability.railiance.forge-infrastructure` | Forgejo operation, package registries and runner lifecycle.
U12 | D3 / A2 / C1 / R0
M3 estimate | Runner workload authority and independent verification coverage remain open. |
+| [Independent introduced-history secret prevention](../../../../railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md)
`capability.security.forge-secret-prevention` | Pinned receive adapter, lifecycle template and fail-closed scan.
U07, U12 | D3 / A2 / C1 / R0
M3 estimate | Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate. |
+
+## railiance-infra
+
+Source revision `ef64e324b61e9aa9b9ed03aad7dd2101915057ca`. [Owner scope](../../../../railiance-infra/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Host convergence and security baseline](../../../../railiance-infra/SCOPE.md)
`capability.railiance.infra-provisioning` | Ansible inventory, firewall, SSH bootstrap and baseline verification.
U06, U10, U13 | D4 / A2 / C2 / R1
M3 estimate | Current hosts differ from the retained Hetzner provisioning path. |
+
+## railiance-master
+
+Source revision `865c3bed86b3992244b29d6f1d6b8ebbe8db78c7`. [Owner scope](../../../../railiance-master/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Platform security consumption architecture](../../../../railiance-master/SCOPE.md)
`capability.railiance.security-consumption-contracts` | Rail/rapp/reef boundaries, exposure and security consumption contracts.
U01, U13, U14 | D3 / A0 / C1 / R0
M2 estimate | Architecture declarations do not prove implementation or production admission. |
+
+## railiance-platform
+
+Source revision `d303c99e3be993ffa989bc9ba3d7b471903858ce`. [Owner scope](../../../../railiance-platform/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Secret custody and platform data services](../../../../railiance-platform/SCOPE.md)
`capability.railiance.platform-services` | OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts.
U04, U05, U07, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Package ownership is split to rapp repos; caches and object services are demand-led. |
+
+## railiance-telemetry
+
+Source revision `81d905971c38de9aaf11088ba605e112152d8268`. [Owner scope](../../../../railiance-telemetry/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Security-relevant telemetry contracts and adapters](../../../../railiance-telemetry/SCOPE.md)
`capability.observability.security-signals` | Signal contract, platform adapters, report exporter and absence/alert rules.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Reference receiver is not a second production plane; end-to-end delivery acceptance pending. |
+
+## rapp-openbao
+
+Source revision `13ab9144bbb1d88fe760362df91a83c8b34e4e66`. [Owner scope](../../../../rapp-openbao/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Managed OpenBao deployment package](../../../../rapp-openbao/README.md)
`capability.railiance.openbao-package` | Helm values, package deploy/status/smoke/rollback and custody boundary.
U04, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit. |
+
+## rapp-playwright
+
+Source revision `2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb`. [Owner scope](../../../../rapp-playwright/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Managed browser verification pilot](../../../../rapp-playwright/SCOPE.md)
`capability.railiance.browser-verification` | Bounded jobs, cancellation, artifacts, origin checks and restart receipts.
U02, U14 | D3 / A4 / C1 / R0
M2 estimate | Pilot deployed; human/agent authentication and per-caller self-service connectivity pending. |
+
+## rapp-policy-nexus
+
+Source revision `d3fee97d32ad47e3a7e3201a9c5b7209b4333fda`. [Owner scope](../../../../rapp-policy-nexus/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Policy publication runtime package](../../../../rapp-policy-nexus/SCOPE.md)
`capability.railiance.policy-publication-package` | Immutable image, non-root/read-only runtime and approved TLS exposure.
U01, U13 | D3 / A2 / C1 / R0
M3 estimate | No policy authoring or DNS/issuer administration. |
+
+## rapp-postgres
+
+Source revision `03744030c9258e920f6403a9ce184a26d7b75268`. [Owner scope](../../../../rapp-postgres/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Database isolation and recovery package](../../../../rapp-postgres/SCOPE.md)
`capability.railiance.postgres-isolation-recovery` | CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures.
U03, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Host-loss proof and consumer schemas stay with their owners. |
+
+## rapp-sbom-nexus
+
+Source revision `1566bcf69fc0757db5efc67f78b14af10d944c1b`. [Owner scope](../../../../rapp-sbom-nexus/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Private SBOM runtime and dynamic database delivery](../../../../rapp-sbom-nexus/SCOPE.md)
`capability.railiance.sbom-runtime-package` | Immutable deployment, private network policy, dynamic database leases and migration/rollback.
U07, U12, U13 | D3 / A2 / C1 / R0
M3 estimate | Product owns schema and ingestion; database and backup authority remain with platform owners. |
+
+## rapp-telemetry
+
+Source revision `17053dbc47f7c22efd67fd90d06d108d154835fa`. [Owner scope](../../../../rapp-telemetry/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Private monitoring package](../../../../rapp-telemetry/SCOPE.md)
`capability.railiance.telemetry-package` | Prometheus, Alertmanager and Grafana package with isolated restore evidence.
U08, U09, U10 | D3 / A2 / C1 / R0
M2 estimate | Private installation only; recurring recovery capture and audited confirmation pending. |
+
+## rapp-tenant-engine
+
+Source revision `c160be23577ab4d99ee2cd008deb455b07f0597d`. [Owner scope](../../../../rapp-tenant-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Tenant Engine runtime package](../../../../rapp-tenant-engine/SCOPE.md)
`capability.railiance.tenant-engine-package` | Package declaration, smoke and rollback.
U03, U13 | D3 / A2 / C1 / R0
M2 estimate | No tenant-domain ownership or credential values. |
+
+## rapp-user-engine
+
+Source revision `15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c`. [Owner scope](../../../../rapp-user-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [User Engine runtime package](../../../../rapp-user-engine/SCOPE.md)
`capability.railiance.user-engine-package` | Pinned deployment, dedicated CNPG, ExternalSecret references and rollback.
U02, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Domain, identity, PDP and custody authority are separate. |
+
+## reef-railiance
+
+Source revision `ffb9e272ce1489cc37cc6388873558d8ba56c239`. [Owner scope](../../../../reef-railiance/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Substrate topology and bindings](../../../../reef-railiance/SCOPE.md)
`capability.railiance.substrate-bindings` | Grouped home-reef identity, topology and placement declarations.
U13, U14 | D3 / A0 / C1 / R0
M2 estimate | Declarations are not automatic placement or authorization. |
+
+## rein-aharness
+
+Source revision `398949a3d34b6c9faae0fa1d0ff0aa039565aa42`. [Owner scope](../../../../rein-aharness/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Scheduled agent intake and harness routing](../../../../rein-aharness/SCOPE.md)
`capability.execution.scheduled-agent-rein` | Activity Core lease claim/heartbeat and Glas profile execution.
U09, U11 | D3 / A2 / C1 / R0
M3 estimate | Legacy paths are time-gated; task success is not privileged authority. |
+
+## rein-openweights
+
+Source revision `e1fccb39b738a5381a9de6e1d799f124797798ce`. [Owner scope](../../../../rein-openweights/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Bounded open-weight agent execution](../../../../rein-openweights/SCOPE.md)
`capability.execution.openweight-rein` | Tool loop, path guards, turn/budget limits and verified-commit result.
U11 | D3 / A2 / C1 / R0
M2 estimate | Provider credential acquisition and runtime authority need separate custody controls. |
+
+## repo-manager
+
+Source revision `7677b00f69cd6362ac16a1021dc180ec6df4ebfa`. [Owner scope](../../../../repo-manager/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Repository metadata and staged-secret prevention](../../../../repo-manager/SCOPE.md)
`capability.security.repository-secret-prevention` | Repository observation plus pinned staged-blob scanner and hook integration.
U07, U12 | D3 / A2 / C1 / R0
M3 estimate | Local hooks are bypassable; coverage is exact-checkout scoped. |
+
+## resource-control
+
+Source revision `3604d468f86ede7d320f4d22dd4aea775306b53f`. [Owner scope](../../../../resource-control/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Capacity and recovery resource planning](../../../../resource-control/SCOPE.md)
`capability.resources.security-capacity` | Provider-neutral inventory, procurement evidence and optimization reports.
U09, U10, U13 | D3 / A2 / C1 / R0
M2 estimate | No payment authority or irreversible procurement; metrics do not prove usable runtime capacity. |
+
+## reuse-surface
+
+Source revision `a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1`. [Owner scope](../../../../reuse-surface/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Capability registry and federation](../../../../reuse-surface/docs/RegistryFederation.md)
`capability.registry.register` | Owner Markdown entries, indexes, federation hub and planning queries.
U01, U09, U14 | D3 / A3 / C2 / R3
M3 estimate | Discovery is not readiness; empty and stale entries need evidence-led maintenance. |
+| [Capability registry validation](../../../../reuse-surface/docs/RegistryFederation.md)
`capability.registry.validate` | Schema, index consistency and relation checks.
U01, U14 | D4 / A3 / C3 / R3
M3 estimate | Schema validity alone proves neither capability behavior nor hosted freshness. |
+
+## risk-nexus
+
+Source revision `b877231d66e1289dc32fda07ed2c61dcb3e970dc`. [Owner scope](../../../../risk-nexus/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Security risk and exception review register](../../../../risk-nexus/SCOPE.md)
`capability.security.risk-register` | Markdown findings and Python review, verification and due-work reports.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | Judgment remains human or agent; no live EUR risk gate or autonomous response. |
+
+## role-engine
+
+Source revision `d231241dbfeeb541b34243f4022883aa6417a1eb`. [Owner scope](../../../../role-engine/README.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Organizational role definitions](../../../../role-engine/README.md)
`capability.organization.role-catalog` | Versioned documentation catalog.
U01, U11 | D3 / A0 / C1 / R0
M1 estimate | Not IAM roles, assignments or runtime authorization. |
+
+## runbook-tutorials
+
+Source revision `df97fadf5decfcdb5c3c6ab90211226335ffdf8e`. [Owner scope](../../../../runbook-tutorials/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Guided administrative runbooks](../../../../runbook-tutorials/SCOPE.md)
`capability.infotech.runbook-tutorials` | Pack schema, loader, local UI/CLI, gates, verification and rollback evidence.
U05, U10, U14 | D3 / A2 / C1 / R0
M2 estimate | Owner supplies procedures; UI progress is not runtime approval. |
+
+## sand-boxer
+
+Source revision `b06d94f02b037764ff41c73c8ab43f4c8f5d309d`. [Owner scope](../../../../sand-boxer/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Sandbox establishment and lifecycle](../../../../sand-boxer/SCOPE.md)
`capability.execution.sandbox-provision` | Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.
U11, U14 | D5 / A5 / C5 / R0
M2 estimate | Backend-specific guarantees; a created sandbox alone proves no credential isolation. |
+
+## sbom-nexus
+
+Source revision `07e998d9abfd4e4fcc74db9e292ed22c6f407522`. [Owner scope](../../../../sbom-nexus/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Dependency provenance and SBOM evidence](../../../../sbom-nexus/README.md)
`capability.infotech.sbom-management` | Controlled archive ingest, immutable snapshots, freshness and license review.
U12, U09 | D3 / A4 / C1 / R0
M3 estimate | SBOM and license evidence do not prove vulnerability exploitability or artifact trust. |
+
+## secrets-engine
+
+Source revision `d379a3dfba73c42cd97f4d9cba3a02d705155e4d`. [Owner scope](../../../../secrets-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Cataloged credential lifecycle](../../../../secrets-engine/SCOPE.md)
`capability.security.credential-lifecycle` | CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke.
U04, U05, U07 | D3 / A2 / C1 / R0
M2 estimate | Production protected execution and independently anchored PDP authentication remain incomplete. |
+
+## security-canon
+
+Source revision `1664a6def20be2759a1e575024563efd27c9f36f`. [Owner scope](../../../../security-canon/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Security practice and authority vocabulary](../../../../security-canon/SCOPE.md)
`capability.security.practice-canon` | Versioned SEC-DSM and Mode of Authority documents.
U01, U07, U10, U14 | D3 / A0 / C1 / R0
M2 estimate | Normative practice; no runtime control or certification. |
+
+## state-hub
+
+Source revision `8ca9201f6a1445c66fe1d1b0ba0c8d044c131647`. [Owner scope](../../../../state-hub/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Cross-repository work tracking](../../../../state-hub/README.md)
`capability.statehub.workstream-coordinate` | File-derived workplans, tasks, dependencies, decisions and coordination views.
U09 | D4 / A4 / C3 / R2
M3 estimate | Read/cache/index of owner work; not runtime approval authority. |
+| [Progress and work evidence indexing](../../../../state-hub/README.md)
`capability.statehub.progress-log` | REST progress and task evidence references.
U08, U09 | D4 / A4 / C3 / R3
M3 estimate | Not independent security event custody. |
+
+## tenant-engine
+
+Source revision `1dabbcf47d87d27d118dcf3147d9e3588a807e0c`. [Owner scope](../../../../tenant-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Tenant lifecycle and guardrail facts](../../../../tenant-engine/SCOPE.md)
`capability.identity.tenant-facts` | Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store.
U03, U04 | D3 / A4 / C1 / R0
M3 estimate | Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate. |
+
+## the-custodian
+
+Source revision `3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e`. [Owner scope](../../../../the-custodian/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Generic agent runtime and repository tooling](../../../../the-custodian/runtime/README.md)
`capability.agents.custodian-runtime-tooling` | Agent runtime modules and repository classification tooling.
U09, U11, U14 | D2 / A2 / C1 / R0
M2 estimate | Only generic tooling is reusable; confidential canon and session memory are excluded. |
+
+## user-engine
+
+Source revision `85a419d6c5d0b4434d3ca7f33bde3092f5838f79`. [Owner scope](../../../../user-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [User lifecycle and account journeys](../../../../user-engine/SCOPE.md)
`capability.identity.user-engine` | Accounts, identity links, membership, MFA and recovery portal, advisory catalog.
U02, U03, U10 | D4 / A4 / C2 / R0
M3 estimate | Application readback is advisory; applications must enforce their own authorization. |
+
+## whitehat-security
+
+Source revision `5587a8f6ac4b129527db819bc72832051c7fcc3b`. [Owner scope](../../../../whitehat-security/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Authorized adversarial evidence harness](../../../../whitehat-security/SCOPE.md)
`capability.security.adversarial-evidence` | Offline ASM and tenancy calibrations and engagement admission.
U03, U08, U10, U14 | D3 / A2 / C1 / R0
M2 estimate | Live probes require a complete engagement; no blanket target authorization. |
+
+## zone-engine
+
+Source revision `b5a6f88a82b125ebc82c0484bec1ea541e4f95d0`. [Owner scope](../../../../zone-engine/SCOPE.md).
+
+| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation |
+| --- | --- | --- | --- |
+| [Zone membership reference conformance](../../../../zone-engine/SCOPE.md)
`capability.security.zone-reference` | Offline resolution, exception and lineage checks.
U01, U03, U14 | D3 / A2 / C1 / R0
M2 estimate | No live zone engine, PDP or protected side effects. |
+
+## Inspected nonproviders
+
+| Repo | Disposition |
+| --- | --- |
+| [rapp-secrets-engine](../../../../rapp-secrets-engine/README.md) | Retired compatibility stub. Secrets Engine is a CLI/workflow capability; no independent workload is available. No capability was invented to populate this tombstone. |
+| [rapp-forgejo](../../../../rapp-forgejo/README.md) | Placeholder with no family declaration. Current Forgejo deployment responsibility remains in the existing Forge/Apps owners. The package family check reports this missing declaration. |
+
+The existing reuse-surface `capability.infotech.headless-browser` remains an additional discovery card for selecting browser tooling. The reviewed `rapp-playwright` capability describes the concrete managed package/provider. This review preserves the discovery card and does not treat the two IDs as two independent browser implementations.
diff --git a/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json b/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json
new file mode 100644
index 00000000..6dd61586
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json
@@ -0,0 +1,10 @@
+{
+ "initial_commit": "blocked by generic-api-key on inventory JSON",
+ "diagnosis": "All flagged fields were SHA-256 hashes of source files; each value independently recomputed and matched before changing serialization. No credential contents were collected in these fields.",
+ "remediation": "Qualify source digest strings with sha256: rather than placing bare hex immediately after API/credential-like filename keys. No scanner exception or rule change.",
+ "affected_artifacts": [
+ "inventory.json",
+ "full-inventory.json"
+ ],
+ "verification": "Normal pre-commit scanner must pass on the revised evidence."
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/completion-audit.json b/docs/assessments/netkingdom-2026-10-14/completion-audit.json
new file mode 100644
index 00000000..aa029d0f
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/completion-audit.json
@@ -0,0 +1,42 @@
+{
+ "objective_achieved": false,
+ "requirements": [
+ {
+ "requirement": "All relevant repository and capability inventory",
+ "status": "complete",
+ "evidence": "full-inventory.json: 60 providers, 70 capabilities; two nonproviders recorded separately"
+ },
+ {
+ "requirement": "Supported use cases",
+ "status": "complete",
+ "evidence": "14 use cases in review, owner entries and inventory"
+ },
+ {
+ "requirement": "SWOT",
+ "status": "complete",
+ "evidence": "Architecture review SWOT table"
+ },
+ {
+ "requirement": "Maturity estimate",
+ "status": "complete",
+ "evidence": "Operational M1\u2013M5 estimates and separate D/A/C/R per capability with limits"
+ },
+ {
+ "requirement": "Ranked improvements for architecture efficiency and framework reuse",
+ "status": "complete",
+ "evidence": "12 ranked recommendations with owners, dependencies, effort and acceptance measures"
+ },
+ {
+ "requirement": "Owner capability establishment and local reuse-surface discovery",
+ "status": "complete",
+ "evidence": "70/70 local schema, relations, index parity and native federation checks; normal CLI discovery; 60 published source registries"
+ },
+ {
+ "requirement": "Hosted reuse-surface establishment",
+ "status": "incomplete",
+ "evidence": "32/70 hosted; 38 registrations pending caller access; seven also require private-source admission"
+ }
+ ],
+ "goal_status": "active",
+ "remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity."
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/federated-local.yaml b/docs/assessments/netkingdom-2026-10-14/federated-local.yaml
new file mode 100644
index 00000000..c56445d5
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/federated-local.yaml
@@ -0,0 +1,1502 @@
+version: 1
+updated: '2026-10-14'
+domain: infotech
+collision_policy: warn
+sources:
+- repo: access-engine
+ count: 1
+ index: /home/worsch/access-engine/registry/indexes/capabilities.yaml
+- repo: activity-core
+ count: 1
+ index: /home/worsch/activity-core/registry/indexes/capabilities.yaml
+- repo: agentic-resources
+ count: 1
+ index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml
+- repo: approval-engine
+ count: 1
+ index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml
+- repo: audit-core
+ count: 1
+ index: /home/worsch/audit-core/registry/indexes/capabilities.yaml
+- repo: coordination-engine
+ count: 1
+ index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml
+- repo: emergent-security
+ count: 1
+ index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml
+- repo: fin-hub
+ count: 1
+ index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml
+- repo: gate-house
+ count: 1
+ index: /home/worsch/gate-house/registry/indexes/capabilities.yaml
+- repo: glas-harness
+ count: 1
+ index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml
+- repo: info-tech-canon
+ count: 1
+ index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml
+- repo: informed-decision
+ count: 1
+ index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml
+- repo: issue-core
+ count: 1
+ index: /home/worsch/issue-core/registry/indexes/capabilities.yaml
+- repo: key-cape
+ count: 1
+ index: /home/worsch/key-cape/registry/indexes/capabilities.yaml
+- repo: kings-guard
+ count: 1
+ index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml
+- repo: maturity-engine
+ count: 1
+ index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml
+- repo: net-kingdom
+ count: 6
+ index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- repo: ops-bridge
+ count: 1
+ index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml
+- repo: ops-mason
+ count: 1
+ index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml
+- repo: ops-warden
+ count: 3
+ index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml
+- repo: policy-nexus
+ count: 1
+ index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml
+- repo: rail-kubernetes
+ count: 1
+ index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml
+- repo: railiance-apps
+ count: 1
+ index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml
+- repo: railiance-bootstrap
+ count: 1
+ index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml
+- repo: railiance-cluster
+ count: 1
+ index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml
+- repo: railiance-enablement
+ count: 1
+ index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml
+- repo: railiance-fabric
+ count: 1
+ index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml
+- repo: railiance-forge
+ count: 2
+ index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml
+- repo: railiance-infra
+ count: 1
+ index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml
+- repo: railiance-master
+ count: 1
+ index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml
+- repo: railiance-platform
+ count: 1
+ index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml
+- repo: railiance-telemetry
+ count: 1
+ index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-openbao
+ count: 1
+ index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml
+- repo: rapp-playwright
+ count: 1
+ index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml
+- repo: rapp-policy-nexus
+ count: 1
+ index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml
+- repo: rapp-postgres
+ count: 1
+ index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml
+- repo: rapp-telemetry
+ count: 1
+ index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-tenant-engine
+ count: 1
+ index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml
+- repo: rapp-user-engine
+ count: 1
+ index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml
+- repo: reef-railiance
+ count: 1
+ index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml
+- repo: rein-aharness
+ count: 1
+ index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml
+- repo: rein-openweights
+ count: 1
+ index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml
+- repo: repo-manager
+ count: 1
+ index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml
+- repo: resource-control
+ count: 1
+ index: /home/worsch/resource-control/registry/indexes/capabilities.yaml
+- repo: reuse-surface
+ count: 3
+ index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml
+- repo: risk-nexus
+ count: 1
+ index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml
+- repo: role-engine
+ count: 1
+ index: /home/worsch/role-engine/registry/indexes/capabilities.yaml
+- repo: runbook-tutorials
+ count: 1
+ index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml
+- repo: sand-boxer
+ count: 1
+ index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml
+- repo: sbom-nexus
+ count: 1
+ index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml
+- repo: secrets-engine
+ count: 1
+ index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml
+- repo: security-canon
+ count: 1
+ index: /home/worsch/security-canon/registry/indexes/capabilities.yaml
+- repo: state-hub
+ count: 2
+ index: /home/worsch/state-hub/registry/indexes/capabilities.yaml
+- repo: tenant-engine
+ count: 1
+ index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml
+- repo: the-custodian
+ count: 1
+ index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml
+- repo: user-engine
+ count: 1
+ index: /home/worsch/user-engine/registry/indexes/capabilities.yaml
+- repo: whitehat-security
+ count: 1
+ index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml
+- repo: zone-engine
+ count: 1
+ index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml
+- repo: rail-knative
+ count: 1
+ index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml
+- repo: rapp-sbom-nexus
+ count: 1
+ index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml
+capabilities:
+- id: capability.activity.event-coordinate
+ name: Durable automation and bounded operations
+ summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime
+ sinks.
+ domain: helix_forge
+ status: draft
+ owner: activity-core
+ tags:
+ - activity
+ - coordination
+ - automation
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.activity.event-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: activity-core
+ source_index: /home/worsch/activity-core/registry/indexes/capabilities.yaml
+- id: capability.agents.custodian-runtime-tooling
+ name: Generic agent runtime and repository tooling
+ summary: Agent runtime modules and repository classification tooling.
+ domain: custodian
+ status: draft
+ owner: the-custodian
+ tags:
+ - agents
+ - runtime
+ - classification
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.custodian-runtime-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: the-custodian
+ source_index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml
+- id: capability.agents.performance-learning
+ name: Agent performance learning
+ summary: Capture sessions, curate patterns, distribute lessons and measure outcomes.
+ domain: infotech
+ status: draft
+ owner: agentic-resources
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.performance-learning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: agentic-resources
+ source_index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml
+- id: capability.audit.event-retain
+ name: Independent audit custody
+ summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.
+ domain: infotech
+ status: draft
+ owner: audit-core
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C3 / R2
+ path: registry/capabilities/capability.audit.event-retain.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: audit-core
+ source_index: /home/worsch/audit-core/registry/indexes/capabilities.yaml
+- id: capability.authorization.policy-evaluate
+ name: Policy evaluation and decision evidence
+ summary: Check, batch, list-allowed, explain, binding, lifetime and decision records.
+ domain: helix_forge
+ status: draft
+ owner: access-engine
+ tags:
+ - authorization
+ - policy
+ - flex-auth
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.authorization.policy-evaluate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: access-engine
+ source_index: /home/worsch/access-engine/registry/indexes/capabilities.yaml
+- id: capability.coordination.cross-owner-work
+ name: Cross-owner coordination lifecycle
+ summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime.
+ domain: infotech
+ status: draft
+ owner: coordination-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.coordination.cross-owner-work.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: coordination-engine
+ source_index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml
+- id: capability.execution.openweight-rein
+ name: Bounded open-weight agent execution
+ summary: Tool loop, path guards, turn/budget limits and verified-commit result.
+ domain: infotech
+ status: draft
+ owner: rein-openweights
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.openweight-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-openweights
+ source_index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml
+- id: capability.execution.profile-harness
+ name: Profile-bound agent execution lifecycle
+ summary: Typed execution requests, profile/rein resolution, sandbox and cleanup
+ orchestration.
+ domain: infotech
+ status: draft
+ owner: glas-harness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.execution.profile-harness.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: glas-harness
+ source_index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml
+- id: capability.execution.sandbox-provision
+ name: Sandbox establishment and lifecycle
+ summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.
+ domain: infotech
+ status: draft
+ owner: sand-boxer
+ tags:
+ - sandbox
+ - isolation
+ - provision
+ - e2e
+ - agentic
+ - execution
+ - profile
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D5 / A5 / C5 / R0
+ path: registry/capabilities/execution.sandbox-provision.md
+ consumption_modes:
+ - containerized service
+ - CLI
+ source_repo: sand-boxer
+ source_index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml
+- id: capability.execution.scheduled-agent-rein
+ name: Scheduled agent intake and harness routing
+ summary: Activity Core lease claim/heartbeat and Glas profile execution.
+ domain: infotech
+ status: draft
+ owner: rein-aharness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.scheduled-agent-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-aharness
+ source_index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml
+- id: capability.finance.security-budget-evidence
+ name: Budget and cost evidence for security operations
+ summary: Budget, commitment, spend attribution and planning-evidence consumption.
+ domain: infotech
+ status: draft
+ owner: fin-hub
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.finance.security-budget-evidence.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: fin-hub
+ source_index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml
+- id: capability.iam.key-cape
+ name: OIDC identity and assurance
+ summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.
+ domain: infotech
+ status: draft
+ owner: key-cape
+ tags:
+ - iam
+ - oidc
+ - netkingdom
+ - security
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.iam.key-cape.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: key-cape
+ source_index: /home/worsch/key-cape/registry/indexes/capabilities.yaml
+- id: capability.identity.tenant-facts
+ name: Tenant lifecycle and guardrail facts
+ summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store.
+ domain: infotech
+ status: draft
+ owner: tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.identity.tenant-facts.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: tenant-engine
+ source_index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.identity.user-engine
+ name: User lifecycle and account journeys
+ summary: Accounts, identity links, membership, MFA and recovery portal, advisory
+ catalog.
+ domain: communication
+ status: draft
+ owner: user-engine
+ tags:
+ - identity
+ - user-management
+ - multi-tenant
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R0
+ path: registry/capabilities/capability.identity.user-engine.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: user-engine
+ source_index: /home/worsch/user-engine/registry/indexes/capabilities.yaml
+- id: capability.infotech.canon-service
+ name: Shared semantic contracts and validation
+ summary: Markdown canon with library, CLI and read-only API.
+ domain: infotech
+ status: draft
+ owner: info-tech-canon
+ tags:
+ - canon
+ - infospace
+ - service
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.canon-service.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: info-tech-canon
+ source_index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml
+- id: capability.infotech.headless-browser
+ name: Headless Browser Automation
+ summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright
+ 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container;
+ managed Railiance admission is pending. Download the Python 3.10+ standalone client
+ from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py
+ and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then
+ `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01`
+ with a fresh output directory. This endpoint was verified locally on 2026-10-13
+ and is ephemeral; it installs no browser for the caller. If unreachable, follow
+ the local container setup in the capability card or adapt its A2 source examples;
+ this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.'
+ vector: D3 / A5 / C2 / R2
+ domain: infotech
+ status: reviewed
+ owner: reuse-surface
+ path: registry/capabilities/capability.infotech.headless-browser.md
+ tags:
+ - headless
+ - browser
+ - automation
+ - playwright
+ - chromium
+ - testing
+ - screenshots
+ - extraction
+ - firefox
+ - webkit
+ - selenium
+ - puppeteer
+ consumption_modes:
+ - informational
+ - source adaptation
+ - JavaScript library
+ - Python library
+ - cli
+ - service API
+ - container
+ source_repo: reuse-surface
+ source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.infotech.issue-tracking
+ name: External issue tracker connector
+ summary: CLI and Python adapters for external issue systems.
+ domain: infotech
+ status: draft
+ owner: issue-core
+ tags:
+ - issue-tracking
+ - connector
+ - work-record
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.infotech.issue-tracking.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: issue-core
+ source_index: /home/worsch/issue-core/registry/indexes/capabilities.yaml
+- id: capability.infotech.runbook-tutorials
+ name: Guided administrative runbooks
+ summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence.
+ domain: infotech
+ status: draft
+ owner: runbook-tutorials
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.infotech.runbook-tutorials.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: runbook-tutorials
+ source_index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml
+- id: capability.infotech.sbom-management
+ name: Dependency provenance and SBOM evidence
+ summary: Controlled archive ingest, immutable snapshots, freshness and license review.
+ domain: infotech
+ status: draft
+ owner: sbom-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.sbom-management.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: sbom-nexus
+ source_index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml
+- id: capability.observability.security-signals
+ name: Security-relevant telemetry contracts and adapters
+ summary: Signal contract, platform adapters, report exporter and absence/alert rules.
+ domain: infotech
+ status: draft
+ owner: railiance-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.observability.security-signals.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-telemetry
+ source_index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml
+- id: capability.ops.tunnel-bridge
+ name: SSH tunnel lifecycle
+ summary: Named tunnels, reconnect, health and TTL-aware cert_command.
+ domain: infotech
+ status: draft
+ owner: ops-bridge
+ tags:
+ - ssh
+ - tunnel
+ - ops
+ - connectivity
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.ops.tunnel-bridge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-bridge
+ source_index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml
+- id: capability.organization.role-catalog
+ name: Organizational role definitions
+ summary: Versioned documentation catalog.
+ domain: infotech
+ status: draft
+ owner: role-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.organization.role-catalog.md
+ consumption_modes:
+ - informational
+ source_repo: role-engine
+ source_index: /home/worsch/role-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.bootstrap-sequencing
+ name: Bootstrap sequencing contracts
+ summary: Bare-VM to estate sequence and handoff contract.
+ domain: infotech
+ status: draft
+ owner: railiance-bootstrap
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.bootstrap-sequencing.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-bootstrap
+ source_index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml
+- id: capability.railiance.browser-verification
+ name: Managed browser verification pilot
+ summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts.
+ domain: infotech
+ status: draft
+ owner: rapp-playwright
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.railiance.browser-verification.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: rapp-playwright
+ source_index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml
+- id: capability.railiance.ci-enablement
+ name: Developer delivery and CI templates
+ summary: Reusable CI workflows, build and deployment patterns.
+ domain: financials
+ status: draft
+ owner: railiance-enablement
+ tags:
+ - railiance
+ - ci-cd
+ - developer-enablement
+ - forgejo
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.ci-enablement.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-enablement
+ source_index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml
+- id: capability.railiance.cluster-bootstrap
+ name: Kubernetes runtime and cluster controls
+ summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks.
+ domain: financials
+ status: draft
+ owner: railiance-cluster
+ tags:
+ - railiance
+ - kubernetes
+ - iac
+ - bootstrap
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.cluster-bootstrap.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-cluster
+ source_index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml
+- id: capability.railiance.fabric-graph
+ name: Infrastructure ownership and dependency graph
+ summary: Schemas, validation, graph queries and State Hub exports.
+ domain: financials
+ status: draft
+ owner: railiance-fabric
+ tags:
+ - railiance
+ - graph
+ - ownership
+ - discovery
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.fabric-graph.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-fabric
+ source_index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml
+- id: capability.railiance.forge-infrastructure
+ name: Source forge, registries and runner substrate
+ summary: Forgejo operation, package registries and runner lifecycle.
+ domain: financials
+ status: draft
+ owner: railiance-forge
+ tags:
+ - railiance
+ - forgejo
+ - forge
+ - ci-runner
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.forge-infrastructure.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.railiance.infra-provisioning
+ name: Host convergence and security baseline
+ summary: Ansible inventory, firewall, SSH bootstrap and baseline verification.
+ domain: financials
+ status: draft
+ owner: railiance-infra
+ tags:
+ - railiance
+ - terraform
+ - ansible
+ - infrastructure
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.infra-provisioning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-infra
+ source_index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml
+- id: capability.railiance.knative-rail
+ name: Knative workload lifecycle
+ summary: Derived rail for activation, revisions, traffic, scaling and rollback.
+ domain: infotech
+ status: draft
+ owner: rail-knative
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.knative-rail.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rail-knative
+ source_index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml
+- id: capability.railiance.kubernetes-rail
+ name: Generic Kubernetes workload lifecycle
+ summary: Workload declaration, rollout, observe, promote and rollback surfaces.
+ domain: infotech
+ status: draft
+ owner: rail-kubernetes
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.kubernetes-rail.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rail-kubernetes
+ source_index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml
+- id: capability.railiance.openbao-package
+ name: Managed OpenBao deployment package
+ summary: Helm values, package deploy/status/smoke/rollback and custody boundary.
+ domain: infotech
+ status: draft
+ owner: rapp-openbao
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.openbao-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-openbao
+ source_index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml
+- id: capability.railiance.platform-services
+ name: Secret custody and platform data services
+ summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup
+ contracts.
+ domain: financials
+ status: draft
+ owner: railiance-platform
+ tags:
+ - railiance
+ - platform
+ - secrets
+ - postgres
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.platform-services.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-platform
+ source_index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml
+- id: capability.railiance.policy-publication-package
+ name: Policy publication runtime package
+ summary: Immutable image, non-root/read-only runtime and approved TLS exposure.
+ domain: infotech
+ status: draft
+ owner: rapp-policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.policy-publication-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-policy-nexus
+ source_index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.railiance.postgres-isolation-recovery
+ name: Database isolation and recovery package
+ summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore
+ procedures.
+ domain: infotech
+ status: draft
+ owner: rapp-postgres
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-postgres
+ source_index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml
+- id: capability.railiance.sbom-runtime-package
+ name: Private SBOM runtime and dynamic database delivery
+ summary: Immutable deployment, private network policy, dynamic database leases and
+ migration/rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-sbom-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.sbom-runtime-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-sbom-nexus
+ source_index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml
+- id: capability.railiance.security-consumption-contracts
+ name: Platform security consumption architecture
+ summary: Rail/rapp/reef boundaries, exposure and security consumption contracts.
+ domain: infotech
+ status: draft
+ owner: railiance-master
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.security-consumption-contracts.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-master
+ source_index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml
+- id: capability.railiance.substrate-bindings
+ name: Substrate topology and bindings
+ summary: Grouped home-reef identity, topology and placement declarations.
+ domain: infotech
+ status: draft
+ owner: reef-railiance
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.substrate-bindings.md
+ consumption_modes:
+ - informational
+ source_repo: reef-railiance
+ source_index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml
+- id: capability.railiance.telemetry-package
+ name: Private monitoring package
+ summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence.
+ domain: infotech
+ status: draft
+ owner: rapp-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.telemetry-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-telemetry
+ source_index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml
+- id: capability.railiance.tenant-engine-package
+ name: Tenant Engine runtime package
+ summary: Package declaration, smoke and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.tenant-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-tenant-engine
+ source_index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.user-engine-package
+ name: User Engine runtime package
+ summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-user-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.user-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-user-engine
+ source_index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.workload-deployment-tooling
+ name: Workload release configuration and guards
+ summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback.
+ domain: financials
+ status: draft
+ owner: railiance-apps
+ tags:
+ - railiance
+ - kubernetes
+ - helm
+ - deployment
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.railiance.workload-deployment-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-apps
+ source_index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml
+- id: capability.registry.register
+ name: Capability registry and federation
+ summary: Owner Markdown entries, indexes, federation hub and planning queries.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - governance
+ - meta
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C2 / R3
+ path: registry/capabilities/capability.registry.register.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.registry.validate
+ name: Capability registry validation
+ summary: Schema, index consistency and relation checks.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - validation
+ - cli
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R3
+ path: registry/capabilities/capability.registry.validate.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.resources.security-capacity
+ name: Capacity and recovery resource planning
+ summary: Provider-neutral inventory, procurement evidence and optimization reports.
+ domain: infotech
+ status: draft
+ owner: resource-control
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.resources.security-capacity.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: resource-control
+ source_index: /home/worsch/resource-control/registry/indexes/capabilities.yaml
+- id: capability.security.access-routing
+ name: Credential routing and contained access
+ summary: warden route and access catalog; exact lane conduit and secret-exec routing.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.security.access-routing.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.adversarial-evidence
+ name: Authorized adversarial evidence harness
+ summary: Offline ASM and tenancy calibrations and engagement admission.
+ domain: infotech
+ status: draft
+ owner: whitehat-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.adversarial-evidence.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: whitehat-security
+ source_index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml
+- id: capability.security.agent-knowledge
+ name: Verified security orientation for agents
+ summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed
+ exports.
+ domain: infotech
+ status: draft
+ owner: emergent-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.agent-knowledge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: emergent-security
+ source_index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml
+- id: capability.security.approval-lifecycle
+ name: Bound approval lifecycle
+ summary: Authenticated issue, claim, revoke, supersede and atomic consume API with
+ outbox.
+ domain: infotech
+ status: draft
+ owner: approval-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.approval-lifecycle.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: approval-engine
+ source_index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml
+- id: capability.security.bootstrap-recovery
+ name: Guarded bootstrap and recovery preparation
+ summary: Local identity, bootstrap console, encrypted custody handoff and caller
+ tools.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.bootstrap-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-contracts
+ name: Security case types and instance validation
+ summary: Versioned types, cases and schema validation.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-contracts.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-follow-through
+ name: Security case operational follow-through
+ summary: KnownSecurityCase route, plan and operational receipts.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-follow-through.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-warden
+ source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.credential-lifecycle
+ name: Cataloged credential lifecycle
+ summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification,
+ delivery and revoke.
+ domain: infotech
+ status: draft
+ owner: secrets-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.credential-lifecycle.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: secrets-engine
+ source_index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml
+- id: capability.security.doctrine-review
+ name: Security doctrine and architecture review
+ summary: Layer rules, authority context, ASM criteria and interpretations.
+ domain: infotech
+ status: draft
+ owner: gate-house
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.doctrine-review.md
+ consumption_modes:
+ - informational
+ source_repo: gate-house
+ source_index: /home/worsch/gate-house/registry/indexes/capabilities.yaml
+- id: capability.security.emission-profile
+ name: Security emission cadence validation
+ summary: Security profile over generic emission contracts and validator.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.emission-profile.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.forge-secret-prevention
+ name: Independent introduced-history secret prevention
+ summary: Pinned receive adapter, lifecycle template and fail-closed scan.
+ domain: infotech
+ status: draft
+ owner: railiance-forge
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.forge-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.security.human-decision-workspace
+ name: Human security decision presentation and disposition
+ summary: Headless lifecycle and browser workspace with exact native approval references.
+ domain: infotech
+ status: draft
+ owner: informed-decision
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.human-decision-workspace.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: informed-decision
+ source_index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml
+- id: capability.security.iam-tooling-suite
+ name: NetKingdom security architecture and conformance tooling
+ summary: Versioned IAM, layer, tenancy and credential contracts plus validators.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - iam
+ - kubernetes
+ - conformance
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.security.iam-tooling-suite.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.maturity-claims
+ name: Evidence-based maturity claims and gap register
+ summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and
+ stance inventory.
+ domain: infotech
+ status: draft
+ owner: maturity-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.maturity-claims.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: maturity-engine
+ source_index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml
+- id: capability.security.policy-publication
+ name: Policy publication with source provenance
+ summary: Generated immutable publication, source currency and stable policy URLs.
+ domain: infotech
+ status: draft
+ owner: policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.policy-publication.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: policy-nexus
+ source_index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.posture-assessment
+ name: Security posture assessment and response proposals
+ summary: Normalized observation evaluator, cadence checks and secret-use snapshot
+ adapter.
+ domain: infotech
+ status: draft
+ owner: kings-guard
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-assessment.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: kings-guard
+ source_index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml
+- id: capability.security.posture-feedback
+ name: Deterministic posture feedback
+ summary: CLI evaluates evidence age and posture into owner-routed findings.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-feedback.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.practice-canon
+ name: Security practice and authority vocabulary
+ summary: Versioned SEC-DSM and Mode of Authority documents.
+ domain: infotech
+ status: draft
+ owner: security-canon
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.practice-canon.md
+ consumption_modes:
+ - informational
+ source_repo: security-canon
+ source_index: /home/worsch/security-canon/registry/indexes/capabilities.yaml
+- id: capability.security.repository-secret-prevention
+ name: Repository metadata and staged-secret prevention
+ summary: Repository observation plus pinned staged-blob scanner and hook integration.
+ domain: infotech
+ status: draft
+ owner: repo-manager
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.repository-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: repo-manager
+ source_index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml
+- id: capability.security.risk-register
+ name: Security risk and exception review register
+ summary: Markdown findings and Python review, verification and due-work reports.
+ domain: infotech
+ status: draft
+ owner: risk-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.risk-register.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: risk-nexus
+ source_index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.scenario-compose
+ name: Deterministic security scenario composition
+ summary: CLI selects pinned providers and orders trust transitions.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.scenario-compose.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.ssh-certificate-issuance
+ name: Decision-bound SSH certificates
+ summary: warden sign with local and OpenBao backends and adm/agt/atm actors.
+ domain: helix_forge
+ status: draft
+ owner: ops-warden
+ tags:
+ - ssh
+ - certificate
+ - ca
+ - ops-warden
+ - openbao
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R2
+ path: registry/capabilities/capability.security.ssh-certificate-issuance.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.structure-construction
+ name: Reviewed security structure construction
+ summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply.
+ domain: infotech
+ status: draft
+ owner: ops-mason
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.structure-construction.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-mason
+ source_index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml
+- id: capability.security.zone-reference
+ name: Zone membership reference conformance
+ summary: Offline resolution, exception and lineage checks.
+ domain: infotech
+ status: draft
+ owner: zone-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.zone-reference.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: zone-engine
+ source_index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml
+- id: capability.statehub.progress-log
+ name: Progress and work evidence indexing
+ summary: REST progress and task evidence references.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - progress
+ - coordination
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R3
+ path: registry/capabilities/capability.statehub.progress-log.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: /home/worsch/state-hub/registry/indexes/capabilities.yaml
+- id: capability.statehub.workstream-coordinate
+ name: Cross-repository work tracking
+ summary: File-derived workplans, tasks, dependencies, decisions and coordination
+ views.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - coordination
+ - workplans
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R2
+ path: registry/capabilities/capability.statehub.workstream-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: /home/worsch/state-hub/registry/indexes/capabilities.yaml
diff --git a/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml b/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml
new file mode 100644
index 00000000..e5921301
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml
@@ -0,0 +1,1461 @@
+version: 1
+updated: '2026-10-14'
+domain: infotech
+collision_policy: warn
+sources:
+- repo: access-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml
+- repo: activity-core
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml
+- repo: agentic-resources
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml
+- repo: approval-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml
+- repo: audit-core
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml
+- repo: coordination-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml
+- repo: emergent-security
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml
+- repo: fin-hub
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml
+- repo: gate-house
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml
+- repo: glas-harness
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml
+- repo: info-tech-canon
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml
+- repo: informed-decision
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml
+- repo: issue-core
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml
+- repo: key-cape
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml
+- repo: kings-guard
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml
+- repo: maturity-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml
+- repo: net-kingdom
+ count: 6
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- repo: ops-bridge
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml
+- repo: ops-mason
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml
+- repo: ops-warden
+ count: 3
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml
+- repo: policy-nexus
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml
+- repo: rail-kubernetes
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml
+- repo: railiance-apps
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml
+- repo: railiance-bootstrap
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml
+- repo: railiance-cluster
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml
+- repo: railiance-enablement
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml
+- repo: railiance-fabric
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml
+- repo: railiance-forge
+ count: 2
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml
+- repo: railiance-infra
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml
+- repo: railiance-master
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml
+- repo: railiance-platform
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml
+- repo: railiance-telemetry
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-openbao
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml
+- repo: rapp-playwright
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml
+- repo: rapp-policy-nexus
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml
+- repo: rapp-postgres
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml
+- repo: rapp-telemetry
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-tenant-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml
+- repo: rapp-user-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml
+- repo: reef-railiance
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml
+- repo: rein-aharness
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml
+- repo: rein-openweights
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml
+- repo: repo-manager
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml
+- repo: resource-control
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml
+- repo: reuse-surface
+ count: 3
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml
+- repo: risk-nexus
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml
+- repo: role-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml
+- repo: runbook-tutorials
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml
+- repo: sand-boxer
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml
+- repo: sbom-nexus
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml
+- repo: secrets-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml
+- repo: security-canon
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml
+- repo: state-hub
+ count: 2
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml
+- repo: tenant-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml
+- repo: the-custodian
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml
+- repo: user-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml
+- repo: whitehat-security
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml
+- repo: zone-engine
+ count: 1
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml
+capabilities:
+- id: capability.activity.event-coordinate
+ name: Durable automation and bounded operations
+ summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime
+ sinks.
+ domain: helix_forge
+ status: draft
+ owner: activity-core
+ tags:
+ - activity
+ - coordination
+ - automation
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.activity.event-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: activity-core
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml
+- id: capability.agents.custodian-runtime-tooling
+ name: Generic agent runtime and repository tooling
+ summary: Agent runtime modules and repository classification tooling.
+ domain: custodian
+ status: draft
+ owner: the-custodian
+ tags:
+ - agents
+ - runtime
+ - classification
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.custodian-runtime-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: the-custodian
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml
+- id: capability.agents.performance-learning
+ name: Agent performance learning
+ summary: Capture sessions, curate patterns, distribute lessons and measure outcomes.
+ domain: infotech
+ status: draft
+ owner: agentic-resources
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.performance-learning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: agentic-resources
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml
+- id: capability.audit.event-retain
+ name: Independent audit custody
+ summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.
+ domain: infotech
+ status: draft
+ owner: audit-core
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C3 / R2
+ path: registry/capabilities/capability.audit.event-retain.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: audit-core
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml
+- id: capability.authorization.policy-evaluate
+ name: Policy evaluation and decision evidence
+ summary: Check, batch, list-allowed, explain, binding, lifetime and decision records.
+ domain: helix_forge
+ status: draft
+ owner: access-engine
+ tags:
+ - authorization
+ - policy
+ - flex-auth
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.authorization.policy-evaluate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: access-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml
+- id: capability.coordination.cross-owner-work
+ name: Cross-owner coordination lifecycle
+ summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime.
+ domain: infotech
+ status: draft
+ owner: coordination-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.coordination.cross-owner-work.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: coordination-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml
+- id: capability.execution.openweight-rein
+ name: Bounded open-weight agent execution
+ summary: Tool loop, path guards, turn/budget limits and verified-commit result.
+ domain: infotech
+ status: draft
+ owner: rein-openweights
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.openweight-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-openweights
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml
+- id: capability.execution.profile-harness
+ name: Profile-bound agent execution lifecycle
+ summary: Typed execution requests, profile/rein resolution, sandbox and cleanup
+ orchestration.
+ domain: infotech
+ status: draft
+ owner: glas-harness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.execution.profile-harness.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: glas-harness
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml
+- id: capability.execution.sandbox-provision
+ name: Sandbox establishment and lifecycle
+ summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.
+ domain: infotech
+ status: draft
+ owner: sand-boxer
+ tags:
+ - sandbox
+ - isolation
+ - provision
+ - e2e
+ - agentic
+ - execution
+ - profile
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D5 / A5 / C5 / R0
+ path: registry/capabilities/execution.sandbox-provision.md
+ consumption_modes:
+ - containerized service
+ - CLI
+ source_repo: sand-boxer
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml
+- id: capability.execution.scheduled-agent-rein
+ name: Scheduled agent intake and harness routing
+ summary: Activity Core lease claim/heartbeat and Glas profile execution.
+ domain: infotech
+ status: draft
+ owner: rein-aharness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.scheduled-agent-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-aharness
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml
+- id: capability.finance.security-budget-evidence
+ name: Budget and cost evidence for security operations
+ summary: Budget, commitment, spend attribution and planning-evidence consumption.
+ domain: infotech
+ status: draft
+ owner: fin-hub
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.finance.security-budget-evidence.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: fin-hub
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml
+- id: capability.iam.key-cape
+ name: OIDC identity and assurance
+ summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.
+ domain: infotech
+ status: draft
+ owner: key-cape
+ tags:
+ - iam
+ - oidc
+ - netkingdom
+ - security
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.iam.key-cape.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: key-cape
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml
+- id: capability.identity.tenant-facts
+ name: Tenant lifecycle and guardrail facts
+ summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store.
+ domain: infotech
+ status: draft
+ owner: tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.identity.tenant-facts.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: tenant-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.identity.user-engine
+ name: User lifecycle and account journeys
+ summary: Accounts, identity links, membership, MFA and recovery portal, advisory
+ catalog.
+ domain: communication
+ status: draft
+ owner: user-engine
+ tags:
+ - identity
+ - user-management
+ - multi-tenant
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R0
+ path: registry/capabilities/capability.identity.user-engine.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: user-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml
+- id: capability.infotech.canon-service
+ name: Shared semantic contracts and validation
+ summary: Markdown canon with library, CLI and read-only API.
+ domain: infotech
+ status: draft
+ owner: info-tech-canon
+ tags:
+ - canon
+ - infospace
+ - service
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.canon-service.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: info-tech-canon
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml
+- id: capability.infotech.headless-browser
+ name: Headless Browser Automation
+ summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright
+ 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container;
+ managed Railiance admission is pending. Download the Python 3.10+ standalone client
+ from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py
+ and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then
+ `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01`
+ with a fresh output directory. This endpoint was verified locally on 2026-10-13
+ and is ephemeral; it installs no browser for the caller. If unreachable, follow
+ the local container setup in the capability card or adapt its A2 source examples;
+ this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.'
+ vector: D3 / A5 / C2 / R2
+ domain: infotech
+ status: reviewed
+ owner: reuse-surface
+ path: registry/capabilities/capability.infotech.headless-browser.md
+ tags:
+ - headless
+ - browser
+ - automation
+ - playwright
+ - chromium
+ - testing
+ - screenshots
+ - extraction
+ - firefox
+ - webkit
+ - selenium
+ - puppeteer
+ consumption_modes:
+ - informational
+ - source adaptation
+ - JavaScript library
+ - Python library
+ - cli
+ - service API
+ - container
+ source_repo: reuse-surface
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.infotech.issue-tracking
+ name: External issue tracker connector
+ summary: CLI and Python adapters for external issue systems.
+ domain: infotech
+ status: draft
+ owner: issue-core
+ tags:
+ - issue-tracking
+ - connector
+ - work-record
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.infotech.issue-tracking.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: issue-core
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml
+- id: capability.infotech.runbook-tutorials
+ name: Guided administrative runbooks
+ summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence.
+ domain: infotech
+ status: draft
+ owner: runbook-tutorials
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.infotech.runbook-tutorials.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: runbook-tutorials
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml
+- id: capability.infotech.sbom-management
+ name: Dependency provenance and SBOM evidence
+ summary: Controlled archive ingest, immutable snapshots, freshness and license review.
+ domain: infotech
+ status: draft
+ owner: sbom-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.sbom-management.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: sbom-nexus
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml
+- id: capability.observability.security-signals
+ name: Security-relevant telemetry contracts and adapters
+ summary: Signal contract, platform adapters, report exporter and absence/alert rules.
+ domain: infotech
+ status: draft
+ owner: railiance-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.observability.security-signals.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-telemetry
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml
+- id: capability.ops.tunnel-bridge
+ name: SSH tunnel lifecycle
+ summary: Named tunnels, reconnect, health and TTL-aware cert_command.
+ domain: infotech
+ status: draft
+ owner: ops-bridge
+ tags:
+ - ssh
+ - tunnel
+ - ops
+ - connectivity
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.ops.tunnel-bridge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-bridge
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml
+- id: capability.organization.role-catalog
+ name: Organizational role definitions
+ summary: Versioned documentation catalog.
+ domain: infotech
+ status: draft
+ owner: role-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.organization.role-catalog.md
+ consumption_modes:
+ - informational
+ source_repo: role-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.bootstrap-sequencing
+ name: Bootstrap sequencing contracts
+ summary: Bare-VM to estate sequence and handoff contract.
+ domain: infotech
+ status: draft
+ owner: railiance-bootstrap
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.bootstrap-sequencing.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-bootstrap
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml
+- id: capability.railiance.browser-verification
+ name: Managed browser verification pilot
+ summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts.
+ domain: infotech
+ status: draft
+ owner: rapp-playwright
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.railiance.browser-verification.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: rapp-playwright
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml
+- id: capability.railiance.ci-enablement
+ name: Developer delivery and CI templates
+ summary: Reusable CI workflows, build and deployment patterns.
+ domain: financials
+ status: draft
+ owner: railiance-enablement
+ tags:
+ - railiance
+ - ci-cd
+ - developer-enablement
+ - forgejo
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.ci-enablement.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-enablement
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml
+- id: capability.railiance.cluster-bootstrap
+ name: Kubernetes runtime and cluster controls
+ summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks.
+ domain: financials
+ status: draft
+ owner: railiance-cluster
+ tags:
+ - railiance
+ - kubernetes
+ - iac
+ - bootstrap
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.cluster-bootstrap.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-cluster
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml
+- id: capability.railiance.fabric-graph
+ name: Infrastructure ownership and dependency graph
+ summary: Schemas, validation, graph queries and State Hub exports.
+ domain: financials
+ status: draft
+ owner: railiance-fabric
+ tags:
+ - railiance
+ - graph
+ - ownership
+ - discovery
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.fabric-graph.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-fabric
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml
+- id: capability.railiance.forge-infrastructure
+ name: Source forge, registries and runner substrate
+ summary: Forgejo operation, package registries and runner lifecycle.
+ domain: financials
+ status: draft
+ owner: railiance-forge
+ tags:
+ - railiance
+ - forgejo
+ - forge
+ - ci-runner
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.forge-infrastructure.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.railiance.infra-provisioning
+ name: Host convergence and security baseline
+ summary: Ansible inventory, firewall, SSH bootstrap and baseline verification.
+ domain: financials
+ status: draft
+ owner: railiance-infra
+ tags:
+ - railiance
+ - terraform
+ - ansible
+ - infrastructure
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.infra-provisioning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-infra
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml
+- id: capability.railiance.kubernetes-rail
+ name: Generic Kubernetes workload lifecycle
+ summary: Workload declaration, rollout, observe, promote and rollback surfaces.
+ domain: infotech
+ status: draft
+ owner: rail-kubernetes
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.kubernetes-rail.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rail-kubernetes
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml
+- id: capability.railiance.openbao-package
+ name: Managed OpenBao deployment package
+ summary: Helm values, package deploy/status/smoke/rollback and custody boundary.
+ domain: infotech
+ status: draft
+ owner: rapp-openbao
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.openbao-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-openbao
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml
+- id: capability.railiance.platform-services
+ name: Secret custody and platform data services
+ summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup
+ contracts.
+ domain: financials
+ status: draft
+ owner: railiance-platform
+ tags:
+ - railiance
+ - platform
+ - secrets
+ - postgres
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.platform-services.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-platform
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml
+- id: capability.railiance.policy-publication-package
+ name: Policy publication runtime package
+ summary: Immutable image, non-root/read-only runtime and approved TLS exposure.
+ domain: infotech
+ status: draft
+ owner: rapp-policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.policy-publication-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-policy-nexus
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.railiance.postgres-isolation-recovery
+ name: Database isolation and recovery package
+ summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore
+ procedures.
+ domain: infotech
+ status: draft
+ owner: rapp-postgres
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-postgres
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml
+- id: capability.railiance.security-consumption-contracts
+ name: Platform security consumption architecture
+ summary: Rail/rapp/reef boundaries, exposure and security consumption contracts.
+ domain: infotech
+ status: draft
+ owner: railiance-master
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.security-consumption-contracts.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-master
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml
+- id: capability.railiance.substrate-bindings
+ name: Substrate topology and bindings
+ summary: Grouped home-reef identity, topology and placement declarations.
+ domain: infotech
+ status: draft
+ owner: reef-railiance
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.substrate-bindings.md
+ consumption_modes:
+ - informational
+ source_repo: reef-railiance
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml
+- id: capability.railiance.telemetry-package
+ name: Private monitoring package
+ summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence.
+ domain: infotech
+ status: draft
+ owner: rapp-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.telemetry-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-telemetry
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml
+- id: capability.railiance.tenant-engine-package
+ name: Tenant Engine runtime package
+ summary: Package declaration, smoke and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.tenant-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-tenant-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.user-engine-package
+ name: User Engine runtime package
+ summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-user-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.user-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-user-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.workload-deployment-tooling
+ name: Workload release configuration and guards
+ summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback.
+ domain: financials
+ status: draft
+ owner: railiance-apps
+ tags:
+ - railiance
+ - kubernetes
+ - helm
+ - deployment
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.railiance.workload-deployment-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-apps
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml
+- id: capability.registry.register
+ name: Capability registry and federation
+ summary: Owner Markdown entries, indexes, federation hub and planning queries.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - governance
+ - meta
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C2 / R3
+ path: registry/capabilities/capability.registry.register.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.registry.validate
+ name: Capability registry validation
+ summary: Schema, index consistency and relation checks.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - validation
+ - cli
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R3
+ path: registry/capabilities/capability.registry.validate.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.resources.security-capacity
+ name: Capacity and recovery resource planning
+ summary: Provider-neutral inventory, procurement evidence and optimization reports.
+ domain: infotech
+ status: draft
+ owner: resource-control
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.resources.security-capacity.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: resource-control
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml
+- id: capability.security.access-routing
+ name: Credential routing and contained access
+ summary: warden route and access catalog; exact lane conduit and secret-exec routing.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.security.access-routing.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.adversarial-evidence
+ name: Authorized adversarial evidence harness
+ summary: Offline ASM and tenancy calibrations and engagement admission.
+ domain: infotech
+ status: draft
+ owner: whitehat-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.adversarial-evidence.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: whitehat-security
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml
+- id: capability.security.agent-knowledge
+ name: Verified security orientation for agents
+ summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed
+ exports.
+ domain: infotech
+ status: draft
+ owner: emergent-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.agent-knowledge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: emergent-security
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml
+- id: capability.security.approval-lifecycle
+ name: Bound approval lifecycle
+ summary: Authenticated issue, claim, revoke, supersede and atomic consume API with
+ outbox.
+ domain: infotech
+ status: draft
+ owner: approval-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.approval-lifecycle.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: approval-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml
+- id: capability.security.bootstrap-recovery
+ name: Guarded bootstrap and recovery preparation
+ summary: Local identity, bootstrap console, encrypted custody handoff and caller
+ tools.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.bootstrap-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-contracts
+ name: Security case types and instance validation
+ summary: Versioned types, cases and schema validation.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-contracts.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-follow-through
+ name: Security case operational follow-through
+ summary: KnownSecurityCase route, plan and operational receipts.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-follow-through.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-warden
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.credential-lifecycle
+ name: Cataloged credential lifecycle
+ summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification,
+ delivery and revoke.
+ domain: infotech
+ status: draft
+ owner: secrets-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.credential-lifecycle.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: secrets-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml
+- id: capability.security.doctrine-review
+ name: Security doctrine and architecture review
+ summary: Layer rules, authority context, ASM criteria and interpretations.
+ domain: infotech
+ status: draft
+ owner: gate-house
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.doctrine-review.md
+ consumption_modes:
+ - informational
+ source_repo: gate-house
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml
+- id: capability.security.emission-profile
+ name: Security emission cadence validation
+ summary: Security profile over generic emission contracts and validator.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.emission-profile.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.forge-secret-prevention
+ name: Independent introduced-history secret prevention
+ summary: Pinned receive adapter, lifecycle template and fail-closed scan.
+ domain: infotech
+ status: draft
+ owner: railiance-forge
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.forge-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.security.human-decision-workspace
+ name: Human security decision presentation and disposition
+ summary: Headless lifecycle and browser workspace with exact native approval references.
+ domain: infotech
+ status: draft
+ owner: informed-decision
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.human-decision-workspace.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: informed-decision
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml
+- id: capability.security.iam-tooling-suite
+ name: NetKingdom security architecture and conformance tooling
+ summary: Versioned IAM, layer, tenancy and credential contracts plus validators.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - iam
+ - kubernetes
+ - conformance
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.security.iam-tooling-suite.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.maturity-claims
+ name: Evidence-based maturity claims and gap register
+ summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and
+ stance inventory.
+ domain: infotech
+ status: draft
+ owner: maturity-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.maturity-claims.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: maturity-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml
+- id: capability.security.policy-publication
+ name: Policy publication with source provenance
+ summary: Generated immutable publication, source currency and stable policy URLs.
+ domain: infotech
+ status: draft
+ owner: policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.policy-publication.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: policy-nexus
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.posture-assessment
+ name: Security posture assessment and response proposals
+ summary: Normalized observation evaluator, cadence checks and secret-use snapshot
+ adapter.
+ domain: infotech
+ status: draft
+ owner: kings-guard
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-assessment.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: kings-guard
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml
+- id: capability.security.posture-feedback
+ name: Deterministic posture feedback
+ summary: CLI evaluates evidence age and posture into owner-routed findings.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-feedback.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.practice-canon
+ name: Security practice and authority vocabulary
+ summary: Versioned SEC-DSM and Mode of Authority documents.
+ domain: infotech
+ status: draft
+ owner: security-canon
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.practice-canon.md
+ consumption_modes:
+ - informational
+ source_repo: security-canon
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml
+- id: capability.security.repository-secret-prevention
+ name: Repository metadata and staged-secret prevention
+ summary: Repository observation plus pinned staged-blob scanner and hook integration.
+ domain: infotech
+ status: draft
+ owner: repo-manager
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.repository-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: repo-manager
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml
+- id: capability.security.risk-register
+ name: Security risk and exception review register
+ summary: Markdown findings and Python review, verification and due-work reports.
+ domain: infotech
+ status: draft
+ owner: risk-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.risk-register.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: risk-nexus
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.scenario-compose
+ name: Deterministic security scenario composition
+ summary: CLI selects pinned providers and orders trust transitions.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.scenario-compose.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.ssh-certificate-issuance
+ name: Decision-bound SSH certificates
+ summary: warden sign with local and OpenBao backends and adm/agt/atm actors.
+ domain: helix_forge
+ status: draft
+ owner: ops-warden
+ tags:
+ - ssh
+ - certificate
+ - ca
+ - ops-warden
+ - openbao
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R2
+ path: registry/capabilities/capability.security.ssh-certificate-issuance.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.structure-construction
+ name: Reviewed security structure construction
+ summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply.
+ domain: infotech
+ status: draft
+ owner: ops-mason
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.structure-construction.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-mason
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml
+- id: capability.security.zone-reference
+ name: Zone membership reference conformance
+ summary: Offline resolution, exception and lineage checks.
+ domain: infotech
+ status: draft
+ owner: zone-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.zone-reference.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: zone-engine
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml
+- id: capability.statehub.progress-log
+ name: Progress and work evidence indexing
+ summary: REST progress and task evidence references.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - progress
+ - coordination
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R3
+ path: registry/capabilities/capability.statehub.progress-log.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml
+- id: capability.statehub.workstream-coordinate
+ name: Cross-repository work tracking
+ summary: File-derived workplans, tasks, dependencies, decisions and coordination
+ views.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - coordination
+ - workplans
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R2
+ path: registry/capabilities/capability.statehub.workstream-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml
diff --git a/docs/assessments/netkingdom-2026-10-14/federation-local.yaml b/docs/assessments/netkingdom-2026-10-14/federation-local.yaml
new file mode 100644
index 00000000..cf4ee153
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/federation-local.yaml
@@ -0,0 +1,244 @@
+version: 1
+domain: infotech
+collision_policy: warn
+sources:
+- repo: access-engine
+ index: /home/worsch/access-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: activity-core
+ index: /home/worsch/activity-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: agentic-resources
+ index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: approval-engine
+ index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: audit-core
+ index: /home/worsch/audit-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: coordination-engine
+ index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: emergent-security
+ index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: fin-hub
+ index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: gate-house
+ index: /home/worsch/gate-house/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: glas-harness
+ index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: info-tech-canon
+ index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: informed-decision
+ index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: issue-core
+ index: /home/worsch/issue-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: key-cape
+ index: /home/worsch/key-cape/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: kings-guard
+ index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: maturity-engine
+ index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: net-kingdom
+ index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-bridge
+ index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-mason
+ index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-warden
+ index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: policy-nexus
+ index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rail-kubernetes
+ index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-apps
+ index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-bootstrap
+ index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-cluster
+ index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-enablement
+ index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-fabric
+ index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-forge
+ index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-infra
+ index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-master
+ index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-platform
+ index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-telemetry
+ index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-openbao
+ index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-playwright
+ index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-policy-nexus
+ index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-postgres
+ index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-telemetry
+ index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-tenant-engine
+ index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-user-engine
+ index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: reef-railiance
+ index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rein-aharness
+ index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rein-openweights
+ index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: repo-manager
+ index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: resource-control
+ index: /home/worsch/resource-control/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: reuse-surface
+ index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: risk-nexus
+ index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: role-engine
+ index: /home/worsch/role-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: runbook-tutorials
+ index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: sand-boxer
+ index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: sbom-nexus
+ index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: secrets-engine
+ index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: security-canon
+ index: /home/worsch/security-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: state-hub
+ index: /home/worsch/state-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: tenant-engine
+ index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: the-custodian
+ index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: user-engine
+ index: /home/worsch/user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: whitehat-security
+ index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: zone-engine
+ index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rail-knative
+ index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-sbom-nexus
+ index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
diff --git a/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml b/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml
new file mode 100644
index 00000000..2a39b43d
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml
@@ -0,0 +1,236 @@
+version: 1
+domain: infotech
+collision_policy: warn
+sources:
+- repo: access-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: activity-core
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: agentic-resources
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: approval-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: audit-core
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: coordination-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: emergent-security
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: fin-hub
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: gate-house
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: glas-harness
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: info-tech-canon
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: informed-decision
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: issue-core
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: key-cape
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: kings-guard
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: maturity-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: net-kingdom
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-bridge
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-mason
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: ops-warden
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: policy-nexus
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rail-kubernetes
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-apps
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-bootstrap
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-cluster
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-enablement
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-fabric
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-forge
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-infra
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-master
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-platform
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: railiance-telemetry
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-openbao
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-playwright
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-policy-nexus
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-postgres
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-telemetry
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-tenant-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rapp-user-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: reef-railiance
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rein-aharness
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: rein-openweights
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: repo-manager
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: resource-control
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: reuse-surface
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: risk-nexus
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: role-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: runbook-tutorials
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: sand-boxer
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: sbom-nexus
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: secrets-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: security-canon
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: state-hub
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: tenant-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: the-custodian
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: user-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: whitehat-security
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+- repo: zone-engine
+ index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
diff --git a/docs/assessments/netkingdom-2026-10-14/full-inventory.json b/docs/assessments/netkingdom-2026-10-14/full-inventory.json
new file mode 100644
index 00000000..6eca0291
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/full-inventory.json
@@ -0,0 +1,2987 @@
+{
+ "as_of": "2026-10-14",
+ "capabilities": [
+ {
+ "repo": "security-canon",
+ "id": "capability.security.practice-canon",
+ "name": "Security practice and authority vocabulary",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Versioned SEC-DSM and Mode of Authority documents",
+ "limitation": "Normative practice; no runtime control or certification",
+ "use_cases": [
+ "U01",
+ "U07",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.practice-canon.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom security architecture and conformance tooling",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned IAM, layer, tenancy and credential contracts plus validators",
+ "limitation": "Mixed accepted and proposed standards; framework integration remains incomplete",
+ "use_cases": [
+ "U01",
+ "U02",
+ "U03",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "SECURITY-COMPANION.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "prior_vector": "D3 / A2 / C1 / R1",
+ "vector": "D3 / A2 / C1 / R1",
+ "entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.scenario-compose",
+ "name": "Deterministic security scenario composition",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI selects pinned providers and orders trust transitions",
+ "limitation": "Plan only; execution.permitted is always false",
+ "use_cases": [
+ "U01",
+ "U14"
+ ],
+ "artifacts": [
+ "tools/security-scenario-composer/README.md",
+ "tools/security-scenario-composer/security_scenario_composer.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.scenario-compose.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.posture-feedback",
+ "name": "Deterministic posture feedback",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI evaluates evidence age and posture into owner-routed findings",
+ "limitation": "Proposal only; no policy changes or remediation execution",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "tools/posture-feedback/README.md",
+ "tools/posture-feedback/posture_feedback.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.posture-feedback.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.case-contracts",
+ "name": "Security case types and instance validation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned types, cases and schema validation",
+ "limitation": "Type acknowledgment, case acceptance, structural materialization and native execution are distinct",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "tools/security-case-types/README.md",
+ "canon/standards/security-case-types_v0.1.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.case-contracts.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.bootstrap-recovery",
+ "name": "Guarded bootstrap and recovery preparation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Local identity, bootstrap console, encrypted custody handoff and caller tools",
+ "limitation": "Source repairs and disposable native fixtures do not prove estate root isolation or recovery",
+ "use_cases": [
+ "U10"
+ ],
+ "artifacts": [
+ "tools/security-bootstrap-console/README.md",
+ "tools/custody-record/README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.bootstrap-recovery.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.emission-profile",
+ "name": "Security emission cadence validation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Security profile over generic emission contracts and validator",
+ "limitation": "Profile adoption and source completeness require owner-native evidence",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "tools/emission-cadence-profile/README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.emission-profile.md"
+ },
+ {
+ "repo": "key-cape",
+ "id": "capability.iam.key-cape",
+ "name": "OIDC identity and assurance",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI",
+ "limitation": "Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates",
+ "use_cases": [
+ "U02",
+ "U03",
+ "U04",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.iam.key-cape.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A4 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.iam.key-cape.md"
+ },
+ {
+ "repo": "user-engine",
+ "id": "capability.identity.user-engine",
+ "name": "User lifecycle and account journeys",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog",
+ "limitation": "Application readback is advisory; applications must enforce their own authorization",
+ "use_cases": [
+ "U02",
+ "U03",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.identity.user-engine.md",
+ "prior_vector": "D4 / A1 / C2 / R0",
+ "vector": "D4 / A4 / C2 / R0",
+ "entry_path": "registry/capabilities/capability.identity.user-engine.md"
+ },
+ {
+ "repo": "tenant-engine",
+ "id": "capability.identity.tenant-facts",
+ "name": "Tenant lifecycle and guardrail facts",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store",
+ "limitation": "Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate",
+ "use_cases": [
+ "U03",
+ "U04"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.identity.tenant-facts.md"
+ },
+ {
+ "repo": "zone-engine",
+ "id": "capability.security.zone-reference",
+ "name": "Zone membership reference conformance",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Offline resolution, exception and lineage checks",
+ "limitation": "No live zone engine, PDP or protected side effects",
+ "use_cases": [
+ "U01",
+ "U03",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.zone-reference.md"
+ },
+ {
+ "repo": "access-engine",
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Policy evaluation and decision evidence",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Check, batch, list-allowed, explain, binding, lifetime and decision records",
+ "limitation": "One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct",
+ "use_cases": [
+ "U03",
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A4 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md"
+ },
+ {
+ "repo": "approval-engine",
+ "id": "capability.security.approval-lifecycle",
+ "name": "Bound approval lifecycle",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Authenticated issue, claim, revoke, supersede and atomic consume API with outbox",
+ "limitation": "Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "approval_engine/api.py",
+ "docs/production-dependencies.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.approval-lifecycle.md"
+ },
+ {
+ "repo": "secrets-engine",
+ "id": "capability.security.credential-lifecycle",
+ "name": "Cataloged credential lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke",
+ "limitation": "Production protected execution and independently anchored PDP authentication remain incomplete",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U07"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "src/secrets_engine/decision_check.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.credential-lifecycle.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "Decision-bound SSH certificates",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "warden sign with local and OpenBao backends and adm/agt/atm actors",
+ "limitation": "Direct Tooling contact is a declared gap; certificate reachability is not target authorization",
+ "use_cases": [
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "prior_vector": "D4 / A3 / C3 / R2",
+ "vector": "D4 / A3 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.access-routing",
+ "name": "Credential routing and contained access",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "warden route and access catalog; exact lane conduit and secret-exec routing",
+ "limitation": "Routing grants no authority; interim delegates and attended high-risk lanes persist",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "wiki/CredentialRouting.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A3 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.access-routing.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.case-follow-through",
+ "name": "Security case operational follow-through",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "KnownSecurityCase route, plan and operational receipts",
+ "limitation": "Execution requires accepted structure and exact owner contracts; case closure is not automatic",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "workplans/WARDEN-WP-0044-security-case-follow-through.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.case-follow-through.md"
+ },
+ {
+ "repo": "ops-mason",
+ "id": "capability.security.structure-construction",
+ "name": "Reviewed security structure construction",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply",
+ "limitation": "Founder plan gate is an explicit exception; not full PDP conformance",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/construction-plan-format.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.structure-construction.md"
+ },
+ {
+ "repo": "ops-bridge",
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH tunnel lifecycle",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Named tunnels, reconnect, health and TTL-aware cert_command",
+ "limitation": "Private transport does not authenticate applications or decide access",
+ "use_cases": [
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "prior_vector": "D3 / A2 / C2 / R1",
+ "vector": "D3 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md"
+ },
+ {
+ "repo": "audit-core",
+ "id": "capability.audit.event-retain",
+ "name": "Independent audit custody",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation",
+ "limitation": "Custody after arrival does not prove source completeness; freshness bounds integrity assertions",
+ "use_cases": [
+ "U08",
+ "U09",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/stream-completeness.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.audit.event-retain.md",
+ "prior_vector": "D4 provision / A4 / C3 / R2",
+ "vector": "D3 / A4 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.audit.event-retain.md"
+ },
+ {
+ "repo": "maturity-engine",
+ "id": "capability.security.maturity-claims",
+ "name": "Evidence-based maturity claims and gap register",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory",
+ "limitation": "No production deployment claimed; levels supply facts and cannot authorize actions",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/claim-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.maturity-claims.md"
+ },
+ {
+ "repo": "kings-guard",
+ "id": "capability.security.posture-assessment",
+ "name": "Security posture assessment and response proposals",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Normalized observation evaluator, cadence checks and secret-use snapshot adapter",
+ "limitation": "Bounded reference pilot; containment proposals only; deployed-stream admission remains open",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/SecretUseSnapshotAdmission.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.posture-assessment.md"
+ },
+ {
+ "repo": "whitehat-security",
+ "id": "capability.security.adversarial-evidence",
+ "name": "Authorized adversarial evidence harness",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Offline ASM and tenancy calibrations and engagement admission",
+ "limitation": "Live probes require a complete engagement; no blanket target authorization",
+ "use_cases": [
+ "U03",
+ "U08",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.adversarial-evidence.md"
+ },
+ {
+ "repo": "gate-house",
+ "id": "capability.security.doctrine-review",
+ "name": "Security doctrine and architecture review",
+ "availability": "A0",
+ "operational_estimate": 3,
+ "surface": "Layer rules, authority context, ASM criteria and interpretations",
+ "limitation": "Staff judgment; no runtime PDP, credential issuer or automatic enforcement",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "INTENT.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.doctrine-review.md"
+ },
+ {
+ "repo": "emergent-security",
+ "id": "capability.security.agent-knowledge",
+ "name": "Verified security orientation for agents",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports",
+ "limitation": "Current start card withheld for source drift; orientation never grants authority",
+ "use_cases": [
+ "U01",
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "knowledge/cards/start.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.agent-knowledge.md"
+ },
+ {
+ "repo": "informed-decision",
+ "id": "capability.security.human-decision-workspace",
+ "name": "Human security decision presentation and disposition",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Headless lifecycle and browser workspace with exact native approval references",
+ "limitation": "Initial audience is bounded; Approval Engine owns approval state, Access Engine decides",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.human-decision-workspace.md"
+ },
+ {
+ "repo": "policy-nexus",
+ "id": "capability.security.policy-publication",
+ "name": "Policy publication with source provenance",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Generated immutable publication, source currency and stable policy URLs",
+ "limitation": "Publication does not ratify policy or enforce it",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "README.md",
+ "docs/publication-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.policy-publication.md"
+ },
+ {
+ "repo": "risk-nexus",
+ "id": "capability.security.risk-register",
+ "name": "Security risk and exception review register",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Markdown findings and Python review, verification and due-work reports",
+ "limitation": "Judgment remains human or agent; no live EUR risk gate or autonomous response",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.risk-register.md"
+ },
+ {
+ "repo": "role-engine",
+ "id": "capability.organization.role-catalog",
+ "name": "Organizational role definitions",
+ "availability": "A0",
+ "operational_estimate": 1,
+ "surface": "Versioned documentation catalog",
+ "limitation": "Not IAM roles, assignments or runtime authorization",
+ "use_cases": [
+ "U01",
+ "U11"
+ ],
+ "artifacts": [
+ "README.md",
+ "INTENT.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.organization.role-catalog.md"
+ },
+ {
+ "repo": "glas-harness",
+ "id": "capability.execution.profile-harness",
+ "name": "Profile-bound agent execution lifecycle",
+ "availability": "A3",
+ "operational_estimate": 2,
+ "surface": "Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration",
+ "limitation": "No ready profile asserted by SCOPE; Custodian native isolation remains open",
+ "use_cases": [
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A3 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.profile-harness.md"
+ },
+ {
+ "repo": "sand-boxer",
+ "id": "capability.execution.sandbox-provision",
+ "name": "Sandbox establishment and lifecycle",
+ "availability": "A5",
+ "operational_estimate": 2,
+ "surface": "Profiles, extensions, provision, checkpoints, TTL teardown and telemetry",
+ "limitation": "Backend-specific guarantees; a created sandbox alone proves no credential isolation",
+ "use_cases": [
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/execution.sandbox-provision.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D5 / A5 / C5 / R0",
+ "entry_path": "registry/capabilities/execution.sandbox-provision.md"
+ },
+ {
+ "repo": "rein-aharness",
+ "id": "capability.execution.scheduled-agent-rein",
+ "name": "Scheduled agent intake and harness routing",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Activity Core lease claim/heartbeat and Glas profile execution",
+ "limitation": "Legacy paths are time-gated; task success is not privileged authority",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.scheduled-agent-rein.md"
+ },
+ {
+ "repo": "rein-openweights",
+ "id": "capability.execution.openweight-rein",
+ "name": "Bounded open-weight agent execution",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Tool loop, path guards, turn/budget limits and verified-commit result",
+ "limitation": "Provider credential acquisition and runtime authority need separate custody controls",
+ "use_cases": [
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.openweight-rein.md"
+ },
+ {
+ "repo": "agentic-resources",
+ "id": "capability.agents.performance-learning",
+ "name": "Agent performance learning",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Capture sessions, curate patterns, distribute lessons and measure outcomes",
+ "limitation": "Workforce assignments and broader authority contracts remain proposed",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.agents.performance-learning.md"
+ },
+ {
+ "repo": "runbook-tutorials",
+ "id": "capability.infotech.runbook-tutorials",
+ "name": "Guided administrative runbooks",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Pack schema, loader, local UI/CLI, gates, verification and rollback evidence",
+ "limitation": "Owner supplies procedures; UI progress is not runtime approval",
+ "use_cases": [
+ "U05",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/pack-spec.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md",
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md"
+ },
+ {
+ "repo": "repo-manager",
+ "id": "capability.security.repository-secret-prevention",
+ "name": "Repository metadata and staged-secret prevention",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Repository observation plus pinned staged-blob scanner and hook integration",
+ "limitation": "Local hooks are bypassable; coverage is exact-checkout scoped",
+ "use_cases": [
+ "U07",
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.repository-secret-prevention.md"
+ },
+ {
+ "repo": "sbom-nexus",
+ "id": "capability.infotech.sbom-management",
+ "name": "Dependency provenance and SBOM evidence",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Controlled archive ingest, immutable snapshots, freshness and license review",
+ "limitation": "SBOM and license evidence do not prove vulnerability exploitability or artifact trust",
+ "use_cases": [
+ "U12",
+ "U09"
+ ],
+ "artifacts": [
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.sbom-management.md",
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.sbom-management.md"
+ },
+ {
+ "repo": "activity-core",
+ "id": "capability.activity.event-coordinate",
+ "name": "Durable automation and bounded operations",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks",
+ "limitation": "Not a general shell executor; first unassisted security-flow cadence acceptance remains open",
+ "use_cases": [
+ "U09",
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.activity.event-coordinate.md"
+ },
+ {
+ "repo": "issue-core",
+ "id": "capability.infotech.issue-tracking",
+ "name": "External issue tracker connector",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI and Python adapters for external issue systems",
+ "limitation": "Internal work originates in owner files; external projection is optional",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.infotech.issue-tracking.md"
+ },
+ {
+ "repo": "state-hub",
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Cross-repository work tracking",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "File-derived workplans, tasks, dependencies, decisions and coordination views",
+ "limitation": "Read/cache/index of owner work; not runtime approval authority",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "README.md",
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "prior_vector": "D4 / A4 / C3 / R2",
+ "vector": "D4 / A4 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md"
+ },
+ {
+ "repo": "state-hub",
+ "id": "capability.statehub.progress-log",
+ "name": "Progress and work evidence indexing",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "REST progress and task evidence references",
+ "limitation": "Not independent security event custody",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "README.md",
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.statehub.progress-log.md",
+ "prior_vector": "D4 / A4 / C3 / R3",
+ "vector": "D4 / A4 / C3 / R3",
+ "entry_path": "registry/capabilities/capability.statehub.progress-log.md"
+ },
+ {
+ "repo": "the-custodian",
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Generic agent runtime and repository tooling",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Agent runtime modules and repository classification tooling",
+ "limitation": "Only generic tooling is reusable; confidential canon and session memory are excluded",
+ "use_cases": [
+ "U09",
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "runtime/README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "prior_vector": "D2 / A1 / C1 / R0",
+ "vector": "D2 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md"
+ },
+ {
+ "repo": "coordination-engine",
+ "id": "capability.coordination.cross-owner-work",
+ "name": "Cross-owner coordination lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime",
+ "limitation": "Coordinates owners without replacing their execution or security authority",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "spec/cross-owner-wait-mode-v0.1.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.coordination.cross-owner-work.md"
+ },
+ {
+ "repo": "reuse-surface",
+ "id": "capability.registry.register",
+ "name": "Capability registry and federation",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "Owner Markdown entries, indexes, federation hub and planning queries",
+ "limitation": "Discovery is not readiness; empty and stale entries need evidence-led maintenance",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "docs/RegistryFederation.md",
+ "specs/CapabilityMaturityStandard.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.registry.register.md",
+ "prior_vector": "D3 / A4 / C2 / R3",
+ "vector": "D3 / A3 / C2 / R3",
+ "entry_path": "registry/capabilities/capability.registry.register.md"
+ },
+ {
+ "repo": "reuse-surface",
+ "id": "capability.registry.validate",
+ "name": "Capability registry validation",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "Schema, index consistency and relation checks",
+ "limitation": "Schema validity alone proves neither capability behavior nor hosted freshness",
+ "use_cases": [
+ "U01",
+ "U14"
+ ],
+ "artifacts": [
+ "docs/RegistryFederation.md",
+ "schemas/capability.schema.yaml"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.registry.validate.md",
+ "prior_vector": "D4 / A3 / C3 / R3",
+ "vector": "D4 / A3 / C3 / R3",
+ "entry_path": "registry/capabilities/capability.registry.validate.md"
+ },
+ {
+ "repo": "info-tech-canon",
+ "id": "capability.infotech.canon-service",
+ "name": "Shared semantic contracts and validation",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Markdown canon with library, CLI and read-only API",
+ "limitation": "Mixed seed/candidate maturity; validation is not owner runtime conformance",
+ "use_cases": [
+ "U01",
+ "U08",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.canon-service.md",
+ "prior_vector": "D2 / A2 / C1 / R0",
+ "vector": "D2 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.canon-service.md"
+ },
+ {
+ "repo": "railiance-master",
+ "id": "capability.railiance.security-consumption-contracts",
+ "name": "Platform security consumption architecture",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Rail/rapp/reef boundaries, exposure and security consumption contracts",
+ "limitation": "Architecture declarations do not prove implementation or production admission",
+ "use_cases": [
+ "U01",
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/netkingdom-security-consumption-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.security-consumption-contracts.md"
+ },
+ {
+ "repo": "railiance-platform",
+ "id": "capability.railiance.platform-services",
+ "name": "Secret custody and platform data services",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts",
+ "limitation": "Package ownership is split to rapp repos; caches and object services are demand-led",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U07",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/openbao.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.platform-services.md",
+ "prior_vector": "D3 / A2 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.platform-services.md"
+ },
+ {
+ "repo": "railiance-infra",
+ "id": "capability.railiance.infra-provisioning",
+ "name": "Host convergence and security baseline",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Ansible inventory, firewall, SSH bootstrap and baseline verification",
+ "limitation": "Current hosts differ from the retained Hetzner provisioning path",
+ "use_cases": [
+ "U06",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md"
+ },
+ {
+ "repo": "railiance-cluster",
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Kubernetes runtime and cluster controls",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "k3s, ingress, CNI, operators and kubeconfig/runtime checks",
+ "limitation": "Single-node runtime and workload recovery are distinct from bootstrap success",
+ "use_cases": [
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "prior_vector": "D3 / A2 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md"
+ },
+ {
+ "repo": "railiance-enablement",
+ "id": "capability.railiance.ci-enablement",
+ "name": "Developer delivery and CI templates",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Reusable CI workflows, build and deployment patterns",
+ "limitation": "Templates do not prove mandatory checks or runner isolation",
+ "use_cases": [
+ "U12",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "prior_vector": "D3 / A2 / C2 / R1",
+ "vector": "D3 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.ci-enablement.md"
+ },
+ {
+ "repo": "railiance-forge",
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Source forge, registries and runner substrate",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Forgejo operation, package registries and runner lifecycle",
+ "limitation": "Runner workload authority and independent verification coverage remain open",
+ "use_cases": [
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "workplans/FORGE-WP-0006-independent-secret-detection.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md"
+ },
+ {
+ "repo": "railiance-forge",
+ "id": "capability.security.forge-secret-prevention",
+ "name": "Independent introduced-history secret prevention",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Pinned receive adapter, lifecycle template and fail-closed scan",
+ "limitation": "Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate",
+ "use_cases": [
+ "U07",
+ "U12"
+ ],
+ "artifacts": [
+ "workplans/FORGE-WP-0006-independent-secret-detection.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.forge-secret-prevention.md"
+ },
+ {
+ "repo": "railiance-apps",
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Workload release configuration and guards",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Helm/manifests, exact image pins, application runbooks and rollout/rollback",
+ "limitation": "Release settings depend on underlying platform and workload owners",
+ "use_cases": [
+ "U12",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "prior_vector": "D3 / A2 / C1 / R1",
+ "vector": "D3 / A2 / C1 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md"
+ },
+ {
+ "repo": "railiance-bootstrap",
+ "id": "capability.railiance.bootstrap-sequencing",
+ "name": "Bootstrap sequencing contracts",
+ "availability": "A0",
+ "operational_estimate": 1,
+ "surface": "Bare-VM to estate sequence and handoff contract",
+ "limitation": "End-to-end unattended rebuild is not established",
+ "use_cases": [
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.bootstrap-sequencing.md"
+ },
+ {
+ "repo": "rail-kubernetes",
+ "id": "capability.railiance.kubernetes-rail",
+ "name": "Generic Kubernetes workload lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Workload declaration, rollout, observe, promote and rollback surfaces",
+ "limitation": "Compatibility extraction remains; not cluster or application-domain ownership",
+ "use_cases": [
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.kubernetes-rail.md"
+ },
+ {
+ "repo": "reef-railiance",
+ "id": "capability.railiance.substrate-bindings",
+ "name": "Substrate topology and bindings",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Grouped home-reef identity, topology and placement declarations",
+ "limitation": "Declarations are not automatic placement or authorization",
+ "use_cases": [
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.substrate-bindings.md"
+ },
+ {
+ "repo": "railiance-fabric",
+ "id": "capability.railiance.fabric-graph",
+ "name": "Infrastructure ownership and dependency graph",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Schemas, validation, graph queries and State Hub exports",
+ "limitation": "Graph assertions need current owner evidence; not an enforcement registry",
+ "use_cases": [
+ "U09",
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.fabric-graph.md"
+ },
+ {
+ "repo": "rapp-openbao",
+ "id": "capability.railiance.openbao-package",
+ "name": "Managed OpenBao deployment package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Helm values, package deploy/status/smoke/rollback and custody boundary",
+ "limitation": "Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit",
+ "use_cases": [
+ "U04",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "README.md",
+ "docs/retained-s3-handoff.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.openbao-package.md"
+ },
+ {
+ "repo": "rapp-postgres",
+ "id": "capability.railiance.postgres-isolation-recovery",
+ "name": "Database isolation and recovery package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures",
+ "limitation": "Host-loss proof and consumer schemas stay with their owners",
+ "use_cases": [
+ "U03",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.postgres-isolation-recovery.md"
+ },
+ {
+ "repo": "rapp-user-engine",
+ "id": "capability.railiance.user-engine-package",
+ "name": "User Engine runtime package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Pinned deployment, dedicated CNPG, ExternalSecret references and rollback",
+ "limitation": "Domain, identity, PDP and custody authority are separate",
+ "use_cases": [
+ "U02",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.user-engine-package.md"
+ },
+ {
+ "repo": "rapp-tenant-engine",
+ "id": "capability.railiance.tenant-engine-package",
+ "name": "Tenant Engine runtime package",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Package declaration, smoke and rollback",
+ "limitation": "No tenant-domain ownership or credential values",
+ "use_cases": [
+ "U03",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.tenant-engine-package.md"
+ },
+ {
+ "repo": "rapp-policy-nexus",
+ "id": "capability.railiance.policy-publication-package",
+ "name": "Policy publication runtime package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Immutable image, non-root/read-only runtime and approved TLS exposure",
+ "limitation": "No policy authoring or DNS/issuer administration",
+ "use_cases": [
+ "U01",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.policy-publication-package.md"
+ },
+ {
+ "repo": "rapp-playwright",
+ "id": "capability.railiance.browser-verification",
+ "name": "Managed browser verification pilot",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Bounded jobs, cancellation, artifacts, origin checks and restart receipts",
+ "limitation": "Pilot deployed; human/agent authentication and per-caller self-service connectivity pending",
+ "use_cases": [
+ "U02",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.browser-verification.md"
+ },
+ {
+ "repo": "railiance-telemetry",
+ "id": "capability.observability.security-signals",
+ "name": "Security-relevant telemetry contracts and adapters",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Signal contract, platform adapters, report exporter and absence/alert rules",
+ "limitation": "Reference receiver is not a second production plane; end-to-end delivery acceptance pending",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.observability.security-signals.md"
+ },
+ {
+ "repo": "rapp-telemetry",
+ "id": "capability.railiance.telemetry-package",
+ "name": "Private monitoring package",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Prometheus, Alertmanager and Grafana package with isolated restore evidence",
+ "limitation": "Private installation only; recurring recovery capture and audited confirmation pending",
+ "use_cases": [
+ "U08",
+ "U09",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.telemetry-package.md"
+ },
+ {
+ "repo": "resource-control",
+ "id": "capability.resources.security-capacity",
+ "name": "Capacity and recovery resource planning",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Provider-neutral inventory, procurement evidence and optimization reports",
+ "limitation": "No payment authority or irreversible procurement; metrics do not prove usable runtime capacity",
+ "use_cases": [
+ "U09",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.resources.security-capacity.md"
+ },
+ {
+ "repo": "fin-hub",
+ "id": "capability.finance.security-budget-evidence",
+ "name": "Budget and cost evidence for security operations",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Budget, commitment, spend attribution and planning-evidence consumption",
+ "limitation": "No verified concurrent runtime EUR risk/cost enforcement for agents",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.finance.security-budget-evidence.md"
+ },
+ {
+ "repo": "rail-knative",
+ "id": "capability.railiance.knative-rail",
+ "name": "Knative workload lifecycle",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Derived rail for activation, revisions, traffic, scaling and rollback",
+ "limitation": "Inherits Kubernetes common contract; verified readiness is not production approval",
+ "use_cases": [
+ "U09",
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md",
+ "declarations/rail.yaml"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.knative-rail.md"
+ },
+ {
+ "repo": "rapp-sbom-nexus",
+ "id": "capability.railiance.sbom-runtime-package",
+ "name": "Private SBOM runtime and dynamic database delivery",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Immutable deployment, private network policy, dynamic database leases and migration/rollback",
+ "limitation": "Product owns schema and ingestion; database and backup authority remain with platform owners",
+ "use_cases": [
+ "U07",
+ "U12",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.sbom-runtime-package.md"
+ }
+ ],
+ "repositories": {
+ "access-engine": {
+ "head": "16ca97b2776789f730cc7049a2d6533612faaccd",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:f6c14f5f824fb86ac06368fb9c52e60d627ee42810817a45723d34a6a9a178a5",
+ "README.md": "sha256:7ed086b4d153ff067f4f8d3665891b65006a4a74cec8e6fb596e7e1dbd097b38",
+ "SCOPE.md": "sha256:dd1484a32a313135e69f16dbc833d768467491438bbb1d9127c2b098061edb60"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Authorization Policy Evaluation",
+ "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "flex-auth",
+ "path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "tags": [
+ "authorization",
+ "policy",
+ "flex-auth"
+ ],
+ "consumption_modes": [
+ "source module"
+ ]
+ }
+ ]
+ }
+ },
+ "activity-core": {
+ "head": "83e6446807c4b36f3aa5023a5c16d4c7df8bd3df",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:8aec524060edb9309af679ef38bc5549aa3650752634d23977c7ae57c45bbefa",
+ "README.md": "sha256:549e7878b27bbf7edc9e958c7afbacd3eba773b082151d226b5f0a14af654f9b",
+ "SCOPE.md": "sha256:820aafbff2f7d1c314c0c270d745468172a0500d106ab276216e0eeb702ca7bd"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.activity.event-coordinate",
+ "name": "Organizational Event Coordination",
+ "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "activity-core",
+ "path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "tags": [
+ "activity",
+ "coordination",
+ "automation"
+ ],
+ "consumption_modes": [
+ "informational"
+ ]
+ }
+ ]
+ }
+ },
+ "agentic-resources": {
+ "head": "65b3a5cb6bf3eb214b492b95a38f2eb729f89709",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:81dc51facb26c36ab6b7bc85a22802bbf89c88558c7cb3e749e0c205a0ba24d4",
+ "README.md": "sha256:4e890352ff6088a2e018a11738a1959971b07b584a4ca3b8fb2aed88b9ea26f1",
+ "SCOPE.md": "sha256:ba38e80cf2a374063eb6b6b60211a02e32bca5d3b260aea5f8a70978f67a5627"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "approval-engine": {
+ "head": "e1649617e8ad321f79632d5fd33e973ae5d5ae51",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:06dbab07ed14fa43d0fc6b54eaacc2b3f7b4a9196050e3f73c9c4e58086636c5",
+ "README.md": "sha256:4d095613decf7d64012e19d4e76823296bdbeedc82cae17c9b5cf752671b45c9",
+ "SCOPE.md": "sha256:1425d4ae5942cf09197719b1f66989c4d5e8d2d5627c7fa79dc6151908b03990",
+ "approval_engine/api.py": "sha256:4c686aa3b4d645c4ad2a84a5f299db9b013b59a5c747853837adbe3a3a05be63",
+ "docs/production-dependencies.md": "sha256:c2244e4a72dc174d0f5e9fc7da6b56fac2596d4b553a11c738976404cef05fa8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "audit-core": {
+ "head": "f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:cffd7a3730ea54dab4e745329005813011bb821d9922d9a6aff3977ec46162c7",
+ "README.md": "sha256:c7ab22ae28d07afc746d7cb10e168291dfbc3207be60cd32ec416ff0f27f51f1",
+ "SCOPE.md": "sha256:358ecab2cf8e32567f2220c5cd3d9b3f7ce9349faaa8d89bc464d5f82f09e80e",
+ "docs/stream-completeness.md": "sha256:e3c4b1e0ff5bdd648077ae0b6473a0094ccb4a65e8ce398df11aa43faf0d65cf"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-08-16",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.audit.event-retain",
+ "name": "Audit Event Retention",
+ "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.",
+ "joins": "operations.audit",
+ "provision": "data/capability/audit-core-operational.json",
+ "vector": "D4 provision / A4 / C3 / R2",
+ "domain": "infotech",
+ "status": "production",
+ "owner": "audit-core",
+ "path": "registry/capabilities/capability.audit.event-retain.md",
+ "tags": [
+ "audit",
+ "retention",
+ "compliance"
+ ],
+ "consumption_modes": [
+ "http ingest",
+ "source module"
+ ]
+ }
+ ]
+ }
+ },
+ "coordination-engine": {
+ "head": "c401067842072b75717f76480dd6e7db1836059c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7236c8dc284fcbe81c47eedde25e197d5a911a73267bfd448f8930140d2f6fd9",
+ "README.md": "sha256:fa6812b74956387a85cf07ccf3ef05f79aa07ca937e6f5d073edd318238e768d",
+ "SCOPE.md": "sha256:e207efd8bf40ede4ad6c2705121cefc809467dab72746054850c62f2e2e3a12e",
+ "spec/cross-owner-wait-mode-v0.1.md": "sha256:42f51f8dd1523a1243797fc3fc21a0d6d756c4e9d9d77142296735c1ef6de915"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "emergent-security": {
+ "head": "4c6fda38298fa50665ead41526b893adf069d335",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:64daea4874c8d8822a52437b15ffc8f9d5e30491dd0b61d0958bd186d1dc7269",
+ "README.md": "sha256:40e23e0233f5b33949fc25047cea13b827af3d44bd73e00b3c4eb8b1feb338cc",
+ "SCOPE.md": "sha256:b90916cef962e5999c8fee886f5d0b68f55707a38f428a20d0390d2bf2c0d603",
+ "knowledge/cards/start.md": "sha256:698a18f4a8f97a43da75ed0767aa0425c970e17c04a9cbea75cfab719564cc5d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "fin-hub": {
+ "head": "8f527c6705bbf5d7ffed43559411ca748bec8fe4",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7697ddd29c8324197c925378c55eadcbf89899903af4321d0325f26e52ca3d19",
+ "README.md": "sha256:f35fb3d21f6264f8fab0ab204b79c81f82e6f9764ebc06aa0735d330ad854470",
+ "SCOPE.md": "sha256:2ef38e5d1a36dedfa7785f128a35b0058ae7e123bba834efa41dcc809d18a631"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "gate-house": {
+ "head": "bc890c4d050a2e726ce8988a8260ab9caea133e3",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:013692bbb52ce85dc1ad8dc95292c64d4e7c2c58714549a1e23331eae5d556e7",
+ "README.md": "sha256:e2c7b7c94884260f4e3e33d963544299a6076bd63729baa0e03e0bb34c423002",
+ "SCOPE.md": "sha256:5c7b9bc38fa7887f2188c34cb1110e37f47f2b9ebc4f33e85ef96ef80a1c9a79"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "glas-harness": {
+ "head": "7b1557ba14f483569b90ebfdc2d0136fa69602fe",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:d9c256243816e372757a256b0c2b87f5a0333fb1d65f0488b66600f985553cf2",
+ "README.md": "sha256:23179d6a1760e442fa025ac73aed050ee0141e985e87979c0a05781fdc2ca350",
+ "SCOPE.md": "sha256:5a2b96f8a3aa7218ad43dbd72abc89319a44c329298e973589f49c4ec354b0c6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "info-tech-canon": {
+ "head": "3d206a56f4ece439f6ee87f9ee4d1800ab82166e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:aa739b333929bc5d36a0654ef5afea1b9dedabad38da0c335f3d8b0f17a38bad",
+ "README.md": "sha256:55f21ebac58356dabdd032d4396a6eb0e3af4c5d13c900667fb79827879b58b1",
+ "SCOPE.md": "sha256:342ee894c1d6d64da76ff521eeb3c21279c55c6e7b7f0892b34f54c2d89e91b3"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.canon-service",
+ "name": "InfoTechCanon Service Surface",
+ "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "info-tech-canon",
+ "path": "registry/capabilities/capability.infotech.canon-service.md",
+ "tags": [
+ "canon",
+ "infospace",
+ "service"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import",
+ "http api (read-only, local)"
+ ]
+ }
+ ]
+ }
+ },
+ "informed-decision": {
+ "head": "ee6a65b80a0fea1a914dfa31434b903669656c09",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:b543c2d80b97182393e2d080ae8fd3759f2e956a89306c2c568c0010e7425eeb",
+ "README.md": "sha256:7d2bcb581348c4cae55b59550eb7a9ef34abaa928375acae28ec41878c5abb7b",
+ "SCOPE.md": "sha256:ab352aa1a88ca53106517b14eafc62a3cb6504519638835227e6f852b3cdf68b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "issue-core": {
+ "head": "de368271f6ffc06353ec409998a0d6d0ec0bf25e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:fb6e1f77fed6b5ae110fdcfb92dd96263050c1907702a1f380895930a8ad0dd9",
+ "README.md": "sha256:00281e7af8fc9c8f9c41a46a71a959faea4c6db1c08c6c4b5b3fe3a5808b271a",
+ "SCOPE.md": "sha256:c43d8c15cf0b85dd8558bc0031a0662d668de9c0394eb2045a7735d044d7ed0e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-07",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.issue-tracking",
+ "name": "Universal Issue Tracking Coordination",
+ "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "issue-core",
+ "path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "tags": [
+ "issue-tracking",
+ "coordination",
+ "multi-platform"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import"
+ ]
+ }
+ ]
+ }
+ },
+ "key-cape": {
+ "head": "1344fc80e56315c5c99f58993f9ee02ce79e8a76",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md",
+ " M src/internal/server/oidc/authorize.go",
+ " M workplans/KEY-WP-0039-openbao-negative-probe-tokens.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:b22cb440691bb399b064ee10ab1a03e1e07838da1051bf6235fbfe2cf820eb10",
+ "README.md": "sha256:953586cca96d01e9240448186b922c9b8ea03827a7f314731e9a9ead4f19d0d3",
+ "SCOPE.md": "sha256:20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.iam.key-cape",
+ "name": "KeyCape Lightweight IAM (NetKingdom Profile)",
+ "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "key-cape",
+ "path": "registry/capabilities/capability.iam.key-cape.md",
+ "tags": [
+ "iam",
+ "oidc",
+ "netkingdom",
+ "security"
+ ],
+ "consumption_modes": [
+ "service (self-hosted deployment)"
+ ]
+ }
+ ]
+ }
+ },
+ "kings-guard": {
+ "head": "af02e2547598d6ec0e83f482d9ea3ef943ea67b7",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:923fd2ce1a22c29d486f562071a0a251c16b64fbb5d73490cac4d373daa0c83d",
+ "README.md": "sha256:57983baf2275d9afbd5109782cfe1f3559145f4ee906ea97345c6d517a5e4fc7",
+ "SCOPE.md": "sha256:8e77e587c67aa419df35d4f642468bb57bc30df65e1ea6a922fdca282ea9ed63",
+ "docs/SecretUseSnapshotAdmission.md": "sha256:7fd32df4c8203d83aa14334ccaed0700682730679539a5c657d93f5efbf5d31c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "maturity-engine": {
+ "head": "2f1de542cc8f24a79452f906d99f95be39d8b6a9",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:d17b9169ad82b60450244988dafa3ab4a515790ee08903a7fcee9df5fd8eae0c",
+ "README.md": "sha256:66333483d63f45c2dd744661610d062440569955bb150927ebd9d21d72b85daa",
+ "SCOPE.md": "sha256:653f47b0d370dfdb45c723b361f6fee53be7e384732c201443d7238c04d155bc",
+ "docs/claim-contract.md": "sha256:082490f3651db8f771dfd72c42f5c5df4c3317361c9dec1ec0f0dc9814f80a2a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "net-kingdom": {
+ "head": "1a36e857cc5aae6fe738f794417126c46dd94627",
+ "branch": "main",
+ "dirty_paths": [
+ "M WORK-RECORDS.md",
+ "?? intakes/NET-IN-0005-single-use-setup-link-mail-handoff.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54",
+ "README.md": "sha256:25172bafe09fd3a26467d44a74ca90e8f123bc81bfa2784a483837c0e9efe9fe",
+ "SCOPE.md": "sha256:0f896db98d03aa7460d88999b738ea00be87dd34fe0b250f11bf0b6f170b0172",
+ "SECURITY-COMPANION.md": "sha256:06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643",
+ "canon/standards/security-case-types_v0.1.md": "sha256:a4fda906d5138d2594a1f8d047c7c28e1cdf96b1eae051f543b9a5e5852bcb5e",
+ "tools/custody-record/README.md": "sha256:ec653a17b4f35e56d37824c1db15f1ea6b1761c564863fca4ea168a3ed625000",
+ "tools/emission-cadence-profile/README.md": "sha256:a4adadb43b0d55f7d705d89166ef63ce01aceeff742b260039263dda92ce85b8",
+ "tools/posture-feedback/README.md": "sha256:83b8de1da01de77318e950c9266e5f2755091dbd0e5a318d75bc5cc8f556ef18",
+ "tools/posture-feedback/posture_feedback.py": "sha256:629779308e4965be3aabbb76f105fd9c8b532c64987915d2ccab5b543273bfe4",
+ "tools/security-bootstrap-console/README.md": "sha256:bc1af3598d667346370a476d0765bff1f0c3ebb57f751c4da6e61a4add29f30d",
+ "tools/security-case-types/README.md": "sha256:03e1c503bc60990214d5b1a7cec8878cf47fc892d82c82d682f3490e33dc71f5",
+ "tools/security-scenario-composer/README.md": "sha256:447554e04816c0bc815f57d9138430d354790c9f3813e48bbd38fee034f98015",
+ "tools/security-scenario-composer/security_scenario_composer.py": "sha256:9f0cc69930aa8ee2cc3fb92236e6a99728df17b8c0fe36e1250241c38fc01c4f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-08-23",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom Security/IAM Tooling Suite",
+ "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "tags": [
+ "security",
+ "iam",
+ "kubernetes",
+ "conformance"
+ ],
+ "consumption_modes": [
+ "cli",
+ "local web ui"
+ ]
+ }
+ ]
+ }
+ },
+ "ops-bridge": {
+ "head": "190ef1e188e12c606f1359325fd9fdd1dbef29e2",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:2134f693649803414d7ab2f9839416f1fe06169aa86732e64c9dd962c35f412b",
+ "SCOPE.md": "sha256:63cd52d1cdf38e72af0285c25aa2292f959080c6befe565a1d2690747a813975"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)",
+ "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-bridge",
+ "path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "tags": [
+ "ssh",
+ "tunnel",
+ "ops",
+ "connectivity"
+ ],
+ "consumption_modes": [
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "ops-mason": {
+ "head": "d86ad141befb6800468f5132d4c7c9ce2f852bb5",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:482269782f4fd337f83674b4e2c36a5cd9f8eb694918e55709e9a7e78a003c71",
+ "README.md": "sha256:9e0c9b5c76c3a2d4aeeaf032579e96d8da9056662ac4655b8885b16ed7f3bca5",
+ "SCOPE.md": "sha256:7da4c8c660b1c8d15675768a5f6040303fe3ca3b4f05b1bba4633be3cc6e0c77",
+ "docs/construction-plan-format.md": "sha256:468678089885193b8fefe3993cd6878bbdbeaaa64aa088b18b90047b696ce564"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "ops-warden": {
+ "head": "6d2f1be9691b19e826898a2166ae4451e4802ae2",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:3e9382fefa52ee0970dfac133cc799656e5034760b26dccc1bf9bab65fc538d9",
+ "README.md": "sha256:1f11071d7fd651806da180272cc4aa4e3ae19d7bad0e321aa97c7dcaea7f2857",
+ "SCOPE.md": "sha256:47b47468746617c84f8411ac671bb488ab740b4c3133401f5d7b55d3d024345f",
+ "wiki/CredentialRouting.md": "sha256:544530cc13052e33d2135fa3b0583e620010abb0af86079be6d8e09c36844646",
+ "workplans/WARDEN-WP-0044-security-case-follow-through.md": "sha256:c0029545bd2d8c015ae0cac87f6d53a2e5ee935b7bf5d5e1b81bf1ff5dbdc4f8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-17",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "SSH Certificate Issuance",
+ "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.",
+ "vector": "D4 / A3 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "ops-warden",
+ "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "tags": [
+ "ssh",
+ "certificate",
+ "ca",
+ "ops-warden",
+ "openbao",
+ "security"
+ ],
+ "consumption_modes": [
+ "CLI",
+ "cert_command subprocess"
+ ]
+ }
+ ]
+ }
+ },
+ "policy-nexus": {
+ "head": "f784f017b0822f34c785f0b34c7c55fcf39c9d99",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:58b95e4e158da6b978b9bd3a2ecbaf7f279553098906a8e8ed404afd3d582494",
+ "README.md": "sha256:cc3a825974a8cea0c737a16cc8b06d3fec56e10f593c6ed7169bc54786df5a81",
+ "docs/publication-contract.md": "sha256:65a9a233201ba966db0f2c5465ff3b0684147af3075f43180b8eefb3e059abb4"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rail-kubernetes": {
+ "head": "35159e49c1340b7a0e30c49188975c8839d346f6",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:72a64030f25f0474e4f3837860d3eba60e3d5a1c2b31e8f6d062e15da8f209c4",
+ "README.md": "sha256:89c6c0155f3d9829c7d0ff33f27883ed2fdd8f6d857eae013656136467296cd2",
+ "SCOPE.md": "sha256:00fce3ee7cb4bbbd7eff210adb2a03c533f2b43870f7327cfc35f28354bb549a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "railiance-apps": {
+ "head": "706461b845086ee2df8ce9acae3dae7feebfffda",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:31060dc1738aa4540f78735019359a276ece39dad8afbf1be740713bebbe65e5",
+ "SCOPE.md": "sha256:8243098d979d4258c9e7f9e39b5de24ce78b521cd82a7e199028df30bc130b14"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Railiance Application Workload Deployment Tooling",
+ "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-apps",
+ "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "helm",
+ "deployment"
+ ],
+ "consumption_modes": [
+ "cli (shell scripts)",
+ "helm/kubernetes deployment"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-bootstrap": {
+ "head": "ae00b2652737aaf18358431e66f59eeb7c01e16b",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:c1840c7df1cb87d72a22a7b1bc95417687a0a9d9355b6ffb50392d8bf6ae241f",
+ "README.md": "sha256:3acd2adcf4bf3c3801be99c95d96da8ac7638f5a21c03d6f987505402a00afa6",
+ "SCOPE.md": "sha256:4efdd7f7817e39c01d6024e2f8bcbd70c2b10b90baf9f92855bb3967cd629831"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "railiance-cluster": {
+ "head": "12d1e881ff2086566712fbc591db293b38ea2bcf",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:a00fe12563c77734e19b538ca8307d44fcfae9f040bec284c705146f99bb3490",
+ "README.md": "sha256:5c82b7c31adb126e1f95ccd5057156888fff73a05828abd5e8ab3e013c7fe59f",
+ "SCOPE.md": "sha256:e4f6a8dd3d72a1f04f0d94721d57ca2a4c7e98790a8373876a5005b87ec5d8a6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Railiance Cluster Runtime Bootstrap",
+ "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-cluster",
+ "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "iac",
+ "bootstrap"
+ ],
+ "consumption_modes": [
+ "cli",
+ "ansible playbook"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-enablement": {
+ "head": "51a7c4cee68b48ed7a236e661b39c1d3cca92063",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:5a562d3f019156969948315e8072ce925c81e21d027a47096e21c8535473a588",
+ "SCOPE.md": "sha256:2a554aef6d6803f1a176ea3bdb3bcc0f077f03d131b0a897a5ec56bd6df85f88"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.ci-enablement",
+ "name": "Railiance Developer Enablement And CI/CD Templates",
+ "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-enablement",
+ "path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "tags": [
+ "railiance",
+ "ci-cd",
+ "developer-enablement",
+ "forgejo"
+ ],
+ "consumption_modes": [
+ "ci workflow template (copy/reference)",
+ "cli (promote-repo-to-forgejo.sh)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-fabric": {
+ "head": "96d19127125e85bdab7ff0ff79fc3ecf7d19045e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:1cdca96e57849709aef333c88ace903f9573eeb2894f52246e473928c7e3846c",
+ "README.md": "sha256:8705fec071bfe75d3bdfcc5677ac8801f5d66b5ee3a49043cc8d019443a1fb8c",
+ "SCOPE.md": "sha256:b80d4a8b39c2920818ba4069318f888e56736a0f0e8d40f3a72568b0472fb36d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.fabric-graph",
+ "name": "Railiance Fabric Ecosystem Graph",
+ "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-fabric",
+ "path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "tags": [
+ "railiance",
+ "graph",
+ "ownership",
+ "discovery"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli (validation)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-forge": {
+ "head": "a15fac8e938c11b041eb39386f05b63d46ae566a",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:310d6ad12a1f621c05396a3d6aab19ff8a6bacc4f67814e64d07f09da124ea54",
+ "README.md": "sha256:e10a07e1b8935a444699ee456f6d3f98e02109d7e453db41823a31261d181b2a",
+ "SCOPE.md": "sha256:dc4c179e33898e32fae7b2e8e30e88a66d9efc3ad2f488651ccedf600274c1b8",
+ "workplans/FORGE-WP-0006-independent-secret-detection.md": "sha256:fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Railiance Forge And Artifact Infrastructure",
+ "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-forge",
+ "path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "tags": [
+ "railiance",
+ "forgejo",
+ "forge",
+ "ci-runner"
+ ],
+ "consumption_modes": [
+ "cli (operator tooling)",
+ "documentation/runbooks"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-infra": {
+ "head": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:00d05aeeedd6e11527fdacd35070a37c0b67ff16914ed6ce0f634baaded5f1ae",
+ "README.md": "sha256:dcea6117a34fa466e75c7943fb43dcfc42eb8f6f6c9c5207458eb7621e694ced",
+ "SCOPE.md": "sha256:18cdf933d658eeddcb68528bb9c222ceb0866d8c5f0ec4bb3ea955de762c3c33"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.infra-provisioning",
+ "name": "RailianceHosts Infrastructure Provisioning",
+ "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-infra",
+ "path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "tags": [
+ "railiance",
+ "terraform",
+ "ansible",
+ "infrastructure"
+ ],
+ "consumption_modes": [
+ "cli (terraform/ansible)",
+ "gitops"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-master": {
+ "head": "865c3bed86b3992244b29d6f1d6b8ebbe8db78c7",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:dacbc59b7d42412e3e65d3d16ce058d0bde486e16435112c7abf83b696572eda",
+ "README.md": "sha256:4a706ec49c177ef13343ea3e56e61bf5a7bd6c601562b301a87189690ee800ff",
+ "SCOPE.md": "sha256:63ebaef0397795257650521e6f3be6b46cca1142f53b1865d9df9ed0c0530fc8",
+ "docs/netkingdom-security-consumption-contract.md": "sha256:be50d016b7cd14ac27127a2c641c4a9a0c8d1605495ba62ba5cf30ef0f65bab7"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "railiance-platform": {
+ "head": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:12c6540735af591f7a4a9fe85ff10d3cd00eec55b5b6b1ddf148abf2d3ac9a9c",
+ "SCOPE.md": "sha256:bb18dc91f3be50337d7ebc81d269f1234f65919f7014eef990b09c3df54a5347",
+ "docs/openbao.md": "sha256:9c92b0e30c81351b258da44df46720f4cdd2941488a7ca2f8687b8937da8099b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.platform-services",
+ "name": "Railiance Platform Services",
+ "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-platform",
+ "path": "registry/capabilities/capability.railiance.platform-services.md",
+ "tags": [
+ "railiance",
+ "platform",
+ "secrets",
+ "postgres"
+ ],
+ "consumption_modes": [
+ "cli (shell/python scripts)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-telemetry": {
+ "head": "81d905971c38de9aaf11088ba605e112152d8268",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:de793b403514f8c7984ba7c20608ecca9d1fea422d3fcc20ec186a0d7c2f2f47",
+ "README.md": "sha256:4fdb18006ab2e5a0c4d72127324a88c7abacb55a30b80de6a95e55ce46c56468",
+ "SCOPE.md": "sha256:206279dabc14fe1a44ba6df8ad2b664cc91d3460379b732951d3e29bb6a814da"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-openbao": {
+ "head": "13ab9144bbb1d88fe760362df91a83c8b34e4e66",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:28b74eec385f6cef4f8c846992f10b6067ce436cb9d52de19338dd57c111f90e",
+ "README.md": "sha256:9964de809b5b645c24871774621747f9d6ce2f069443d507b9ef9616ee255d85",
+ "SCOPE.md": "sha256:cdcf80122c8c55dfe697312d6cd67b76861f322cae9816b85123aefe2345c674",
+ "docs/retained-s3-handoff.md": "sha256:d1b2f27f740176ab16f6b4b589b0c25dab41c923d6f377d84059ec8369c0a3b6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-playwright": {
+ "head": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:b719684974f35812708e562cd8c0b4573662ae22fd12f4252bd4abaca627882b",
+ "README.md": "sha256:e64daa81de97b3d2c6afe4028f9a2d4aca6e9892ac36a798316a8d8e8fa80ce8",
+ "SCOPE.md": "sha256:c1489a7b75a87a3a8b00edb9b9497d256b0e5ec72d5fe5236cc038745215dc91"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-policy-nexus": {
+ "head": "d3fee97d32ad47e3a7e3201a9c5b7209b4333fda",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:a3ae592c56822697ad24bd64851578b5b17f1a9bd8622a247e3e425a5de594c7",
+ "README.md": "sha256:41c1bfeaa90d11f4778d22a3e58a97cb9653d153712657ff2e3aecc45dda240f",
+ "SCOPE.md": "sha256:dfb85b48d6ff68a9945178a5fc1b85f1d342f765d046a58285e7edc52f517438"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-postgres": {
+ "head": "03744030c9258e920f6403a9ce184a26d7b75268",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:2a9ce4f5eb8fbbffbaeb8532a677c855b97973a6028536520018ccd1796a4735",
+ "README.md": "sha256:298079470d931ab78d79a0a44274f207606d6a877740d79a8925d9c37f8ff15a",
+ "SCOPE.md": "sha256:5919caed210fc8c6977845b3469ebe419b0216f6aafa69e01a40b9d12d6050bc"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-telemetry": {
+ "head": "17053dbc47f7c22efd67fd90d06d108d154835fa",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:fc3ac98e40f67384f3ff94ecf223d89f0713c031ba5ca6093320278b269e4276",
+ "README.md": "sha256:fd797950ffaa67123773da7cdfa6e45984f367f820caba7c10e0fd300f96d630",
+ "SCOPE.md": "sha256:3776b5924bd90f8114e77f7bbbcacc7f3713cd56ca26440a3e4bce792ce8b142"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-tenant-engine": {
+ "head": "c160be23577ab4d99ee2cd008deb455b07f0597d",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:5eb0a651c1fd20a7d60a3a30060431925d2fb3ed64cf6ae22293dcc5546c7251",
+ "README.md": "sha256:05596b39a47fa22cc4e966714c4c755220894ca54c7759cdd3088e78b31c00e6",
+ "SCOPE.md": "sha256:fc0c5a80f37c410c10eb29a7541ca37088668e5f76d64ece4e889c7f0145a13d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-user-engine": {
+ "head": "15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:891150bf022c2456d62c234db10172a16cb2e1a9c9aa5284aafd5d89755a82fb",
+ "README.md": "sha256:f1d89f8f1c1cc67f2b79bd2bd3dd94b9a895fcaf308c44b5d8d23fc7b9f1bb7a",
+ "SCOPE.md": "sha256:732fd68b194d034e81faf170d5a69e1d61cfab5385457b93a5f5689a63a2f184"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "reef-railiance": {
+ "head": "ffb9e272ce1489cc37cc6388873558d8ba56c239",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:deb16216816dfcc1c42c2d826b6fcd496d9c0e6789169c0312e0bc9d0fa88781",
+ "README.md": "sha256:31480d89ba5a8f868c28c2b09f62a51d662aad6a0ec93a56340fed39a789c395",
+ "SCOPE.md": "sha256:a273078d5dc7ceb72bbdf5473b5146cd624411b08bdc6b1e7d78113c4e675cc8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rein-aharness": {
+ "head": "398949a3d34b6c9faae0fa1d0ff0aa039565aa42",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:f9a35aa6f9c4803a1d978aeb487ba475830505670871c564a5fecacb77b11ec4",
+ "README.md": "sha256:da0f62f0eda7bac0018151b73ffa2bcf9cab9dbd796adb285c738c435853afc3",
+ "SCOPE.md": "sha256:d9979b35ec0909f76e6c34a0f40de2e5cbc700d1bb5c7b5f73c6e2b20e3cbc48"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rein-openweights": {
+ "head": "e1fccb39b738a5381a9de6e1d799f124797798ce",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:e1284da2b06a44d93e050638d34ab8abf15173bed77f82788ddcc32939359cd6",
+ "README.md": "sha256:0eb6e6225727770985c4b6442acdb17e8a0d5e707c25aaeb561e47b921f6aa74",
+ "SCOPE.md": "sha256:f7791a1f858cd7225e217b9b53213066e44ddd7ac4a1e748383a2c8756d3aa3c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "repo-manager": {
+ "head": "7677b00f69cd6362ac16a1021dc180ec6df4ebfa",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:62afa83ecb1fd733abce07489d48d0d7c7e14ccf9def9f561c118cf8ec5409b2",
+ "README.md": "sha256:9330836f65bde7466f7a1414f4a6df28682acde710aca0ea3e45be429622c75c",
+ "SCOPE.md": "sha256:bca5806e11f04e4550ce5c147d4d98e6c0014fed1f17fa3f134e5b193adec43c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "resource-control": {
+ "head": "3604d468f86ede7d320f4d22dd4aea775306b53f",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:f81326a4f18e284d8f7ca73f71dbe9502b7a75b1d567074e9bec48ebdd968309",
+ "SCOPE.md": "sha256:2daf0899d730bb6da30bd471f364061b86428cb5e38573df9d5551aff9dd5e29"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "reuse-surface": {
+ "head": "a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:511d1029a7aefc67b68a6363ed3ce8f803f2516c00062ff805263dffe26c771b",
+ "README.md": "sha256:6e4dc8d382612320cc2c8558ad583b0564ff594a7032b33137cb7a61887621cc",
+ "SCOPE.md": "sha256:2c30972ceb2a643147ce61c04c6919b16797b6754c2a407df998c81ce76c9c30",
+ "docs/RegistryFederation.md": "sha256:bfc80be5eac1250189ac2ba726a6188c03928ccf1e9992ec58cf59e58009f289",
+ "schemas/capability.schema.yaml": "sha256:3b0172baa4e6d54f400e911af6adb0d86b4576b86d7aea6d8f18c3fce3b8ae3f",
+ "specs/CapabilityMaturityStandard.md": "sha256:3eb3c7e1dd51b85e993c9936b2a176f6b3998e6198666695bdbb5b7ba7d8b17c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-10-13",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.headless-browser",
+ "name": "Headless Browser Automation",
+ "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.",
+ "vector": "D3 / A5 / C2 / R2",
+ "domain": "infotech",
+ "status": "reviewed",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.infotech.headless-browser.md",
+ "tags": [
+ "headless",
+ "browser",
+ "automation",
+ "playwright",
+ "chromium",
+ "testing",
+ "screenshots",
+ "extraction",
+ "firefox",
+ "webkit",
+ "selenium",
+ "puppeteer"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source adaptation",
+ "JavaScript library",
+ "Python library",
+ "cli",
+ "service API",
+ "container"
+ ]
+ },
+ {
+ "id": "capability.registry.register",
+ "name": "Capability Registration",
+ "summary": "Register a new capability so it becomes visible for planning and implementation reuse.",
+ "vector": "D3 / A4 / C2 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.register.md",
+ "tags": [
+ "registry",
+ "governance",
+ "meta"
+ ],
+ "consumption_modes": [
+ "informational",
+ "markdown authoring",
+ "cli",
+ "service API"
+ ]
+ },
+ {
+ "id": "capability.registry.validate",
+ "name": "Registry Entry Validation",
+ "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.",
+ "vector": "D4 / A3 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.validate.md",
+ "tags": [
+ "registry",
+ "validation",
+ "cli"
+ ],
+ "consumption_modes": [
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "risk-nexus": {
+ "head": "b877231d66e1289dc32fda07ed2c61dcb3e970dc",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:38783193bce6e05a502463a0965341fe7940cc98d72c800c7d70a36e9defae83",
+ "README.md": "sha256:05dd751b2569801f5bc0971b3ebeeb263b3488a880cb334c3b4f076ed15d6ceb",
+ "SCOPE.md": "sha256:82e5f7476f5ebe327bc720691f858f3dbac3990da6860ac8114f83c3b287394c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "role-engine": {
+ "head": "d231241dbfeeb541b34243f4022883aa6417a1eb",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:06678fc42521c91514ef9684674479c70ae47ee829e7a1e5e6c5d7ae54c0d7a2",
+ "README.md": "sha256:a98b021f59566bce52d02b7f7e2c9f2d3f637f9357037c54d752c69a13cb15bf"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "runbook-tutorials": {
+ "head": "df97fadf5decfcdb5c3c6ab90211226335ffdf8e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:6a96bddd785357c6084d3137c66c188b9266f9e69cd1ad6e2c2562106a296b63",
+ "README.md": "sha256:747bd15db6182f5f473a4a774ade282d14341f63ee427c0cd862cbd3a6c0a6d0",
+ "SCOPE.md": "sha256:5da9ba54026809314e6c0d97894642ca705793cb752c8a9cb535551cef9aee5c",
+ "docs/pack-spec.md": "sha256:075a67476ba9226e79bc955caa039c9c1bad6ead96a7e61fb8e68b8ea56d2a0d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-09-29",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.infotech.runbook-tutorials",
+ "name": "Runbook-tutorial engine",
+ "summary": "Engine, local UI and CLI for guided, parameterized operator runbooks; packs live in the repos that own the procedure.",
+ "domain": "infotech",
+ "status": "active",
+ "owner": "runbook-tutorials",
+ "path": "registry/capabilities/capability.infotech.runbook-tutorials.md",
+ "tags": [
+ "runbook",
+ "tutorial",
+ "operator",
+ "guided"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "sand-boxer": {
+ "head": "b06d94f02b037764ff41c73c8ab43f4c8f5d309d",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:a87d81568311ae5bee941183f10eb23fbe60541dc41d2c5a7fbfbac52a89dd37",
+ "README.md": "sha256:d5038e80f041429f8f8f8e2fc9b2b45a223a5478731ab7c75592378a174e0d2a",
+ "SCOPE.md": "sha256:68f4623825cc54ebbbe777b0abd78a358cb3232bf2f6577980c6fc945a80ed7a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-22",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.execution.sandbox-provision",
+ "name": "Sandbox Provisioning",
+ "summary": "Isolated execution environments for agentic development, e2e testing, and bounded automations \u2014 profile-based provision, TTL teardown, and State Hub lifecycle registration.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "sand-boxer",
+ "path": "registry/capabilities/execution.sandbox-provision.md",
+ "tags": [
+ "sandbox",
+ "isolation",
+ "provision",
+ "e2e",
+ "agentic",
+ "execution",
+ "profile"
+ ],
+ "consumption_modes": [
+ "CLI",
+ "core library"
+ ]
+ }
+ ]
+ }
+ },
+ "sbom-nexus": {
+ "head": "07e998d9abfd4e4fcc74db9e292ed22c6f407522",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:0e3eed8bc510109f615d0739502cf15c2aa5a025e74db01a6cedfb316f2d9e58",
+ "README.md": "sha256:8cc888ebf6370cabb1cfe1539b11e372e3f432dda2aa303c8470a5fc32f70844",
+ "SCOPE.md": "sha256:32f6e853b366c5097b3ab1a3d05413a0091ec48585de4def7adcbacd57da02ba"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "schema": "reuse-surface.capability-index.v1",
+ "repo": "sbom-nexus",
+ "capabilities": [
+ {
+ "id": "capability.infotech.sbom-management",
+ "path": "registry/capabilities/capability.infotech.sbom-management.md",
+ "status": "emerging"
+ }
+ ]
+ }
+ },
+ "secrets-engine": {
+ "head": "d379a3dfba73c42cd97f4d9cba3a02d705155e4d",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:188dc6d99ca9a441e7389a3715ba48275ab6e8745deaff686bd27d2aac34d678",
+ "README.md": "sha256:6c85cc0e1f57fcc06ef00368d0b7ea1a02657a8a1358bebc38be446be20deeed",
+ "SCOPE.md": "sha256:d77af9b9bab0383928120b80ed4a70f471cf244e22718ee6feb6039a70aedf6f",
+ "src/secrets_engine/decision_check.py": "sha256:a8c9a45320b752871bf6b8238cc25074e8f08ed29fee131e99030606fc091e6e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-24",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.infotech.repo-template",
+ "name": "Coulomb Repository Template",
+ "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.",
+ "vector": "D3 / A3 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "repo-seed",
+ "path": "registry/capabilities/capability.infotech.repo-template.md",
+ "tags": [
+ "template",
+ "bootstrap",
+ "state-hub",
+ "onboarding"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "informational"
+ ]
+ }
+ ]
+ }
+ },
+ "security-canon": {
+ "head": "1664a6def20be2759a1e575024563efd27c9f36f",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:d2e8ebdbc9500b613162c45145f50fd88471beeca3e96ebe6c2df5d85d07539c",
+ "README.md": "sha256:0ab66ab06438b14b86cc67ad0084ef88126618a283a37baed663176709ef1236",
+ "SCOPE.md": "sha256:74ebe3d738fa554be113866e82cd2b049c49b4c7a302c61f21ffadf31c297ce8",
+ "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md": "sha256:f79a6dfe1067028810677426cb7e8c5be16735074121437f3cc97849d08fb72b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "state-hub": {
+ "head": "8ca9201f6a1445c66fe1d1b0ba0c8d044c131647",
+ "branch": "main",
+ "dirty_paths": [
+ "M api/main.py",
+ " M api/models/__init__.py",
+ " M api/models/agent_message.py",
+ " M api/routers/messages.py",
+ " M docs/inbox-change-feed-contract.md",
+ " M workplans/STATE-WP-0094-routed-gates-and-owner-returns.md",
+ "?? api/routers/message_feed.py",
+ "?? api/schemas/inbox_feed.py",
+ "?? docs/evidence/legacy-meter-weekly-review-20261014.json",
+ "?? migrations/versions/c4d5e6f7a8b9_inbox_feed_revision.py",
+ "?? tests/test_message_feed.py"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:4888ffa0a126a26bef3ba94658c76c3a23dbdc1399f4686c94e325b9d934e85f",
+ "README.md": "sha256:af3dde630cbc54664aab3681190e3095f04facd4e9b3fbc9cac7c279df05fc2d",
+ "SCOPE.md": "sha256:cfdd20b8718d92db1413c9bfcccdb1ae1e7fdee638aadcedf6508cee9f7c713f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.statehub.progress-log",
+ "name": "Work Progress Logging",
+ "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.",
+ "vector": "D4 / A4 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.progress-log.md",
+ "tags": [
+ "state-hub",
+ "progress",
+ "coordination"
+ ],
+ "consumption_modes": [
+ "service API"
+ ]
+ },
+ {
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Workstream And Task Coordination",
+ "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.",
+ "vector": "D4 / A4 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "tags": [
+ "state-hub",
+ "coordination",
+ "workplans"
+ ],
+ "consumption_modes": [
+ "service API",
+ "HTTP REST"
+ ]
+ }
+ ]
+ }
+ },
+ "tenant-engine": {
+ "head": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:c2deaef01f7492ca1b39f52e36bf703f6a55b04158b2888b7befae73452ce285",
+ "README.md": "sha256:4beddb32ea5dae1f67e0b489b63f13f7ba9bbc4d3c7f27b80957a199bcf144e0",
+ "SCOPE.md": "sha256:63f86c1bc39110db862fe60e273703463415e6e0365e4c058ab6c65be399d62e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-23",
+ "domain": "infotech",
+ "capabilities": []
+ }
+ },
+ "the-custodian": {
+ "head": "3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e",
+ "branch": "main",
+ "dirty_paths": [
+ "M WORK-RECORDS.md",
+ "?? docs/assessments/netkingdom-2026-10-14/",
+ "?? workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:6ccb4f1f2c8a87f27d59dcfcafaa654d68ff90ba09b94c863d5d444b2a35052c",
+ "README.md": "sha256:238b643e0c94446cf04bc8ac5d69e4c57d0f681825b5c45b9d444e6198f83f1a",
+ "SCOPE.md": "sha256:6d64208332890f24f04ae8d6f9067bcd8ed3b541e245fb2649ea3435f401b459",
+ "runtime/README.md": "sha256:c9bcfe727705b1503447d863f6fed4a84e97eb18a84b335c9073dac6dbb756e4"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Custodian Runtime And Repo-Classification Tooling",
+ "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "custodian",
+ "status": "draft",
+ "owner": "the-custodian",
+ "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "tags": [
+ "agents",
+ "runtime",
+ "classification"
+ ],
+ "consumption_modes": [
+ "library import (runtime/)",
+ "cli (tools/ scripts)"
+ ]
+ }
+ ]
+ }
+ },
+ "user-engine": {
+ "head": "85a419d6c5d0b4434d3ca7f33bde3092f5838f79",
+ "branch": "main",
+ "dirty_paths": [
+ "M workplans/USER-WP-0035-onboarding-handoff-findings.md",
+ "?? .claude/settings.local.json.",
+ "?? docs/evidence/2026-10-11-setup-link-owner-handoff/"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:8aa0f276e0879d3545338727188a1fd5af973c43acbfa986a135b20979ec7ba4",
+ "README.md": "sha256:74f788850117b3a1d6a1e06f68a26cbf699f8da9a27ed58d68d552a6e40dec3d",
+ "SCOPE.md": "sha256:0e863e1cc93e2aac373f566db4a4445348a930029a1c0968cf8e30c456b003e8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.identity.user-engine",
+ "name": "Headless Multi-Tenant User Engine",
+ "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.",
+ "vector": "D4 / A1 / C2 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "user-engine",
+ "path": "registry/capabilities/capability.identity.user-engine.md",
+ "tags": [
+ "identity",
+ "user-management",
+ "multi-tenant"
+ ],
+ "consumption_modes": [
+ "library import"
+ ]
+ }
+ ]
+ }
+ },
+ "whitehat-security": {
+ "head": "5587a8f6ac4b129527db819bc72832051c7fcc3b",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:acef2293815fb9bded28a60ee1bc47c196bb38541a28265d895d69ae773731ba",
+ "README.md": "sha256:3ddf3898b71ffaffec497e4e821f2a048d3cec1ae4269872b203db3422e14aca",
+ "SCOPE.md": "sha256:394dc1d432d4dd3eec735289ef83a8beedeb3afce667f5a8c3a052902a1e26ba"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "zone-engine": {
+ "head": "b5a6f88a82b125ebc82c0484bec1ea541e4f95d0",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7684ce5960c2623fe4a295e17f777326daad88d6d7c274002a71cf6046537c51",
+ "README.md": "sha256:194caa3a00b9ff041511a7e7a7c550f8e2b2906d1e71f2a9b05aef3220039806",
+ "SCOPE.md": "sha256:953dbf718481adae00fa53258ede0632df65bdc7f6a1cb3e1dd3344357dba80d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rail-knative": {
+ "head": "cd38dba3653e7fc85d3b2d3a074811b9a7216f25",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:8df1e3a222f32462b682d7a2e655913051d289303e899e71eb2f43fa1ef1aa7c",
+ "README.md": "sha256:6e8384a5753332735e9947884e7a52721d4145bb91a1061ca8c4ac63fb7ac4ec",
+ "SCOPE.md": "sha256:d5c9f0433a25825ce2b77f6caef8bc20dba303b07596233904975226e33e3d87",
+ "declarations/rail.yaml": "sha256:4a33c43a098657acbd7d43f1790473e22363be744b19c2d3fb035da205d204db"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-sbom-nexus": {
+ "head": "1566bcf69fc0757db5efc67f78b14af10d944c1b",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:15cb4502390da82fab13acdfd75b393b0fceb76183811080f097c768e0c2a417",
+ "README.md": "sha256:1fd7e5f69efdba122b57508e17dc001f623fb80a3f5ac0de093fbbea8ad07a76",
+ "SCOPE.md": "sha256:a20b2c4492a6ff54986e79d40836e7633a4b6ae578330fb87c06eb41aaf81f4d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ }
+ },
+ "inspected_nonproviders": {
+ "rapp-secrets-engine": {
+ "status": "retired compatibility stub",
+ "source": "/home/worsch/rapp-secrets-engine/README.md",
+ "capabilities": []
+ },
+ "rapp-forgejo": {
+ "status": "placeholder; missing declarations/rapp.yaml",
+ "source": "/home/worsch/rapp-forgejo/README.md",
+ "capabilities": []
+ }
+ }
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json b/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json
new file mode 100644
index 00000000..b2a23c7c
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json
@@ -0,0 +1,2154 @@
+{
+ "version": 1,
+ "updated": "2026-10-14",
+ "domain": "helix_forge",
+ "collision_policy": "warn",
+ "sources": [
+ {
+ "repo": "access-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/access-engine.yaml"
+ },
+ {
+ "repo": "activity-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/activity-core.yaml"
+ },
+ {
+ "repo": "agentic-resources",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/agentic-resources.yaml"
+ },
+ {
+ "repo": "artifact-store",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/artifact-store.yaml"
+ },
+ {
+ "repo": "audit-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/audit-core.yaml"
+ },
+ {
+ "repo": "can-you-assist",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/can-you-assist.yaml"
+ },
+ {
+ "repo": "citation-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-engine.yaml"
+ },
+ {
+ "repo": "citation-evidence",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-evidence.yaml"
+ },
+ {
+ "repo": "citation-work",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-work.yaml"
+ },
+ {
+ "repo": "commerce-canon",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "repo": "config-atlas",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/config-atlas.yaml"
+ },
+ {
+ "repo": "coordination-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/coordination-engine.yaml"
+ },
+ {
+ "repo": "core-hub",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/core-hub.yaml"
+ },
+ {
+ "repo": "domain-tree",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/domain-tree.yaml"
+ },
+ {
+ "repo": "email-connect",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/email-connect.yaml"
+ },
+ {
+ "repo": "evidence-anchor",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-anchor.yaml"
+ },
+ {
+ "repo": "evidence-binder",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "repo": "evidence-source",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-source.yaml"
+ },
+ {
+ "repo": "feature-control",
+ "count": 3,
+ "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/feature-control.yaml"
+ },
+ {
+ "repo": "guide-board",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/guide-board.yaml"
+ },
+ {
+ "repo": "helix-forge",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/helix-forge.yaml"
+ },
+ {
+ "repo": "hub-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/hub-core.yaml"
+ },
+ {
+ "repo": "human-resources",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/human-resources.yaml"
+ },
+ {
+ "repo": "ihp-railiance-probe",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ihp-railiance-probe.yaml"
+ },
+ {
+ "repo": "info-tech-canon",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/info-tech-canon.yaml"
+ },
+ {
+ "repo": "infospace-bench",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/infospace-bench.yaml"
+ },
+ {
+ "repo": "issue-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/issue-core.yaml"
+ },
+ {
+ "repo": "kaizen-agentic",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/kaizen-agentic.yaml"
+ },
+ {
+ "repo": "key-cape",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/key-cape.yaml"
+ },
+ {
+ "repo": "kontextual-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/kontextual-engine.yaml"
+ },
+ {
+ "repo": "llm-connect",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/llm-connect.yaml"
+ },
+ {
+ "repo": "markitect-filter",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-filter.yaml"
+ },
+ {
+ "repo": "markitect-main",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-main.yaml"
+ },
+ {
+ "repo": "markitect-quarkdown",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-quarkdown.yaml"
+ },
+ {
+ "repo": "markitect-tool",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-tool.yaml"
+ },
+ {
+ "repo": "net-kingdom",
+ "count": 6,
+ "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "repo": "open-cmis-tck",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/open-cmis-tck.yaml"
+ },
+ {
+ "repo": "open-reuse",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/open-reuse.yaml"
+ },
+ {
+ "repo": "ops-bridge",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-bridge.yaml"
+ },
+ {
+ "repo": "ops-hub",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-hub.yaml"
+ },
+ {
+ "repo": "ops-warden",
+ "count": 3,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "repo": "phase-memory",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/phase-memory.yaml"
+ },
+ {
+ "repo": "railiance-apps",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-apps.yaml"
+ },
+ {
+ "repo": "railiance-cluster",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-cluster.yaml"
+ },
+ {
+ "repo": "railiance-enablement",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-enablement.yaml"
+ },
+ {
+ "repo": "railiance-fabric",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-fabric.yaml"
+ },
+ {
+ "repo": "railiance-forge",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-forge.yaml"
+ },
+ {
+ "repo": "railiance-infra",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-infra.yaml"
+ },
+ {
+ "repo": "railiance-platform",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-platform.yaml"
+ },
+ {
+ "repo": "repo-scoping",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/repo-scoping.yaml"
+ },
+ {
+ "repo": "repo-seed",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/repo-seed.yaml"
+ },
+ {
+ "repo": "reuse-surface",
+ "count": 3,
+ "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "repo": "shard-wiki",
+ "count": 8,
+ "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "repo": "state-hub",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/state-hub.yaml"
+ },
+ {
+ "repo": "tegwick-control",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/tegwick-control.yaml"
+ },
+ {
+ "repo": "the-custodian",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/the-custodian.yaml"
+ },
+ {
+ "repo": "user-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/user-engine.yaml"
+ },
+ {
+ "repo": "vantage-point",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/vantage-point.yaml"
+ },
+ {
+ "repo": "vergabe-teilnahme",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/vergabe-teilnahme.yaml"
+ },
+ {
+ "repo": "whynot-control",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/whynot-control.yaml"
+ },
+ {
+ "repo": "whynot-design",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/whynot-design.yaml"
+ }
+ ],
+ "capabilities": [
+ {
+ "id": "capability.activity.event-coordinate",
+ "name": "Durable automation and bounded operations",
+ "summary": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "activity-core",
+ "tags": [
+ "activity",
+ "coordination",
+ "automation",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A4 / C1 / R0",
+ "path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "activity-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/activity-core.yaml"
+ },
+ {
+ "id": "capability.agents.cli-assistant",
+ "name": "Console-Native LLM Assistant (cya)",
+ "summary": "Console-native, backend-agnostic assistant CLI that expresses user intent in natural language and returns safe, explainable, context-aware help.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "can-you-assist",
+ "path": "registry/capabilities/capability.agents.cli-assistant.md",
+ "tags": [
+ "cli",
+ "assistant",
+ "llm",
+ "safety"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "can-you-assist",
+ "source_url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/can-you-assist.yaml"
+ },
+ {
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Generic agent runtime and repository tooling",
+ "summary": "Agent runtime modules and repository classification tooling.",
+ "domain": "custodian",
+ "status": "draft",
+ "owner": "the-custodian",
+ "tags": [
+ "agents",
+ "runtime",
+ "classification",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D2 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "the-custodian",
+ "source_url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/the-custodian.yaml"
+ },
+ {
+ "id": "capability.agents.kaizen-framework",
+ "name": "Kaizen Agentic Framework",
+ "summary": "AI agency framework providing 20 deployable agent instruction sets, project memory, metrics, role and engagement contracts, and scheduled preparation for governed execution.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "kaizen-agentic",
+ "path": "registry/capabilities/capability.agents.kaizen-framework.md",
+ "tags": [
+ "agents",
+ "memory",
+ "coordination",
+ "metrics",
+ "scheduling",
+ "engagements"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import",
+ "file contracts"
+ ],
+ "source_repo": "kaizen-agentic",
+ "source_url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/kaizen-agentic.yaml"
+ },
+ {
+ "id": "capability.agents.llm-connector",
+ "name": "Pluggable LLM Adapter Library (llm-connect)",
+ "summary": "Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract interface for adding new providers.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "llm-connect",
+ "path": "registry/capabilities/capability.agents.llm-connector.md",
+ "tags": [
+ "llm",
+ "adapter",
+ "provider-neutral"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli"
+ ],
+ "source_repo": "llm-connect",
+ "source_url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/llm-connect.yaml"
+ },
+ {
+ "id": "capability.agents.performance-learning",
+ "name": "Agent performance learning",
+ "summary": "Capture sessions, curate patterns, distribute lessons and measure outcomes.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "agentic-resources",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.agents.performance-learning.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "agentic-resources",
+ "source_url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/agentic-resources.yaml"
+ },
+ {
+ "id": "capability.agents.repo-scoping-service",
+ "name": "Repository Scoping Service",
+ "summary": "Maps repositories from usefulness to implementation (Ability -> Capability -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP API, and curator UI.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "repo-scoping",
+ "path": "registry/capabilities/capability.agents.repo-scoping-service.md",
+ "tags": [
+ "classification",
+ "scoping",
+ "registry"
+ ],
+ "consumption_modes": [
+ "http api",
+ "library import",
+ "ui"
+ ],
+ "source_repo": "repo-scoping",
+ "source_url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/repo-scoping.yaml"
+ },
+ {
+ "id": "capability.audit.event-retain",
+ "name": "Independent audit custody",
+ "summary": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "audit-core",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A4 / C3 / R2",
+ "path": "registry/capabilities/capability.audit.event-retain.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "audit-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/audit-core.yaml"
+ },
+ {
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Policy evaluation and decision evidence",
+ "summary": "Check, batch, list-allowed, explain, binding, lifetime and decision records.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "access-engine",
+ "tags": [
+ "authorization",
+ "policy",
+ "flex-auth",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A4 / C2 / R1",
+ "path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "access-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/access-engine.yaml"
+ },
+ {
+ "id": "capability.cmis.tck",
+ "name": "OpenCMIS Conformance-Preparation Extension",
+ "summary": "CMIS conformance-preparation extension for guide-board, keeping CMIS-specific runner code, profiles, capability mappings, and workplans outside the generic compliance framework.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "open-cmis-tck",
+ "path": "registry/capabilities/capability.cmis.tck.md",
+ "tags": [
+ "cmis",
+ "compliance",
+ "guide-board-extension"
+ ],
+ "consumption_modes": [
+ "library import (guide-board extension)"
+ ],
+ "source_repo": "open-cmis-tck",
+ "source_url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/open-cmis-tck.yaml"
+ },
+ {
+ "id": "capability.communication.compliance-evidence-framework",
+ "name": "Certification And Compliance Evidence Framework",
+ "summary": "Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "guide-board",
+ "path": "registry/capabilities/capability.communication.compliance-evidence-framework.md",
+ "tags": [
+ "compliance",
+ "certification",
+ "evidence",
+ "extensions"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "guide-board",
+ "source_url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/guide-board.yaml"
+ },
+ {
+ "id": "capability.communication.context-engine",
+ "name": "Kontextual Engine (Knowledge Operations Runtime)",
+ "summary": "Headless knowledge-operations engine turning heterogeneous information assets into persistent, contextual, governed, retrievable, transformable, and agent-operable knowledge.",
+ "vector": "D4 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "kontextual-engine",
+ "path": "registry/capabilities/capability.communication.context-engine.md",
+ "tags": [
+ "knowledge",
+ "context",
+ "runtime"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "kontextual-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/kontextual-engine.yaml"
+ },
+ {
+ "id": "capability.communication.infospace-workspace",
+ "name": "Infospace Workspace And Evaluation Bench",
+ "summary": "Workspace and service for creating, developing, evaluating, and inspecting structured knowledge spaces (infospaces); application-layer successor to the infospace work begun in markitect-main.",
+ "vector": "D3 / A1 / C2 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "infospace-bench",
+ "path": "registry/capabilities/capability.communication.infospace-workspace.md",
+ "tags": [
+ "infospace",
+ "knowledge",
+ "evaluation"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import (consumed by info-tech-canon)"
+ ],
+ "source_repo": "infospace-bench",
+ "source_url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/infospace-bench.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-legacy-platform",
+ "name": "MarkiTect Legacy Platform",
+ "summary": "Intelligent markdown engine and information-management platform treating documents as structured, queryable information spaces with schema validation, transclusion, and LLM-driven evaluation; the legacy umbrella now being split into markitect-tool, infospace-bench, and kontextual-engine.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-main",
+ "path": "registry/capabilities/capability.communication.markitect-legacy-platform.md",
+ "tags": [
+ "markitect",
+ "markdown",
+ "legacy"
+ ],
+ "consumption_modes": [
+ "application (legacy, not recommended for new integration)"
+ ],
+ "source_repo": "markitect-main",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-main.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-quarkdown-adapter",
+ "name": "Markitect Quarkdown Render Adapter",
+ "summary": "Concrete Quarkdown render/export adapter for Markitect, mapping Markitect profiles to Quarkdown profiles and running controlled Quarkdown CLI execution plans without forking or reimplementing Quarkdown.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-quarkdown",
+ "path": "registry/capabilities/capability.communication.markitect-quarkdown-adapter.md",
+ "tags": [
+ "markitect",
+ "quarkdown",
+ "adapter"
+ ],
+ "consumption_modes": [
+ "library import (plugin/entry-point)"
+ ],
+ "source_repo": "markitect-quarkdown",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-quarkdown.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-source-adapters",
+ "name": "Markitect Source-Format Adapters",
+ "summary": "Concrete source-format adapters (EPUB3, PDF) converting external document formats into canonical Markitect Markdown, implementing the markitect-tool source adapter contract.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-filter",
+ "path": "registry/capabilities/capability.communication.markitect-source-adapters.md",
+ "tags": [
+ "markitect",
+ "adapter",
+ "document-conversion"
+ ],
+ "consumption_modes": [
+ "library import (plugin/entry-point)"
+ ],
+ "source_repo": "markitect-filter",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-filter.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-toolkit",
+ "name": "Markitect Markdown Toolkit And CLI",
+ "summary": "Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown into structured, queryable, reusable knowledge artifacts; syntax-layer successor to markitect-main.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-tool",
+ "path": "registry/capabilities/capability.communication.markitect-toolkit.md",
+ "tags": [
+ "markitect",
+ "markdown",
+ "cli",
+ "toolkit"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import"
+ ],
+ "source_repo": "markitect-tool",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-tool.yaml"
+ },
+ {
+ "id": "capability.coordination.cross-owner-work",
+ "name": "Cross-owner coordination lifecycle",
+ "summary": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "coordination-engine",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.coordination.cross-owner-work.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "coordination-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/coordination-engine.yaml"
+ },
+ {
+ "id": "capability.design.whynot-system",
+ "name": "Whynot Design System",
+ "summary": "Framework-agnostic visual language for whynot prototype/market-signal artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain HTML, and Django template adapters.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "consumer",
+ "status": "draft",
+ "owner": "whynot-design",
+ "path": "registry/capabilities/capability.design.whynot-system.md",
+ "tags": [
+ "design-system",
+ "web-components",
+ "frontend"
+ ],
+ "consumption_modes": [
+ "library import (npm)",
+ "cli",
+ "django template adapter"
+ ],
+ "source_repo": "whynot-design",
+ "source_url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/whynot-design.yaml"
+ },
+ {
+ "id": "capability.evidence.binding",
+ "name": "Evidence-to-Target Binding",
+ "summary": "Links evidence items to structured targets with relation, status, and confidence metadata, bidirectional queries, active-state coordination, and canonical engine events.",
+ "vector": "D3 / A2 / C3 / R3",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-binder",
+ "path": "registry/capabilities/capability.evidence.binding.md",
+ "tags": [
+ "evidence",
+ "binding",
+ "evidence-link",
+ "form-field",
+ "citation-evidence"
+ ],
+ "consumption_modes": [
+ "source module",
+ "React provider"
+ ],
+ "source_repo": "evidence-binder",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "id": "capability.evidence.rect-registry",
+ "name": "Visual-Guide Rect Registry",
+ "summary": "Coordinates field, evidence-card, and highlight rectangles from independent renderers so an SVG overlay can draw the active visual guide without polling.",
+ "vector": "D3 / A2 / C3 / R3",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-binder",
+ "path": "registry/capabilities/capability.evidence.rect-registry.md",
+ "tags": [
+ "rect-registry",
+ "visual-guide",
+ "overlay",
+ "active-state",
+ "citation-evidence"
+ ],
+ "consumption_modes": [
+ "source module",
+ "React component"
+ ],
+ "source_repo": "evidence-binder",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "id": "capability.feature-control.evaluate",
+ "name": "Feature Availability Evaluation",
+ "summary": "Evaluate whether a feature is active, hidden, disabled, or unavailable for a subject in context.",
+ "vector": "D5 / A4 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.evaluate.md",
+ "tags": [
+ "feature-control",
+ "evaluation",
+ "sdk"
+ ],
+ "consumption_modes": [
+ "SDK",
+ "service API"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.feature-control.rollout",
+ "name": "Feature Rollout Control",
+ "summary": "Gradually expose features to subjects across tenants, domains, groups, or cohorts using rollout rules.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.rollout.md",
+ "tags": [
+ "feature-control",
+ "rollout",
+ "planning"
+ ],
+ "consumption_modes": [
+ "source module",
+ "SDK"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.feature-control.visibility",
+ "name": "Feature Visibility Control",
+ "summary": "Control whether features are visible or hidden for subjects without changing entitlement or authorization.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.visibility.md",
+ "tags": [
+ "feature-control",
+ "visibility"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.graph.nbgm-spec",
+ "name": "Network-Based Graph Model (NBGM) Specification",
+ "summary": "Generic system and versioned protocol specification for exploring dependency structures as network-based graph models (NBGM), unifying entity/relationship inspection and reasoning across arbitrary domains.",
+ "vector": "D2 / A0 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "vantage-point",
+ "path": "registry/capabilities/capability.graph.nbgm-spec.md",
+ "tags": [
+ "graph",
+ "nbgm",
+ "specification"
+ ],
+ "consumption_modes": [
+ "informational (specification only)"
+ ],
+ "source_repo": "vantage-point",
+ "source_url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/vantage-point.yaml"
+ },
+ {
+ "id": "capability.hr.workflow-catalog",
+ "name": "HR Workflow Catalog",
+ "summary": "Markdown-first registry of HR planning workflows with an iterative assessment loop tied to INTENT phases.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "consumer",
+ "status": "draft",
+ "owner": "human-resources",
+ "path": "registry/capabilities/capability.hr.workflow-catalog.md",
+ "tags": [
+ "hr",
+ "workflows",
+ "assessment",
+ "planning"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "human-resources",
+ "source_url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/human-resources.yaml"
+ },
+ {
+ "id": "capability.iam.key-cape",
+ "name": "OIDC identity and assurance",
+ "summary": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "key-cape",
+ "tags": [
+ "iam",
+ "oidc",
+ "netkingdom",
+ "security",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A4 / C2 / R1",
+ "path": "registry/capabilities/capability.iam.key-cape.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "key-cape",
+ "source_url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/key-cape.yaml"
+ },
+ {
+ "id": "capability.identity.subject-resolution",
+ "name": "Identity Subject Resolution",
+ "summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.",
+ "vector": "D3 / A0 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "commerce-canon",
+ "path": "registry/capabilities/capability.identity.subject-resolution.md",
+ "tags": [
+ "identity",
+ "subject",
+ "architecture"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "commerce-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "id": "capability.identity.user-engine",
+ "name": "User lifecycle and account journeys",
+ "summary": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog.",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "user-engine",
+ "tags": [
+ "identity",
+ "user-management",
+ "multi-tenant",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A4 / C2 / R0",
+ "path": "registry/capabilities/capability.identity.user-engine.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "user-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/user-engine.yaml"
+ },
+ {
+ "id": "capability.identity.vocabulary-canonicalize",
+ "name": "Identity Vocabulary Canonicalization",
+ "summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.",
+ "vector": "D4 / A0 / C2 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "commerce-canon",
+ "path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md",
+ "tags": [
+ "identity",
+ "terminology",
+ "research"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "commerce-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "id": "capability.infotech.artifact-store",
+ "name": "Artifact Registry And Storage Gateway",
+ "summary": "Generic artifact registry and storage gateway for generated outputs, evidence packages, reports, logs, snapshots, exports, and release artifacts.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "artifact-store",
+ "path": "registry/capabilities/capability.infotech.artifact-store.md",
+ "tags": [
+ "artifact",
+ "storage",
+ "provenance",
+ "registry"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli"
+ ],
+ "source_repo": "artifact-store",
+ "source_url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/artifact-store.yaml"
+ },
+ {
+ "id": "capability.infotech.canon-service",
+ "name": "Shared semantic contracts and validation",
+ "summary": "Markdown canon with library, CLI and read-only API.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "info-tech-canon",
+ "tags": [
+ "canon",
+ "infospace",
+ "service",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D2 / A4 / C1 / R0",
+ "path": "registry/capabilities/capability.infotech.canon-service.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "info-tech-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/info-tech-canon.yaml"
+ },
+ {
+ "id": "capability.infotech.citation-engine",
+ "name": "Citation Evidence Domain Engine",
+ "summary": "Core domain model and engine services for the citation-evidence ecosystem \u2014 shared vocabulary, in-memory repositories, orchestration services, event bus, and citation card renderers.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "citation-engine",
+ "path": "registry/capabilities/capability.infotech.citation-engine.md",
+ "tags": [
+ "citation",
+ "evidence",
+ "domain-model"
+ ],
+ "consumption_modes": [
+ "library import (workspace link)"
+ ],
+ "source_repo": "citation-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/citation-engine.yaml"
+ },
+ {
+ "id": "capability.infotech.citation-evidence-workspace",
+ "name": "Citation Evidence Workspace",
+ "summary": "Document-centered evidence workspace for capturing, managing, presenting, and re-opening citations \u2014 the umbrella application over the citation-evidence six-package design.",
+ "vector": "D4 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "citation-evidence",
+ "path": "registry/capabilities/capability.infotech.citation-evidence-workspace.md",
+ "tags": [
+ "citation",
+ "evidence",
+ "workspace"
+ ],
+ "consumption_modes": [
+ "application (local dev server)"
+ ],
+ "source_repo": "citation-evidence",
+ "source_url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/citation-evidence.yaml"
+ },
+ {
+ "id": "capability.infotech.config-surface-atlas",
+ "name": "Configuration Surface Atlas",
+ "summary": "Read-first, cross-kind map and evidence layer for configuration surfaces \u2014 what configures a system, who owns it, its scope, and where the source of truth lives.",
+ "vector": "D5 / A0 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "config-atlas",
+ "path": "registry/capabilities/capability.infotech.config-surface-atlas.md",
+ "tags": [
+ "configuration",
+ "registry",
+ "control-plane",
+ "effective-config",
+ "evidence"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source module"
+ ],
+ "source_repo": "config-atlas",
+ "source_url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/config-atlas.yaml"
+ },
+ {
+ "id": "capability.infotech.core-hub",
+ "name": "Core Hub Production Interaction Framework",
+ "summary": "Contract-first framework for cross-domain state, agent coordination, evidence, registries, workplans, and operator interaction surfaces.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "core-hub",
+ "path": "registry/capabilities/capability.infotech.core-hub.md",
+ "tags": [
+ "interaction-framework",
+ "state-hub",
+ "inter-hub-successor",
+ "agent-coordination",
+ "registry",
+ "api"
+ ],
+ "consumption_modes": [
+ "informational",
+ "planning",
+ "cli"
+ ],
+ "source_repo": "core-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/core-hub.yaml"
+ },
+ {
+ "id": "capability.infotech.email-connector",
+ "name": "Mailbox Evidence Scanner (email-connect)",
+ "summary": "Headless, provider-neutral email communication and evidence service; first slice scans a mailbox or fixture directory and produces timestamped CSV evidence reports.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "email-connect",
+ "path": "registry/capabilities/capability.infotech.email-connector.md",
+ "tags": [
+ "email",
+ "evidence",
+ "coordination"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "email-connect",
+ "source_url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/email-connect.yaml"
+ },
+ {
+ "id": "capability.infotech.headless-browser",
+ "name": "Headless Browser Automation",
+ "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.",
+ "vector": "D3 / A5 / C2 / R2",
+ "domain": "infotech",
+ "status": "reviewed",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.infotech.headless-browser.md",
+ "tags": [
+ "headless",
+ "browser",
+ "automation",
+ "playwright",
+ "chromium",
+ "testing",
+ "screenshots",
+ "extraction",
+ "firefox",
+ "webkit",
+ "selenium",
+ "puppeteer"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source adaptation",
+ "JavaScript library",
+ "Python library",
+ "cli",
+ "service API",
+ "container"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.infotech.hub-core-library",
+ "name": "Reusable FOS Hub Core Primitives",
+ "summary": "Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State Hub for use by other FOS (Federation of Services) hubs.",
+ "vector": "D2 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "hub-core",
+ "path": "registry/capabilities/capability.infotech.hub-core-library.md",
+ "tags": [
+ "hub",
+ "fastapi",
+ "sqlalchemy",
+ "mcp"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "hub-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/hub-core.yaml"
+ },
+ {
+ "id": "capability.infotech.issue-tracking",
+ "name": "External issue tracker connector",
+ "summary": "CLI and Python adapters for external issue systems.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "issue-core",
+ "tags": [
+ "issue-tracking",
+ "connector",
+ "work-record",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A2 / C2 / R1",
+ "path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "issue-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/issue-core.yaml"
+ },
+ {
+ "id": "capability.infotech.oss-integration-continuity",
+ "name": "Managed Continuity For OSS Integrations",
+ "summary": "Turns proven open-source integrations into structured, maintainable, continuously managed assets with clear boundaries and update loops, so they remain robust and transparent as upstream evolves.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "open-reuse",
+ "path": "registry/capabilities/capability.infotech.oss-integration-continuity.md",
+ "tags": [
+ "oss",
+ "integration",
+ "maintenance"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "open-reuse",
+ "source_url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/open-reuse.yaml"
+ },
+ {
+ "id": "capability.infotech.pdf-evidence-ingest",
+ "name": "Headless PDF Evidence Ingest",
+ "summary": "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling.",
+ "vector": "D2 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-source",
+ "path": "registry/capabilities/capability.infotech.pdf-evidence-ingest.md",
+ "tags": [
+ "pdf",
+ "ingest",
+ "fingerprint",
+ "canonical-text",
+ "evidence"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "evidence-source",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-source.yaml"
+ },
+ {
+ "id": "capability.infotech.repo-template",
+ "name": "Coulomb Repository Template",
+ "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.",
+ "vector": "D3 / A3 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "repo-seed",
+ "path": "registry/capabilities/capability.infotech.repo-template.md",
+ "tags": [
+ "template",
+ "bootstrap",
+ "state-hub",
+ "onboarding"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "informational"
+ ],
+ "source_repo": "repo-seed",
+ "source_url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/repo-seed.yaml"
+ },
+ {
+ "id": "capability.memory.phase-planning",
+ "name": "Profile-Driven Memory Phase Planning (phase-memory)",
+ "summary": "Interprets Markitect memory profiles as runtime plans, modeling memory phases and producing deterministic dry-run actions for retention, refresh, compaction, stabilization, and activation.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "phase-memory",
+ "path": "registry/capabilities/capability.memory.phase-planning.md",
+ "tags": [
+ "memory",
+ "agentic",
+ "planning"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "phase-memory",
+ "source_url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/phase-memory.yaml"
+ },
+ {
+ "id": "capability.operations.ops-hub",
+ "name": "Operations Hub Extension Contract",
+ "summary": "Versioned hub-extension package and bootstrap client for operational truth, service-catalog records, readiness evidence, and migration gates.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "operations",
+ "status": "reviewed",
+ "owner": "ops-hub",
+ "path": "registry/capabilities/capability.operations.ops-hub.md",
+ "tags": [
+ "operations",
+ "service-catalog",
+ "readiness",
+ "hub-extension"
+ ],
+ "consumption_modes": [
+ "contract package",
+ "command-line bootstrap"
+ ],
+ "source_repo": "ops-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-hub.yaml"
+ },
+ {
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH tunnel lifecycle",
+ "summary": "Named tunnels, reconnect, health and TTL-aware cert_command.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-bridge",
+ "tags": [
+ "ssh",
+ "tunnel",
+ "ops",
+ "connectivity",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C2 / R1",
+ "path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "ops-bridge",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-bridge.yaml"
+ },
+ {
+ "id": "capability.procurement.vergabe-teilnahme",
+ "name": "Vergabe Teilnahme (Public Procurement Participation) Application",
+ "summary": "Django application (with a Vite/Tailwind frontend) for managing German public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und Teilnahme-Management-System.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "vergabe-teilnahme",
+ "path": "registry/capabilities/capability.procurement.vergabe-teilnahme.md",
+ "tags": [
+ "procurement",
+ "django",
+ "vergabe"
+ ],
+ "consumption_modes": [
+ "application (Django + Vite, local dev via docker-compose)"
+ ],
+ "source_repo": "vergabe-teilnahme",
+ "source_url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/vergabe-teilnahme.yaml"
+ },
+ {
+ "id": "capability.railiance.ci-enablement",
+ "name": "Developer delivery and CI templates",
+ "summary": "Reusable CI workflows, build and deployment patterns.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-enablement",
+ "tags": [
+ "railiance",
+ "ci-cd",
+ "developer-enablement",
+ "forgejo",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C2 / R1",
+ "path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-enablement",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-enablement.yaml"
+ },
+ {
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Kubernetes runtime and cluster controls",
+ "summary": "k3s, ingress, CNI, operators and kubeconfig/runtime checks.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-cluster",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "iac",
+ "bootstrap",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-cluster",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-cluster.yaml"
+ },
+ {
+ "id": "capability.railiance.fabric-graph",
+ "name": "Infrastructure ownership and dependency graph",
+ "summary": "Schemas, validation, graph queries and State Hub exports.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-fabric",
+ "tags": [
+ "railiance",
+ "graph",
+ "ownership",
+ "discovery",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-fabric",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-fabric.yaml"
+ },
+ {
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Source forge, registries and runner substrate",
+ "summary": "Forgejo operation, package registries and runner lifecycle.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-forge",
+ "tags": [
+ "railiance",
+ "forgejo",
+ "forge",
+ "ci-runner",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-forge",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-forge.yaml"
+ },
+ {
+ "id": "capability.railiance.infra-provisioning",
+ "name": "Host convergence and security baseline",
+ "summary": "Ansible inventory, firewall, SSH bootstrap and baseline verification.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-infra",
+ "tags": [
+ "railiance",
+ "terraform",
+ "ansible",
+ "infrastructure",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A2 / C2 / R1",
+ "path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-infra",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-infra.yaml"
+ },
+ {
+ "id": "capability.railiance.platform-services",
+ "name": "Secret custody and platform data services",
+ "summary": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-platform",
+ "tags": [
+ "railiance",
+ "platform",
+ "secrets",
+ "postgres",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.railiance.platform-services.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-platform",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-platform.yaml"
+ },
+ {
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Workload release configuration and guards",
+ "summary": "Helm/manifests, exact image pins, application runbooks and rollout/rollback.",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-apps",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "helm",
+ "deployment",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R1",
+ "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-apps",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-apps.yaml"
+ },
+ {
+ "id": "capability.registry.register",
+ "name": "Capability registry and federation",
+ "summary": "Owner Markdown entries, indexes, federation hub and planning queries.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "tags": [
+ "registry",
+ "governance",
+ "meta",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A3 / C2 / R3",
+ "path": "registry/capabilities/capability.registry.register.md",
+ "consumption_modes": [
+ "library",
+ "CLI"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.registry.validate",
+ "name": "Capability registry validation",
+ "summary": "Schema, index consistency and relation checks.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "tags": [
+ "registry",
+ "validation",
+ "cli",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A3 / C3 / R3",
+ "path": "registry/capabilities/capability.registry.validate.md",
+ "consumption_modes": [
+ "library",
+ "CLI"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.security.access-routing",
+ "name": "Credential routing and contained access",
+ "summary": "warden route and access catalog; exact lane conduit and secret-exec routing.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-warden",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A3 / C1 / R0",
+ "path": "registry/capabilities/capability.security.access-routing.md",
+ "consumption_modes": [
+ "library",
+ "CLI"
+ ],
+ "source_repo": "ops-warden",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "id": "capability.security.bootstrap-recovery",
+ "name": "Guarded bootstrap and recovery preparation",
+ "summary": "Local identity, bootstrap console, encrypted custody handoff and caller tools.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.bootstrap-recovery.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.case-contracts",
+ "name": "Security case types and instance validation",
+ "summary": "Versioned types, cases and schema validation.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.case-contracts.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.case-follow-through",
+ "name": "Security case operational follow-through",
+ "summary": "KnownSecurityCase route, plan and operational receipts.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-warden",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.case-follow-through.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "ops-warden",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "id": "capability.security.emission-profile",
+ "name": "Security emission cadence validation",
+ "summary": "Security profile over generic emission contracts and validator.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.emission-profile.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.forge-secret-prevention",
+ "name": "Independent introduced-history secret prevention",
+ "summary": "Pinned receive adapter, lifecycle template and fail-closed scan.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "railiance-forge",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.forge-secret-prevention.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "railiance-forge",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-forge.yaml"
+ },
+ {
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom security architecture and conformance tooling",
+ "summary": "Versioned IAM, layer, tenancy and credential contracts plus validators.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "iam",
+ "kubernetes",
+ "conformance",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R1",
+ "path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.posture-feedback",
+ "name": "Deterministic posture feedback",
+ "summary": "CLI evaluates evidence age and posture into owner-routed findings.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.posture-feedback.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.scenario-compose",
+ "name": "Deterministic security scenario composition",
+ "summary": "CLI selects pinned providers and orders trust transitions.",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "tags": [
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D3 / A2 / C1 / R0",
+ "path": "registry/capabilities/capability.security.scenario-compose.md",
+ "consumption_modes": [
+ "CLI",
+ "source"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "Decision-bound SSH certificates",
+ "summary": "warden sign with local and OpenBao backends and adm/agt/atm actors.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "ops-warden",
+ "tags": [
+ "ssh",
+ "certificate",
+ "ca",
+ "ops-warden",
+ "openbao",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A3 / C3 / R2",
+ "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "consumption_modes": [
+ "library",
+ "CLI"
+ ],
+ "source_repo": "ops-warden",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "id": "capability.statehub.progress-log",
+ "name": "Progress and work evidence indexing",
+ "summary": "REST progress and task evidence references.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "tags": [
+ "state-hub",
+ "progress",
+ "coordination",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A4 / C3 / R3",
+ "path": "registry/capabilities/capability.statehub.progress-log.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "state-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/state-hub.yaml"
+ },
+ {
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Cross-repository work tracking",
+ "summary": "File-derived workplans, tasks, dependencies, decisions and coordination views.",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "tags": [
+ "state-hub",
+ "coordination",
+ "workplans",
+ "security",
+ "netkingdom",
+ "framework-reuse"
+ ],
+ "vector": "D4 / A4 / C3 / R2",
+ "path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "consumption_modes": [
+ "HTTP API",
+ "source"
+ ],
+ "source_repo": "state-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/state-hub.yaml"
+ },
+ {
+ "id": "capability.wiki.adapter-contract",
+ "name": "Capability-Aware Shard Adapter Contract",
+ "summary": "A versioned backend interface where each binding declares a verified capability profile, so federation ops degrade by capability.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.adapter-contract.md",
+ "tags": [
+ "wiki",
+ "adapter",
+ "capability",
+ "contract",
+ "conformance",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.coordination-journal",
+ "name": "Event-Sourced Coordination Journal",
+ "summary": "An append-only, totally-ordered-per-space decision log whose current state is a derived fold; git-addressable history.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.coordination-journal.md",
+ "tags": [
+ "wiki",
+ "event-sourcing",
+ "coordination",
+ "git",
+ "journal",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.derived-views",
+ "name": "Wiki Derived Views",
+ "summary": "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges, AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance.",
+ "vector": "D3 / A0 / C0 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.derived-views.md",
+ "tags": [
+ "wiki",
+ "derived-views",
+ "backlinks",
+ "recentchanges",
+ "search",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.engine-typed-extensions",
+ "name": "Wiki Engine with Typed Extensions",
+ "summary": "A small-core wiki engine realizing a typed-extension framework that addresses all wiki use cases and lets each shard activate only the features it needs.",
+ "vector": "D3 / A0 / C0 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.engine-typed-extensions.md",
+ "tags": [
+ "wiki",
+ "engine",
+ "typed-extensions",
+ "feature-activation",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.federation-models",
+ "name": "Selectable Federation-Model Taxonomy",
+ "summary": "Federation as a plural, composable coordination axis (fork+journal, VCS-replication, query-join, feed, activity-streams, engine-mirror) selected per space.",
+ "vector": "D4 / A0 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.federation-models.md",
+ "tags": [
+ "wiki",
+ "federation",
+ "taxonomy",
+ "composable",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.overlay",
+ "name": "Overlay-Before-Mutation Write Path",
+ "summary": "Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only or limited backends be edited safely without silent remote mutation.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.overlay.md",
+ "tags": [
+ "wiki",
+ "overlay",
+ "patch",
+ "write-path",
+ "conflict",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.page-model",
+ "name": "Backend-Neutral Wiki Page Model",
+ "summary": "A Markdown-first but stretchable page model with stable identity separate from placement and layered provenance.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.page-model.md",
+ "tags": [
+ "wiki",
+ "page-model",
+ "identity",
+ "provenance",
+ "markdown",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.shard-orchestration",
+ "name": "Wiki Shard Orchestration",
+ "summary": "Present a union of pages across heterogeneous wiki-shaped shards while preserving each shard's provenance, capabilities, and history.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.shard-orchestration.md",
+ "tags": [
+ "wiki",
+ "federation",
+ "orchestration",
+ "union",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ }
+ ],
+ "composed_at": "2026-10-14T04:48:46+00:00",
+ "stale": false
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json b/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json
new file mode 100644
index 00000000..bbe29695
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json
@@ -0,0 +1,1872 @@
+{
+ "version": 1,
+ "updated": "2026-10-14",
+ "domain": "helix_forge",
+ "collision_policy": "warn",
+ "sources": [
+ {
+ "repo": "access-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/access-engine.yaml"
+ },
+ {
+ "repo": "activity-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/activity-core.yaml"
+ },
+ {
+ "repo": "agentic-resources",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/agentic-resources.yaml"
+ },
+ {
+ "repo": "artifact-store",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/artifact-store.yaml"
+ },
+ {
+ "repo": "audit-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/audit-core.yaml"
+ },
+ {
+ "repo": "can-you-assist",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/can-you-assist.yaml"
+ },
+ {
+ "repo": "citation-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-engine.yaml"
+ },
+ {
+ "repo": "citation-evidence",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-evidence.yaml"
+ },
+ {
+ "repo": "citation-work",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/citation-work.yaml"
+ },
+ {
+ "repo": "commerce-canon",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "repo": "config-atlas",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/config-atlas.yaml"
+ },
+ {
+ "repo": "coordination-engine",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/coordination-engine.yaml"
+ },
+ {
+ "repo": "core-hub",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/core-hub.yaml"
+ },
+ {
+ "repo": "domain-tree",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/domain-tree.yaml"
+ },
+ {
+ "repo": "email-connect",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/email-connect.yaml"
+ },
+ {
+ "repo": "evidence-anchor",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-anchor.yaml"
+ },
+ {
+ "repo": "evidence-binder",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "repo": "evidence-source",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/evidence-source.yaml"
+ },
+ {
+ "repo": "feature-control",
+ "count": 3,
+ "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/feature-control.yaml"
+ },
+ {
+ "repo": "guide-board",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/guide-board.yaml"
+ },
+ {
+ "repo": "helix-forge",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/helix-forge.yaml"
+ },
+ {
+ "repo": "hub-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/hub-core.yaml"
+ },
+ {
+ "repo": "human-resources",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/human-resources.yaml"
+ },
+ {
+ "repo": "ihp-railiance-probe",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ihp-railiance-probe.yaml"
+ },
+ {
+ "repo": "info-tech-canon",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/info-tech-canon.yaml"
+ },
+ {
+ "repo": "infospace-bench",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/infospace-bench.yaml"
+ },
+ {
+ "repo": "issue-core",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/issue-core.yaml"
+ },
+ {
+ "repo": "kaizen-agentic",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/kaizen-agentic.yaml"
+ },
+ {
+ "repo": "key-cape",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/key-cape.yaml"
+ },
+ {
+ "repo": "kontextual-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/kontextual-engine.yaml"
+ },
+ {
+ "repo": "llm-connect",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/llm-connect.yaml"
+ },
+ {
+ "repo": "markitect-filter",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-filter.yaml"
+ },
+ {
+ "repo": "markitect-main",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-main.yaml"
+ },
+ {
+ "repo": "markitect-quarkdown",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-quarkdown.yaml"
+ },
+ {
+ "repo": "markitect-tool",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/markitect-tool.yaml"
+ },
+ {
+ "repo": "net-kingdom",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "repo": "open-cmis-tck",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/open-cmis-tck.yaml"
+ },
+ {
+ "repo": "open-reuse",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/open-reuse.yaml"
+ },
+ {
+ "repo": "ops-bridge",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-bridge.yaml"
+ },
+ {
+ "repo": "ops-hub",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-hub.yaml"
+ },
+ {
+ "repo": "ops-warden",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "repo": "phase-memory",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/phase-memory.yaml"
+ },
+ {
+ "repo": "railiance-apps",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-apps.yaml"
+ },
+ {
+ "repo": "railiance-cluster",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-cluster.yaml"
+ },
+ {
+ "repo": "railiance-enablement",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-enablement.yaml"
+ },
+ {
+ "repo": "railiance-fabric",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-fabric.yaml"
+ },
+ {
+ "repo": "railiance-forge",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-forge.yaml"
+ },
+ {
+ "repo": "railiance-infra",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-infra.yaml"
+ },
+ {
+ "repo": "railiance-platform",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/railiance-platform.yaml"
+ },
+ {
+ "repo": "repo-scoping",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/repo-scoping.yaml"
+ },
+ {
+ "repo": "repo-seed",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/repo-seed.yaml"
+ },
+ {
+ "repo": "reuse-surface",
+ "count": 3,
+ "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "repo": "shard-wiki",
+ "count": 8,
+ "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "repo": "state-hub",
+ "count": 2,
+ "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/state-hub.yaml"
+ },
+ {
+ "repo": "tegwick-control",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/tegwick-control.yaml"
+ },
+ {
+ "repo": "the-custodian",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/the-custodian.yaml"
+ },
+ {
+ "repo": "user-engine",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/user-engine.yaml"
+ },
+ {
+ "repo": "vantage-point",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/vantage-point.yaml"
+ },
+ {
+ "repo": "vergabe-teilnahme",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/vergabe-teilnahme.yaml"
+ },
+ {
+ "repo": "whynot-control",
+ "count": 0,
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/whynot-control.yaml"
+ },
+ {
+ "repo": "whynot-design",
+ "count": 1,
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml",
+ "cache": "/data/cache/whynot-design.yaml"
+ }
+ ],
+ "capabilities": [
+ {
+ "id": "capability.activity.event-coordinate",
+ "name": "Organizational Event Coordination",
+ "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "activity-core",
+ "path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "tags": [
+ "activity",
+ "coordination",
+ "automation"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "activity-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/activity-core.yaml"
+ },
+ {
+ "id": "capability.agents.cli-assistant",
+ "name": "Console-Native LLM Assistant (cya)",
+ "summary": "Console-native, backend-agnostic assistant CLI that expresses user intent in natural language and returns safe, explainable, context-aware help.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "can-you-assist",
+ "path": "registry/capabilities/capability.agents.cli-assistant.md",
+ "tags": [
+ "cli",
+ "assistant",
+ "llm",
+ "safety"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "can-you-assist",
+ "source_url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/can-you-assist.yaml"
+ },
+ {
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Custodian Runtime And Repo-Classification Tooling",
+ "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "custodian",
+ "status": "draft",
+ "owner": "the-custodian",
+ "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "tags": [
+ "agents",
+ "runtime",
+ "classification"
+ ],
+ "consumption_modes": [
+ "library import (runtime/)",
+ "cli (tools/ scripts)"
+ ],
+ "source_repo": "the-custodian",
+ "source_url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/the-custodian.yaml"
+ },
+ {
+ "id": "capability.agents.kaizen-framework",
+ "name": "Kaizen Agentic Framework",
+ "summary": "AI agency framework providing 20 deployable agent instruction sets, project memory, metrics, role and engagement contracts, and scheduled preparation for governed execution.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "kaizen-agentic",
+ "path": "registry/capabilities/capability.agents.kaizen-framework.md",
+ "tags": [
+ "agents",
+ "memory",
+ "coordination",
+ "metrics",
+ "scheduling",
+ "engagements"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import",
+ "file contracts"
+ ],
+ "source_repo": "kaizen-agentic",
+ "source_url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/kaizen-agentic.yaml"
+ },
+ {
+ "id": "capability.agents.llm-connector",
+ "name": "Pluggable LLM Adapter Library (llm-connect)",
+ "summary": "Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract interface for adding new providers.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "llm-connect",
+ "path": "registry/capabilities/capability.agents.llm-connector.md",
+ "tags": [
+ "llm",
+ "adapter",
+ "provider-neutral"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli"
+ ],
+ "source_repo": "llm-connect",
+ "source_url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/llm-connect.yaml"
+ },
+ {
+ "id": "capability.agents.repo-scoping-service",
+ "name": "Repository Scoping Service",
+ "summary": "Maps repositories from usefulness to implementation (Ability -> Capability -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP API, and curator UI.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "agents",
+ "status": "draft",
+ "owner": "repo-scoping",
+ "path": "registry/capabilities/capability.agents.repo-scoping-service.md",
+ "tags": [
+ "classification",
+ "scoping",
+ "registry"
+ ],
+ "consumption_modes": [
+ "http api",
+ "library import",
+ "ui"
+ ],
+ "source_repo": "repo-scoping",
+ "source_url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/repo-scoping.yaml"
+ },
+ {
+ "id": "capability.audit.event-retain",
+ "name": "Audit Event Retention",
+ "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.",
+ "joins": "operations.audit",
+ "provision": "data/capability/audit-core-operational.json",
+ "vector": "D4 provision / A4 / C3 / R2",
+ "domain": "infotech",
+ "status": "production",
+ "owner": "audit-core",
+ "path": "registry/capabilities/capability.audit.event-retain.md",
+ "tags": [
+ "audit",
+ "retention",
+ "compliance"
+ ],
+ "consumption_modes": [
+ "http ingest",
+ "source module"
+ ],
+ "source_repo": "audit-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/audit-core.yaml"
+ },
+ {
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Authorization Policy Evaluation",
+ "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "flex-auth",
+ "path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "tags": [
+ "authorization",
+ "policy",
+ "flex-auth"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "access-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/access-engine.yaml"
+ },
+ {
+ "id": "capability.cmis.tck",
+ "name": "OpenCMIS Conformance-Preparation Extension",
+ "summary": "CMIS conformance-preparation extension for guide-board, keeping CMIS-specific runner code, profiles, capability mappings, and workplans outside the generic compliance framework.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "open-cmis-tck",
+ "path": "registry/capabilities/capability.cmis.tck.md",
+ "tags": [
+ "cmis",
+ "compliance",
+ "guide-board-extension"
+ ],
+ "consumption_modes": [
+ "library import (guide-board extension)"
+ ],
+ "source_repo": "open-cmis-tck",
+ "source_url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/open-cmis-tck.yaml"
+ },
+ {
+ "id": "capability.communication.compliance-evidence-framework",
+ "name": "Certification And Compliance Evidence Framework",
+ "summary": "Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "guide-board",
+ "path": "registry/capabilities/capability.communication.compliance-evidence-framework.md",
+ "tags": [
+ "compliance",
+ "certification",
+ "evidence",
+ "extensions"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "guide-board",
+ "source_url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/guide-board.yaml"
+ },
+ {
+ "id": "capability.communication.context-engine",
+ "name": "Kontextual Engine (Knowledge Operations Runtime)",
+ "summary": "Headless knowledge-operations engine turning heterogeneous information assets into persistent, contextual, governed, retrievable, transformable, and agent-operable knowledge.",
+ "vector": "D4 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "kontextual-engine",
+ "path": "registry/capabilities/capability.communication.context-engine.md",
+ "tags": [
+ "knowledge",
+ "context",
+ "runtime"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "kontextual-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/kontextual-engine.yaml"
+ },
+ {
+ "id": "capability.communication.infospace-workspace",
+ "name": "Infospace Workspace And Evaluation Bench",
+ "summary": "Workspace and service for creating, developing, evaluating, and inspecting structured knowledge spaces (infospaces); application-layer successor to the infospace work begun in markitect-main.",
+ "vector": "D3 / A1 / C2 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "infospace-bench",
+ "path": "registry/capabilities/capability.communication.infospace-workspace.md",
+ "tags": [
+ "infospace",
+ "knowledge",
+ "evaluation"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import (consumed by info-tech-canon)"
+ ],
+ "source_repo": "infospace-bench",
+ "source_url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/infospace-bench.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-legacy-platform",
+ "name": "MarkiTect Legacy Platform",
+ "summary": "Intelligent markdown engine and information-management platform treating documents as structured, queryable information spaces with schema validation, transclusion, and LLM-driven evaluation; the legacy umbrella now being split into markitect-tool, infospace-bench, and kontextual-engine.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-main",
+ "path": "registry/capabilities/capability.communication.markitect-legacy-platform.md",
+ "tags": [
+ "markitect",
+ "markdown",
+ "legacy"
+ ],
+ "consumption_modes": [
+ "application (legacy, not recommended for new integration)"
+ ],
+ "source_repo": "markitect-main",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-main.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-quarkdown-adapter",
+ "name": "Markitect Quarkdown Render Adapter",
+ "summary": "Concrete Quarkdown render/export adapter for Markitect, mapping Markitect profiles to Quarkdown profiles and running controlled Quarkdown CLI execution plans without forking or reimplementing Quarkdown.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-quarkdown",
+ "path": "registry/capabilities/capability.communication.markitect-quarkdown-adapter.md",
+ "tags": [
+ "markitect",
+ "quarkdown",
+ "adapter"
+ ],
+ "consumption_modes": [
+ "library import (plugin/entry-point)"
+ ],
+ "source_repo": "markitect-quarkdown",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-quarkdown.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-source-adapters",
+ "name": "Markitect Source-Format Adapters",
+ "summary": "Concrete source-format adapters (EPUB3, PDF) converting external document formats into canonical Markitect Markdown, implementing the markitect-tool source adapter contract.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-filter",
+ "path": "registry/capabilities/capability.communication.markitect-source-adapters.md",
+ "tags": [
+ "markitect",
+ "adapter",
+ "document-conversion"
+ ],
+ "consumption_modes": [
+ "library import (plugin/entry-point)"
+ ],
+ "source_repo": "markitect-filter",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-filter.yaml"
+ },
+ {
+ "id": "capability.communication.markitect-toolkit",
+ "name": "Markitect Markdown Toolkit And CLI",
+ "summary": "Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown into structured, queryable, reusable knowledge artifacts; syntax-layer successor to markitect-main.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "markitect-tool",
+ "path": "registry/capabilities/capability.communication.markitect-toolkit.md",
+ "tags": [
+ "markitect",
+ "markdown",
+ "cli",
+ "toolkit"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import"
+ ],
+ "source_repo": "markitect-tool",
+ "source_url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/markitect-tool.yaml"
+ },
+ {
+ "id": "capability.design.whynot-system",
+ "name": "Whynot Design System",
+ "summary": "Framework-agnostic visual language for whynot prototype/market-signal artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain HTML, and Django template adapters.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "consumer",
+ "status": "draft",
+ "owner": "whynot-design",
+ "path": "registry/capabilities/capability.design.whynot-system.md",
+ "tags": [
+ "design-system",
+ "web-components",
+ "frontend"
+ ],
+ "consumption_modes": [
+ "library import (npm)",
+ "cli",
+ "django template adapter"
+ ],
+ "source_repo": "whynot-design",
+ "source_url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/whynot-design.yaml"
+ },
+ {
+ "id": "capability.evidence.binding",
+ "name": "Evidence-to-Target Binding",
+ "summary": "Links evidence items to structured targets with relation, status, and confidence metadata, bidirectional queries, active-state coordination, and canonical engine events.",
+ "vector": "D3 / A2 / C3 / R3",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-binder",
+ "path": "registry/capabilities/capability.evidence.binding.md",
+ "tags": [
+ "evidence",
+ "binding",
+ "evidence-link",
+ "form-field",
+ "citation-evidence"
+ ],
+ "consumption_modes": [
+ "source module",
+ "React provider"
+ ],
+ "source_repo": "evidence-binder",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "id": "capability.evidence.rect-registry",
+ "name": "Visual-Guide Rect Registry",
+ "summary": "Coordinates field, evidence-card, and highlight rectangles from independent renderers so an SVG overlay can draw the active visual guide without polling.",
+ "vector": "D3 / A2 / C3 / R3",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-binder",
+ "path": "registry/capabilities/capability.evidence.rect-registry.md",
+ "tags": [
+ "rect-registry",
+ "visual-guide",
+ "overlay",
+ "active-state",
+ "citation-evidence"
+ ],
+ "consumption_modes": [
+ "source module",
+ "React component"
+ ],
+ "source_repo": "evidence-binder",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-binder.yaml"
+ },
+ {
+ "id": "capability.feature-control.evaluate",
+ "name": "Feature Availability Evaluation",
+ "summary": "Evaluate whether a feature is active, hidden, disabled, or unavailable for a subject in context.",
+ "vector": "D5 / A4 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.evaluate.md",
+ "tags": [
+ "feature-control",
+ "evaluation",
+ "sdk"
+ ],
+ "consumption_modes": [
+ "SDK",
+ "service API"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.feature-control.rollout",
+ "name": "Feature Rollout Control",
+ "summary": "Gradually expose features to subjects across tenants, domains, groups, or cohorts using rollout rules.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.rollout.md",
+ "tags": [
+ "feature-control",
+ "rollout",
+ "planning"
+ ],
+ "consumption_modes": [
+ "source module",
+ "SDK"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.feature-control.visibility",
+ "name": "Feature Visibility Control",
+ "summary": "Control whether features are visible or hidden for subjects without changing entitlement or authorization.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "feature-control",
+ "path": "registry/capabilities/capability.feature-control.visibility.md",
+ "tags": [
+ "feature-control",
+ "visibility"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "feature-control",
+ "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/feature-control.yaml"
+ },
+ {
+ "id": "capability.graph.nbgm-spec",
+ "name": "Network-Based Graph Model (NBGM) Specification",
+ "summary": "Generic system and versioned protocol specification for exploring dependency structures as network-based graph models (NBGM), unifying entity/relationship inspection and reasoning across arbitrary domains.",
+ "vector": "D2 / A0 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "vantage-point",
+ "path": "registry/capabilities/capability.graph.nbgm-spec.md",
+ "tags": [
+ "graph",
+ "nbgm",
+ "specification"
+ ],
+ "consumption_modes": [
+ "informational (specification only)"
+ ],
+ "source_repo": "vantage-point",
+ "source_url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/vantage-point.yaml"
+ },
+ {
+ "id": "capability.hr.workflow-catalog",
+ "name": "HR Workflow Catalog",
+ "summary": "Markdown-first registry of HR planning workflows with an iterative assessment loop tied to INTENT phases.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "consumer",
+ "status": "draft",
+ "owner": "human-resources",
+ "path": "registry/capabilities/capability.hr.workflow-catalog.md",
+ "tags": [
+ "hr",
+ "workflows",
+ "assessment",
+ "planning"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "human-resources",
+ "source_url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/human-resources.yaml"
+ },
+ {
+ "id": "capability.iam.key-cape",
+ "name": "KeyCape Lightweight IAM (NetKingdom Profile)",
+ "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "key-cape",
+ "path": "registry/capabilities/capability.iam.key-cape.md",
+ "tags": [
+ "iam",
+ "oidc",
+ "netkingdom",
+ "security"
+ ],
+ "consumption_modes": [
+ "service (self-hosted deployment)"
+ ],
+ "source_repo": "key-cape",
+ "source_url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/key-cape.yaml"
+ },
+ {
+ "id": "capability.identity.subject-resolution",
+ "name": "Identity Subject Resolution",
+ "summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.",
+ "vector": "D3 / A0 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "commerce-canon",
+ "path": "registry/capabilities/capability.identity.subject-resolution.md",
+ "tags": [
+ "identity",
+ "subject",
+ "architecture"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "commerce-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "id": "capability.identity.user-engine",
+ "name": "Headless Multi-Tenant User Engine",
+ "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.",
+ "vector": "D4 / A1 / C2 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "user-engine",
+ "path": "registry/capabilities/capability.identity.user-engine.md",
+ "tags": [
+ "identity",
+ "user-management",
+ "multi-tenant"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "user-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/user-engine.yaml"
+ },
+ {
+ "id": "capability.identity.vocabulary-canonicalize",
+ "name": "Identity Vocabulary Canonicalization",
+ "summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.",
+ "vector": "D4 / A0 / C2 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "commerce-canon",
+ "path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md",
+ "tags": [
+ "identity",
+ "terminology",
+ "research"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "commerce-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/commerce-canon.yaml"
+ },
+ {
+ "id": "capability.infotech.artifact-store",
+ "name": "Artifact Registry And Storage Gateway",
+ "summary": "Generic artifact registry and storage gateway for generated outputs, evidence packages, reports, logs, snapshots, exports, and release artifacts.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "artifact-store",
+ "path": "registry/capabilities/capability.infotech.artifact-store.md",
+ "tags": [
+ "artifact",
+ "storage",
+ "provenance",
+ "registry"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli"
+ ],
+ "source_repo": "artifact-store",
+ "source_url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/artifact-store.yaml"
+ },
+ {
+ "id": "capability.infotech.canon-service",
+ "name": "InfoTechCanon Service Surface",
+ "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "info-tech-canon",
+ "path": "registry/capabilities/capability.infotech.canon-service.md",
+ "tags": [
+ "canon",
+ "infospace",
+ "service"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import",
+ "http api (read-only, local)"
+ ],
+ "source_repo": "info-tech-canon",
+ "source_url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/info-tech-canon.yaml"
+ },
+ {
+ "id": "capability.infotech.citation-engine",
+ "name": "Citation Evidence Domain Engine",
+ "summary": "Core domain model and engine services for the citation-evidence ecosystem \u2014 shared vocabulary, in-memory repositories, orchestration services, event bus, and citation card renderers.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "citation-engine",
+ "path": "registry/capabilities/capability.infotech.citation-engine.md",
+ "tags": [
+ "citation",
+ "evidence",
+ "domain-model"
+ ],
+ "consumption_modes": [
+ "library import (workspace link)"
+ ],
+ "source_repo": "citation-engine",
+ "source_url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/citation-engine.yaml"
+ },
+ {
+ "id": "capability.infotech.citation-evidence-workspace",
+ "name": "Citation Evidence Workspace",
+ "summary": "Document-centered evidence workspace for capturing, managing, presenting, and re-opening citations \u2014 the umbrella application over the citation-evidence six-package design.",
+ "vector": "D4 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "citation-evidence",
+ "path": "registry/capabilities/capability.infotech.citation-evidence-workspace.md",
+ "tags": [
+ "citation",
+ "evidence",
+ "workspace"
+ ],
+ "consumption_modes": [
+ "application (local dev server)"
+ ],
+ "source_repo": "citation-evidence",
+ "source_url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/citation-evidence.yaml"
+ },
+ {
+ "id": "capability.infotech.config-surface-atlas",
+ "name": "Configuration Surface Atlas",
+ "summary": "Read-first, cross-kind map and evidence layer for configuration surfaces \u2014 what configures a system, who owns it, its scope, and where the source of truth lives.",
+ "vector": "D5 / A0 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "config-atlas",
+ "path": "registry/capabilities/capability.infotech.config-surface-atlas.md",
+ "tags": [
+ "configuration",
+ "registry",
+ "control-plane",
+ "effective-config",
+ "evidence"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source module"
+ ],
+ "source_repo": "config-atlas",
+ "source_url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/config-atlas.yaml"
+ },
+ {
+ "id": "capability.infotech.core-hub",
+ "name": "Core Hub Production Interaction Framework",
+ "summary": "Contract-first framework for cross-domain state, agent coordination, evidence, registries, workplans, and operator interaction surfaces.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "core-hub",
+ "path": "registry/capabilities/capability.infotech.core-hub.md",
+ "tags": [
+ "interaction-framework",
+ "state-hub",
+ "inter-hub-successor",
+ "agent-coordination",
+ "registry",
+ "api"
+ ],
+ "consumption_modes": [
+ "informational",
+ "planning",
+ "cli"
+ ],
+ "source_repo": "core-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/core-hub.yaml"
+ },
+ {
+ "id": "capability.infotech.email-connector",
+ "name": "Mailbox Evidence Scanner (email-connect)",
+ "summary": "Headless, provider-neutral email communication and evidence service; first slice scans a mailbox or fixture directory and produces timestamped CSV evidence reports.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "email-connect",
+ "path": "registry/capabilities/capability.infotech.email-connector.md",
+ "tags": [
+ "email",
+ "evidence",
+ "coordination"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "email-connect",
+ "source_url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/email-connect.yaml"
+ },
+ {
+ "id": "capability.infotech.headless-browser",
+ "name": "Headless Browser Automation",
+ "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.",
+ "vector": "D3 / A5 / C2 / R2",
+ "domain": "infotech",
+ "status": "reviewed",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.infotech.headless-browser.md",
+ "tags": [
+ "headless",
+ "browser",
+ "automation",
+ "playwright",
+ "chromium",
+ "testing",
+ "screenshots",
+ "extraction",
+ "firefox",
+ "webkit",
+ "selenium",
+ "puppeteer"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source adaptation",
+ "JavaScript library",
+ "Python library",
+ "cli",
+ "service API",
+ "container"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.infotech.hub-core-library",
+ "name": "Reusable FOS Hub Core Primitives",
+ "summary": "Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State Hub for use by other FOS (Federation of Services) hubs.",
+ "vector": "D2 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "hub-core",
+ "path": "registry/capabilities/capability.infotech.hub-core-library.md",
+ "tags": [
+ "hub",
+ "fastapi",
+ "sqlalchemy",
+ "mcp"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "hub-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/hub-core.yaml"
+ },
+ {
+ "id": "capability.infotech.issue-tracking",
+ "name": "Universal Issue Tracking Coordination",
+ "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "issue-core",
+ "path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "tags": [
+ "issue-tracking",
+ "coordination",
+ "multi-platform"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import"
+ ],
+ "source_repo": "issue-core",
+ "source_url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/issue-core.yaml"
+ },
+ {
+ "id": "capability.infotech.oss-integration-continuity",
+ "name": "Managed Continuity For OSS Integrations",
+ "summary": "Turns proven open-source integrations into structured, maintainable, continuously managed assets with clear boundaries and update loops, so they remain robust and transparent as upstream evolves.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "open-reuse",
+ "path": "registry/capabilities/capability.infotech.oss-integration-continuity.md",
+ "tags": [
+ "oss",
+ "integration",
+ "maintenance"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "open-reuse",
+ "source_url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/open-reuse.yaml"
+ },
+ {
+ "id": "capability.infotech.pdf-evidence-ingest",
+ "name": "Headless PDF Evidence Ingest",
+ "summary": "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling.",
+ "vector": "D2 / A1 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "evidence-source",
+ "path": "registry/capabilities/capability.infotech.pdf-evidence-ingest.md",
+ "tags": [
+ "pdf",
+ "ingest",
+ "fingerprint",
+ "canonical-text",
+ "evidence"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "evidence-source",
+ "source_url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/evidence-source.yaml"
+ },
+ {
+ "id": "capability.infotech.repo-template",
+ "name": "Coulomb Repository Template",
+ "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.",
+ "vector": "D3 / A3 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "repo-seed",
+ "path": "registry/capabilities/capability.infotech.repo-template.md",
+ "tags": [
+ "template",
+ "bootstrap",
+ "state-hub",
+ "onboarding"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "informational"
+ ],
+ "source_repo": "repo-seed",
+ "source_url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/repo-seed.yaml"
+ },
+ {
+ "id": "capability.memory.phase-planning",
+ "name": "Profile-Driven Memory Phase Planning (phase-memory)",
+ "summary": "Interprets Markitect memory profiles as runtime plans, modeling memory phases and producing deterministic dry-run actions for retention, refresh, compaction, stabilization, and activation.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "phase-memory",
+ "path": "registry/capabilities/capability.memory.phase-planning.md",
+ "tags": [
+ "memory",
+ "agentic",
+ "planning"
+ ],
+ "consumption_modes": [
+ "library import"
+ ],
+ "source_repo": "phase-memory",
+ "source_url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/phase-memory.yaml"
+ },
+ {
+ "id": "capability.operations.ops-hub",
+ "name": "Operations Hub Extension Contract",
+ "summary": "Versioned hub-extension package and bootstrap client for operational truth, service-catalog records, readiness evidence, and migration gates.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "operations",
+ "status": "reviewed",
+ "owner": "ops-hub",
+ "path": "registry/capabilities/capability.operations.ops-hub.md",
+ "tags": [
+ "operations",
+ "service-catalog",
+ "readiness",
+ "hub-extension"
+ ],
+ "consumption_modes": [
+ "contract package",
+ "command-line bootstrap"
+ ],
+ "source_repo": "ops-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-hub.yaml"
+ },
+ {
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)",
+ "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-bridge",
+ "path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "tags": [
+ "ssh",
+ "tunnel",
+ "ops",
+ "connectivity"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "ops-bridge",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-bridge.yaml"
+ },
+ {
+ "id": "capability.procurement.vergabe-teilnahme",
+ "name": "Vergabe Teilnahme (Public Procurement Participation) Application",
+ "summary": "Django application (with a Vite/Tailwind frontend) for managing German public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und Teilnahme-Management-System.",
+ "vector": "D3 / A1 / C1 / R1",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "vergabe-teilnahme",
+ "path": "registry/capabilities/capability.procurement.vergabe-teilnahme.md",
+ "tags": [
+ "procurement",
+ "django",
+ "vergabe"
+ ],
+ "consumption_modes": [
+ "application (Django + Vite, local dev via docker-compose)"
+ ],
+ "source_repo": "vergabe-teilnahme",
+ "source_url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/vergabe-teilnahme.yaml"
+ },
+ {
+ "id": "capability.railiance.ci-enablement",
+ "name": "Railiance Developer Enablement And CI/CD Templates",
+ "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-enablement",
+ "path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "tags": [
+ "railiance",
+ "ci-cd",
+ "developer-enablement",
+ "forgejo"
+ ],
+ "consumption_modes": [
+ "ci workflow template (copy/reference)",
+ "cli (promote-repo-to-forgejo.sh)"
+ ],
+ "source_repo": "railiance-enablement",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-enablement.yaml"
+ },
+ {
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Railiance Cluster Runtime Bootstrap",
+ "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-cluster",
+ "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "iac",
+ "bootstrap"
+ ],
+ "consumption_modes": [
+ "cli",
+ "ansible playbook"
+ ],
+ "source_repo": "railiance-cluster",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-cluster.yaml"
+ },
+ {
+ "id": "capability.railiance.fabric-graph",
+ "name": "Railiance Fabric Ecosystem Graph",
+ "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-fabric",
+ "path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "tags": [
+ "railiance",
+ "graph",
+ "ownership",
+ "discovery"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli (validation)"
+ ],
+ "source_repo": "railiance-fabric",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-fabric.yaml"
+ },
+ {
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Railiance Forge And Artifact Infrastructure",
+ "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-forge",
+ "path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "tags": [
+ "railiance",
+ "forgejo",
+ "forge",
+ "ci-runner"
+ ],
+ "consumption_modes": [
+ "cli (operator tooling)",
+ "documentation/runbooks"
+ ],
+ "source_repo": "railiance-forge",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-forge.yaml"
+ },
+ {
+ "id": "capability.railiance.infra-provisioning",
+ "name": "RailianceHosts Infrastructure Provisioning",
+ "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-infra",
+ "path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "tags": [
+ "railiance",
+ "terraform",
+ "ansible",
+ "infrastructure"
+ ],
+ "consumption_modes": [
+ "cli (terraform/ansible)",
+ "gitops"
+ ],
+ "source_repo": "railiance-infra",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-infra.yaml"
+ },
+ {
+ "id": "capability.railiance.platform-services",
+ "name": "Railiance Platform Services",
+ "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-platform",
+ "path": "registry/capabilities/capability.railiance.platform-services.md",
+ "tags": [
+ "railiance",
+ "platform",
+ "secrets",
+ "postgres"
+ ],
+ "consumption_modes": [
+ "cli (shell/python scripts)"
+ ],
+ "source_repo": "railiance-platform",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-platform.yaml"
+ },
+ {
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Railiance Application Workload Deployment Tooling",
+ "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-apps",
+ "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "helm",
+ "deployment"
+ ],
+ "consumption_modes": [
+ "cli (shell scripts)",
+ "helm/kubernetes deployment"
+ ],
+ "source_repo": "railiance-apps",
+ "source_url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/railiance-apps.yaml"
+ },
+ {
+ "id": "capability.registry.register",
+ "name": "Capability Registration",
+ "summary": "Register a new capability so it becomes visible for planning and implementation reuse.",
+ "vector": "D3 / A4 / C2 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.register.md",
+ "tags": [
+ "registry",
+ "governance",
+ "meta"
+ ],
+ "consumption_modes": [
+ "informational",
+ "markdown authoring",
+ "cli",
+ "service API"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.registry.validate",
+ "name": "Registry Entry Validation",
+ "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.",
+ "vector": "D4 / A3 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.validate.md",
+ "tags": [
+ "registry",
+ "validation",
+ "cli"
+ ],
+ "consumption_modes": [
+ "cli"
+ ],
+ "source_repo": "reuse-surface",
+ "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/reuse-surface.yaml"
+ },
+ {
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom Security/IAM Tooling Suite",
+ "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "tags": [
+ "security",
+ "iam",
+ "kubernetes",
+ "conformance"
+ ],
+ "consumption_modes": [
+ "cli",
+ "local web ui"
+ ],
+ "source_repo": "net-kingdom",
+ "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/net-kingdom.yaml"
+ },
+ {
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "SSH Certificate Issuance",
+ "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.",
+ "vector": "D4 / A3 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "ops-warden",
+ "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "tags": [
+ "ssh",
+ "certificate",
+ "ca",
+ "ops-warden",
+ "openbao",
+ "security"
+ ],
+ "consumption_modes": [
+ "CLI",
+ "cert_command subprocess"
+ ],
+ "source_repo": "ops-warden",
+ "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/ops-warden.yaml"
+ },
+ {
+ "id": "capability.statehub.progress-log",
+ "name": "Work Progress Logging",
+ "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.",
+ "vector": "D4 / A4 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.progress-log.md",
+ "tags": [
+ "state-hub",
+ "progress",
+ "coordination"
+ ],
+ "consumption_modes": [
+ "service API"
+ ],
+ "source_repo": "state-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/state-hub.yaml"
+ },
+ {
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Workstream And Task Coordination",
+ "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.",
+ "vector": "D4 / A4 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "tags": [
+ "state-hub",
+ "coordination",
+ "workplans"
+ ],
+ "consumption_modes": [
+ "service API",
+ "HTTP REST"
+ ],
+ "source_repo": "state-hub",
+ "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/state-hub.yaml"
+ },
+ {
+ "id": "capability.wiki.adapter-contract",
+ "name": "Capability-Aware Shard Adapter Contract",
+ "summary": "A versioned backend interface where each binding declares a verified capability profile, so federation ops degrade by capability.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.adapter-contract.md",
+ "tags": [
+ "wiki",
+ "adapter",
+ "capability",
+ "contract",
+ "conformance",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.coordination-journal",
+ "name": "Event-Sourced Coordination Journal",
+ "summary": "An append-only, totally-ordered-per-space decision log whose current state is a derived fold; git-addressable history.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.coordination-journal.md",
+ "tags": [
+ "wiki",
+ "event-sourcing",
+ "coordination",
+ "git",
+ "journal",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.derived-views",
+ "name": "Wiki Derived Views",
+ "summary": "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges, AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance.",
+ "vector": "D3 / A0 / C0 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.derived-views.md",
+ "tags": [
+ "wiki",
+ "derived-views",
+ "backlinks",
+ "recentchanges",
+ "search",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.engine-typed-extensions",
+ "name": "Wiki Engine with Typed Extensions",
+ "summary": "A small-core wiki engine realizing a typed-extension framework that addresses all wiki use cases and lets each shard activate only the features it needs.",
+ "vector": "D3 / A0 / C0 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.engine-typed-extensions.md",
+ "tags": [
+ "wiki",
+ "engine",
+ "typed-extensions",
+ "feature-activation",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.federation-models",
+ "name": "Selectable Federation-Model Taxonomy",
+ "summary": "Federation as a plural, composable coordination axis (fork+journal, VCS-replication, query-join, feed, activity-streams, engine-mirror) selected per space.",
+ "vector": "D4 / A0 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.federation-models.md",
+ "tags": [
+ "wiki",
+ "federation",
+ "taxonomy",
+ "composable",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "informational"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.overlay",
+ "name": "Overlay-Before-Mutation Write Path",
+ "summary": "Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only or limited backends be edited safely without silent remote mutation.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.overlay.md",
+ "tags": [
+ "wiki",
+ "overlay",
+ "patch",
+ "write-path",
+ "conflict",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.page-model",
+ "name": "Backend-Neutral Wiki Page Model",
+ "summary": "A Markdown-first but stretchable page model with stable identity separate from placement and layered provenance.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.page-model.md",
+ "tags": [
+ "wiki",
+ "page-model",
+ "identity",
+ "provenance",
+ "markdown",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ },
+ {
+ "id": "capability.wiki.shard-orchestration",
+ "name": "Wiki Shard Orchestration",
+ "summary": "Present a union of pages across heterogeneous wiki-shaped shards while preserving each shard's provenance, capabilities, and history.",
+ "vector": "D5 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "shard-wiki",
+ "path": "registry/capabilities/capability.wiki.shard-orchestration.md",
+ "tags": [
+ "wiki",
+ "federation",
+ "orchestration",
+ "union",
+ "shard-wiki"
+ ],
+ "consumption_modes": [
+ "source module"
+ ],
+ "source_repo": "shard-wiki",
+ "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "source_index": "/data/cache/shard-wiki.yaml"
+ }
+ ],
+ "composed_at": "2026-10-14T00:17:44+00:00",
+ "stale": false
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json b/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json
new file mode 100644
index 00000000..a4d97f31
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json
@@ -0,0 +1,714 @@
+{
+ "count": 64,
+ "repos": [
+ {
+ "repo": "access-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-09-30T18:31:15+00:00",
+ "updated_at": "2026-09-30T18:31:15+00:00"
+ },
+ {
+ "repo": "activity-core",
+ "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:46:54+00:00",
+ "updated_at": "2026-08-21T14:26:03+00:00",
+ "description": ""
+ },
+ {
+ "repo": "agentic-resources",
+ "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:10+00:00",
+ "updated_at": "2026-08-20T21:44:26+00:00"
+ },
+ {
+ "repo": "artifact-store",
+ "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:15+00:00",
+ "updated_at": "2026-08-20T21:44:27+00:00"
+ },
+ {
+ "repo": "audit-core",
+ "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:46:57+00:00",
+ "updated_at": "2026-08-20T21:44:27+00:00"
+ },
+ {
+ "repo": "can-you-assist",
+ "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:20+00:00",
+ "updated_at": "2026-08-20T21:44:27+00:00"
+ },
+ {
+ "repo": "citation-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:25+00:00",
+ "updated_at": "2026-08-20T21:44:28+00:00"
+ },
+ {
+ "repo": "citation-evidence",
+ "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:30+00:00",
+ "updated_at": "2026-08-20T21:44:28+00:00"
+ },
+ {
+ "repo": "citation-work",
+ "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:33+00:00",
+ "updated_at": "2026-08-20T21:44:29+00:00"
+ },
+ {
+ "repo": "commerce-canon",
+ "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "description": "Canonical source after CFED-WP-0001-T03/T09; stable capability.identity identifiers retained.",
+ "registered_at": "2026-09-05T23:22:01+00:00",
+ "updated_at": "2026-09-05T23:22:01+00:00"
+ },
+ {
+ "repo": "config-atlas",
+ "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "infotech",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-07-06T22:41:01+00:00",
+ "updated_at": "2026-08-20T21:44:29+00:00"
+ },
+ {
+ "repo": "coordination-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:37+00:00",
+ "updated_at": "2026-08-20T21:44:30+00:00"
+ },
+ {
+ "repo": "core-hub",
+ "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-07-07T10:23:58+00:00",
+ "updated_at": "2026-07-07T10:23:58+00:00"
+ },
+ {
+ "repo": "domain-tree",
+ "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:50:41+00:00",
+ "updated_at": "2026-08-20T21:44:30+00:00"
+ },
+ {
+ "repo": "email-connect",
+ "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:20+00:00",
+ "updated_at": "2026-08-20T21:44:30+00:00"
+ },
+ {
+ "repo": "evidence-anchor",
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:25+00:00",
+ "updated_at": "2026-08-20T21:44:31+00:00"
+ },
+ {
+ "repo": "evidence-binder",
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:29+00:00",
+ "updated_at": "2026-08-21T08:31:50+00:00"
+ },
+ {
+ "repo": "evidence-source",
+ "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:34+00:00",
+ "updated_at": "2026-08-20T21:44:32+00:00"
+ },
+ {
+ "repo": "feature-control",
+ "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:35:01+00:00",
+ "updated_at": "2026-08-20T21:44:32+00:00"
+ },
+ {
+ "repo": "flex-auth",
+ "url": "https://forgejo.coulomb.social/coulomb/flex-auth/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": false,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:47:00+00:00",
+ "updated_at": "2026-09-30T18:31:16+00:00",
+ "description": "Superseded by access-engine (repo rename, FLEX-WP-0020). Kept disabled for audit."
+ },
+ {
+ "repo": "guide-board",
+ "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:39+00:00",
+ "updated_at": "2026-08-20T21:44:33+00:00"
+ },
+ {
+ "repo": "helix-forge",
+ "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:43+00:00",
+ "updated_at": "2026-08-20T21:44:33+00:00"
+ },
+ {
+ "repo": "hub-core",
+ "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:04:51+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "human-resources",
+ "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:52:48+00:00",
+ "updated_at": "2026-08-20T21:44:34+00:00"
+ },
+ {
+ "repo": "identity-canon",
+ "url": "https://forgejo.coulomb.social/coulomb/identity-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": false,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:35:02+00:00",
+ "updated_at": "2026-09-05T23:22:01+00:00",
+ "description": "Retired source registration after repository rename; replaced by commerce-canon under CFED-WP-0001-T09. Kept for history."
+ },
+ {
+ "repo": "ihp-railiance-probe",
+ "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:53:42+00:00",
+ "updated_at": "2026-08-20T21:44:34+00:00"
+ },
+ {
+ "repo": "info-tech-canon",
+ "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:53:45+00:00",
+ "updated_at": "2026-08-20T21:44:35+00:00"
+ },
+ {
+ "repo": "infospace-bench",
+ "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:53:49+00:00",
+ "updated_at": "2026-08-20T21:44:35+00:00"
+ },
+ {
+ "repo": "inter-hub",
+ "url": "https://gitea.coulomb.social/coulomb/inter-hub/raw/main/registry/indexes/capabilities.yaml",
+ "enabled": false,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:18+00:00",
+ "updated_at": "2026-07-07T10:26:41+00:00"
+ },
+ {
+ "repo": "issue-core",
+ "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:53:54+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "kaizen-agentic",
+ "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:53:57+00:00",
+ "updated_at": "2026-08-20T21:44:36+00:00"
+ },
+ {
+ "repo": "key-cape",
+ "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:00+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "kontextual-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:04+00:00",
+ "updated_at": "2026-08-20T21:44:36+00:00"
+ },
+ {
+ "repo": "llm-connect",
+ "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:07+00:00",
+ "updated_at": "2026-08-20T21:44:37+00:00"
+ },
+ {
+ "repo": "markitect-filter",
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:09+00:00",
+ "updated_at": "2026-08-20T21:44:37+00:00"
+ },
+ {
+ "repo": "markitect-main",
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:54:13+00:00",
+ "updated_at": "2026-08-20T21:44:37+00:00"
+ },
+ {
+ "repo": "markitect-quarkdown",
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:36+00:00",
+ "updated_at": "2026-08-20T21:44:38+00:00"
+ },
+ {
+ "repo": "markitect-tool",
+ "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:42+00:00",
+ "updated_at": "2026-08-20T21:44:38+00:00"
+ },
+ {
+ "repo": "net-kingdom",
+ "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:46+00:00",
+ "updated_at": "2026-08-20T21:44:39+00:00"
+ },
+ {
+ "repo": "open-cmis-tck",
+ "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:51+00:00",
+ "updated_at": "2026-08-20T21:44:39+00:00"
+ },
+ {
+ "repo": "open-reuse",
+ "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:56+00:00",
+ "updated_at": "2026-08-20T21:44:39+00:00"
+ },
+ {
+ "repo": "ops-bridge",
+ "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:55:59+00:00",
+ "updated_at": "2026-08-20T21:44:40+00:00"
+ },
+ {
+ "repo": "ops-hub",
+ "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:56:04+00:00",
+ "updated_at": "2026-08-20T21:44:40+00:00"
+ },
+ {
+ "repo": "ops-warden",
+ "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:56:09+00:00",
+ "updated_at": "2026-08-20T21:44:41+00:00"
+ },
+ {
+ "repo": "phase-memory",
+ "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:56:13+00:00",
+ "updated_at": "2026-08-20T21:44:41+00:00"
+ },
+ {
+ "repo": "railiance-apps",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:56:16+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "railiance-cluster",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:57:59+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "railiance-enablement",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:58:03+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "railiance-fabric",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:59:30+00:00",
+ "updated_at": "2026-08-20T21:44:42+00:00"
+ },
+ {
+ "repo": "railiance-forge",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:58:06+00:00",
+ "updated_at": "2026-08-20T21:44:42+00:00"
+ },
+ {
+ "repo": "railiance-infra",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:59:09+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "railiance-platform",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:58:46+00:00",
+ "updated_at": "2026-07-07T12:42:19+00:00"
+ },
+ {
+ "repo": "repo-scoping",
+ "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:58:52+00:00",
+ "updated_at": "2026-08-20T21:44:42+00:00"
+ },
+ {
+ "repo": "repo-seed",
+ "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:58:57+00:00",
+ "updated_at": "2026-08-20T21:44:43+00:00"
+ },
+ {
+ "repo": "reuse-surface",
+ "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "description": "Capability registry for helix_forge",
+ "registered_at": "2026-06-15T08:24:18+00:00",
+ "updated_at": "2026-08-20T21:44:43+00:00"
+ },
+ {
+ "repo": "shard-wiki",
+ "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:35:03+00:00",
+ "updated_at": "2026-08-20T21:44:44+00:00"
+ },
+ {
+ "repo": "state-hub",
+ "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:35:00+00:00",
+ "updated_at": "2026-07-07T16:09:42+00:00"
+ },
+ {
+ "repo": "tegwick-control",
+ "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:59:00+00:00",
+ "updated_at": "2026-08-20T21:44:44+00:00"
+ },
+ {
+ "repo": "the-custodian",
+ "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-15T23:59:04+00:00",
+ "updated_at": "2026-08-20T21:44:45+00:00"
+ },
+ {
+ "repo": "user-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:02:46+00:00",
+ "updated_at": "2026-08-20T21:44:45+00:00"
+ },
+ {
+ "repo": "vantage-point",
+ "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:02:51+00:00",
+ "updated_at": "2026-08-20T21:44:46+00:00"
+ },
+ {
+ "repo": "vergabe-teilnahme",
+ "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:02:56+00:00",
+ "updated_at": "2026-08-20T21:44:46+00:00"
+ },
+ {
+ "repo": "whynot-control",
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:03:00+00:00",
+ "updated_at": "2026-08-20T21:44:46+00:00"
+ },
+ {
+ "repo": "whynot-design",
+ "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml",
+ "enabled": true,
+ "required": false,
+ "domain": "helix_forge",
+ "cache_ttl_seconds": 86400,
+ "auth_header": "Authorization",
+ "registered_at": "2026-06-16T00:03:03+00:00",
+ "updated_at": "2026-08-20T21:44:47+00:00"
+ }
+ ]
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-verification.json b/docs/assessments/netkingdom-2026-10-14/hosted-verification.json
new file mode 100644
index 00000000..8b4ef920
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hosted-verification.json
@@ -0,0 +1,61 @@
+{
+ "matched": 32,
+ "expected": 70,
+ "missing": [
+ "capability.execution.openweight-rein",
+ "capability.execution.profile-harness",
+ "capability.execution.sandbox-provision",
+ "capability.execution.scheduled-agent-rein",
+ "capability.finance.security-budget-evidence",
+ "capability.identity.tenant-facts",
+ "capability.infotech.runbook-tutorials",
+ "capability.infotech.sbom-management",
+ "capability.observability.security-signals",
+ "capability.organization.role-catalog",
+ "capability.railiance.bootstrap-sequencing",
+ "capability.railiance.browser-verification",
+ "capability.railiance.knative-rail",
+ "capability.railiance.kubernetes-rail",
+ "capability.railiance.openbao-package",
+ "capability.railiance.policy-publication-package",
+ "capability.railiance.postgres-isolation-recovery",
+ "capability.railiance.sbom-runtime-package",
+ "capability.railiance.security-consumption-contracts",
+ "capability.railiance.substrate-bindings",
+ "capability.railiance.telemetry-package",
+ "capability.railiance.tenant-engine-package",
+ "capability.railiance.user-engine-package",
+ "capability.resources.security-capacity",
+ "capability.security.adversarial-evidence",
+ "capability.security.agent-knowledge",
+ "capability.security.approval-lifecycle",
+ "capability.security.credential-lifecycle",
+ "capability.security.doctrine-review",
+ "capability.security.human-decision-workspace",
+ "capability.security.maturity-claims",
+ "capability.security.policy-publication",
+ "capability.security.posture-assessment",
+ "capability.security.practice-canon",
+ "capability.security.repository-secret-prevention",
+ "capability.security.risk-register",
+ "capability.security.structure-construction",
+ "capability.security.zone-reference"
+ ],
+ "stale": false,
+ "composed_at": "2026-10-14T04:48:46+00:00",
+ "warnings": null,
+ "private_sources": [
+ "rapp-openbao",
+ "rapp-policy-nexus",
+ "rapp-postgres",
+ "rapp-telemetry",
+ "rapp-tenant-engine",
+ "rapp-user-engine",
+ "rapp-sbom-nexus"
+ ],
+ "write_attempt": {
+ "route": "reuse-surface-hub-write-token",
+ "pdp_decision": "decision:f730e3da14beebdd",
+ "result": "OpenBao 403 permission denied; helper not executed; no hub writes"
+ }
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json b/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json
new file mode 100644
index 00000000..af6b3430
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json
@@ -0,0 +1,104 @@
+{
+ "reason": "Anonymous source fetch returns 404; hub-side read credential or separately approved metadata publication is needed. Do not change repository visibility.",
+ "repos": [
+ "rapp-openbao",
+ "rapp-policy-nexus",
+ "rapp-postgres",
+ "rapp-sbom-nexus",
+ "rapp-telemetry",
+ "rapp-tenant-engine",
+ "rapp-user-engine"
+ ],
+ "draft_registrations_not_ready": [
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-openbao",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-openbao/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-policy-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-postgres",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-postgres/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-telemetry",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-telemetry/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-tenant-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-user-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-sbom-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ }
+ ],
+ "needed_fields": [
+ "auth_env name for an already admitted hub-side source-read credential",
+ "proof that the credential is limited to the intended repository read scope",
+ "successful hub-side index fetch without value disclosure",
+ "owner consent to metadata appearing in public federation"
+ ]
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json b/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json
new file mode 100644
index 00000000..160efdff
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json
@@ -0,0 +1,374 @@
+[
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "approval-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/approval-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "emergent-security",
+ "url": "https://forgejo.coulomb.social/coulomb/emergent-security/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "fin-hub",
+ "url": "https://forgejo.coulomb.social/coulomb/fin-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "gate-house",
+ "url": "https://forgejo.coulomb.social/coulomb/gate-house/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "glas-harness",
+ "url": "https://forgejo.coulomb.social/coulomb/glas-harness/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "informed-decision",
+ "url": "https://forgejo.coulomb.social/coulomb/informed-decision/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "kings-guard",
+ "url": "https://forgejo.coulomb.social/coulomb/kings-guard/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "maturity-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/maturity-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "ops-mason",
+ "url": "https://forgejo.coulomb.social/coulomb/ops-mason/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "policy-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rail-kubernetes",
+ "url": "https://forgejo.coulomb.social/coulomb/rail-kubernetes/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-bootstrap",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-bootstrap/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-master",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-master/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-telemetry",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-telemetry/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-playwright",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "reef-railiance",
+ "url": "https://forgejo.coulomb.social/coulomb/reef-railiance/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rein-aharness",
+ "url": "https://forgejo.coulomb.social/coulomb/rein-aharness/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rein-openweights",
+ "url": "https://forgejo.coulomb.social/coulomb/rein-openweights/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "repo-manager",
+ "url": "https://forgejo.coulomb.social/coulomb/repo-manager/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "resource-control",
+ "url": "https://forgejo.coulomb.social/coulomb/resource-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "risk-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/risk-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "role-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/role-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "runbook-tutorials",
+ "url": "https://forgejo.coulomb.social/coulomb/runbook-tutorials/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "sand-boxer",
+ "url": "https://forgejo.coulomb.social/coulomb/sand-boxer/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "sbom-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "secrets-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/secrets-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "security-canon",
+ "url": "https://forgejo.coulomb.social/coulomb/security-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "tenant-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "whitehat-security",
+ "url": "https://forgejo.coulomb.social/coulomb/whitehat-security/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "zone-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/zone-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rail-knative",
+ "url": "https://forgejo.coulomb.social/coulomb/rail-knative/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ }
+]
diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json
new file mode 100644
index 00000000..680a8d68
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json
@@ -0,0 +1,458 @@
+[
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "approval-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/approval-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "emergent-security",
+ "url": "https://forgejo.coulomb.social/coulomb/emergent-security/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "fin-hub",
+ "url": "https://forgejo.coulomb.social/coulomb/fin-hub/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "gate-house",
+ "url": "https://forgejo.coulomb.social/coulomb/gate-house/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "glas-harness",
+ "url": "https://forgejo.coulomb.social/coulomb/glas-harness/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "informed-decision",
+ "url": "https://forgejo.coulomb.social/coulomb/informed-decision/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "kings-guard",
+ "url": "https://forgejo.coulomb.social/coulomb/kings-guard/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "maturity-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/maturity-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "ops-mason",
+ "url": "https://forgejo.coulomb.social/coulomb/ops-mason/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "policy-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rail-kubernetes",
+ "url": "https://forgejo.coulomb.social/coulomb/rail-kubernetes/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-bootstrap",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-bootstrap/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-master",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-master/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "railiance-telemetry",
+ "url": "https://forgejo.coulomb.social/coulomb/railiance-telemetry/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-openbao",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-openbao/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-playwright",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-policy-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-postgres",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-postgres/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-telemetry",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-telemetry/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-tenant-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-user-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-user-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "reef-railiance",
+ "url": "https://forgejo.coulomb.social/coulomb/reef-railiance/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rein-aharness",
+ "url": "https://forgejo.coulomb.social/coulomb/rein-aharness/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rein-openweights",
+ "url": "https://forgejo.coulomb.social/coulomb/rein-openweights/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "repo-manager",
+ "url": "https://forgejo.coulomb.social/coulomb/repo-manager/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "resource-control",
+ "url": "https://forgejo.coulomb.social/coulomb/resource-control/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "risk-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/risk-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "role-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/role-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "runbook-tutorials",
+ "url": "https://forgejo.coulomb.social/coulomb/runbook-tutorials/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "sand-boxer",
+ "url": "https://forgejo.coulomb.social/coulomb/sand-boxer/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "sbom-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "secrets-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/secrets-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "security-canon",
+ "url": "https://forgejo.coulomb.social/coulomb/security-canon/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "tenant-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "whitehat-security",
+ "url": "https://forgejo.coulomb.social/coulomb/whitehat-security/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "zone-engine",
+ "url": "https://forgejo.coulomb.social/coulomb/zone-engine/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rail-knative",
+ "url": "https://forgejo.coulomb.social/coulomb/rail-knative/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ },
+ {
+ "method": "POST",
+ "path": "/v1/repos",
+ "body": {
+ "repo": "rapp-sbom-nexus",
+ "url": "https://forgejo.coulomb.social/coulomb/rapp-sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml",
+ "domain": "infotech",
+ "enabled": true,
+ "required": false,
+ "registered_by": "codex-CUST-WP-0081"
+ }
+ }
+]
diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json
new file mode 100644
index 00000000..b847dce6
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json
@@ -0,0 +1,14 @@
+{
+ "id": "CUST81-REUSE-REGISTRATION-001",
+ "authority": "User explicitly requested establishment of reviewed capabilities with reuse-surface. Source publication and cross-repository writes approved through sandbox escalation. No grant beyond registry metadata.",
+ "target": "https://reuse.coulomb.social/v1/repos",
+ "helper_sha256": "55465aa4f6a41960055d1b7fcf578c812c917af3110e58676f343472977202fd",
+ "plan_sha256": "ec0edd0301c43cfb98b5beea7fd454975bca8f6900359df851e70dcc6e6d08df",
+ "actions": 38,
+ "credential_lane": "reuse-surface-hub-write-token through warden access --exec; no credential export or persistence",
+ "expected": "All 60 reviewed owner indexes registered, all 70 reviewed IDs discoverable exactly once with source parity",
+ "verification": "Public HTTPS raw index and entry hashes, registration readback and fresh hosted federation payload",
+ "rollback": "Disable only newly created registrations from the exact plan if discovery is incorrect; preserve existing registrations. Source metadata can be reverted by the registry-only commits.",
+ "cost": "No service deployment or new recurring resource commitment; 38 bounded metadata writes and public readback on existing services.",
+ "risk": "Incorrect catalog discovery or temporary compose errors; no identity, policy, credential grant, workload or audit authority change. Stop on conflicting registration or transport failure."
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json
new file mode 100644
index 00000000..8cc40171
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json
@@ -0,0 +1,9 @@
+{
+ "complete": false,
+ "actions": [],
+ "helper_executed": false,
+ "credential_lane_result": "OpenBao HTTP 403",
+ "pdp_decision": "decision:f730e3da14beebdd",
+ "public_registrations_ready": 31,
+ "private_registrations_pending": 7
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/inventory.json b/docs/assessments/netkingdom-2026-10-14/inventory.json
new file mode 100644
index 00000000..a36f4f1c
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/inventory.json
@@ -0,0 +1,2905 @@
+{
+ "as_of": "2026-10-14",
+ "capabilities": [
+ {
+ "repo": "security-canon",
+ "id": "capability.security.practice-canon",
+ "name": "Security practice and authority vocabulary",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Versioned SEC-DSM and Mode of Authority documents",
+ "limitation": "Normative practice; no runtime control or certification",
+ "use_cases": [
+ "U01",
+ "U07",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.practice-canon.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom security architecture and conformance tooling",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned IAM, layer, tenancy and credential contracts plus validators",
+ "limitation": "Mixed accepted and proposed standards; framework integration remains incomplete",
+ "use_cases": [
+ "U01",
+ "U02",
+ "U03",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "SECURITY-COMPANION.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "prior_vector": "D3 / A2 / C1 / R1",
+ "vector": "D3 / A2 / C1 / R1",
+ "entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.scenario-compose",
+ "name": "Deterministic security scenario composition",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI selects pinned providers and orders trust transitions",
+ "limitation": "Plan only; execution.permitted is always false",
+ "use_cases": [
+ "U01",
+ "U14"
+ ],
+ "artifacts": [
+ "tools/security-scenario-composer/README.md",
+ "tools/security-scenario-composer/security_scenario_composer.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.scenario-compose.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.posture-feedback",
+ "name": "Deterministic posture feedback",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI evaluates evidence age and posture into owner-routed findings",
+ "limitation": "Proposal only; no policy changes or remediation execution",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "tools/posture-feedback/README.md",
+ "tools/posture-feedback/posture_feedback.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.posture-feedback.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.case-contracts",
+ "name": "Security case types and instance validation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned types, cases and schema validation",
+ "limitation": "Type acknowledgment, case acceptance, structural materialization and native execution are distinct",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "tools/security-case-types/README.md",
+ "canon/standards/security-case-types_v0.1.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.case-contracts.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.bootstrap-recovery",
+ "name": "Guarded bootstrap and recovery preparation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Local identity, bootstrap console, encrypted custody handoff and caller tools",
+ "limitation": "Source repairs and disposable native fixtures do not prove estate root isolation or recovery",
+ "use_cases": [
+ "U10"
+ ],
+ "artifacts": [
+ "tools/security-bootstrap-console/README.md",
+ "tools/custody-record/README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.bootstrap-recovery.md"
+ },
+ {
+ "repo": "net-kingdom",
+ "id": "capability.security.emission-profile",
+ "name": "Security emission cadence validation",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Security profile over generic emission contracts and validator",
+ "limitation": "Profile adoption and source completeness require owner-native evidence",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "tools/emission-cadence-profile/README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.emission-profile.md"
+ },
+ {
+ "repo": "key-cape",
+ "id": "capability.iam.key-cape",
+ "name": "OIDC identity and assurance",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI",
+ "limitation": "Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates",
+ "use_cases": [
+ "U02",
+ "U03",
+ "U04",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.iam.key-cape.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A4 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.iam.key-cape.md"
+ },
+ {
+ "repo": "user-engine",
+ "id": "capability.identity.user-engine",
+ "name": "User lifecycle and account journeys",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog",
+ "limitation": "Application readback is advisory; applications must enforce their own authorization",
+ "use_cases": [
+ "U02",
+ "U03",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.identity.user-engine.md",
+ "prior_vector": "D4 / A1 / C2 / R0",
+ "vector": "D4 / A4 / C2 / R0",
+ "entry_path": "registry/capabilities/capability.identity.user-engine.md"
+ },
+ {
+ "repo": "tenant-engine",
+ "id": "capability.identity.tenant-facts",
+ "name": "Tenant lifecycle and guardrail facts",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store",
+ "limitation": "Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate",
+ "use_cases": [
+ "U03",
+ "U04"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.identity.tenant-facts.md"
+ },
+ {
+ "repo": "zone-engine",
+ "id": "capability.security.zone-reference",
+ "name": "Zone membership reference conformance",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Offline resolution, exception and lineage checks",
+ "limitation": "No live zone engine, PDP or protected side effects",
+ "use_cases": [
+ "U01",
+ "U03",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.zone-reference.md"
+ },
+ {
+ "repo": "access-engine",
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Policy evaluation and decision evidence",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Check, batch, list-allowed, explain, binding, lifetime and decision records",
+ "limitation": "One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct",
+ "use_cases": [
+ "U03",
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A4 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md"
+ },
+ {
+ "repo": "approval-engine",
+ "id": "capability.security.approval-lifecycle",
+ "name": "Bound approval lifecycle",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Authenticated issue, claim, revoke, supersede and atomic consume API with outbox",
+ "limitation": "Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "approval_engine/api.py",
+ "docs/production-dependencies.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.approval-lifecycle.md"
+ },
+ {
+ "repo": "secrets-engine",
+ "id": "capability.security.credential-lifecycle",
+ "name": "Cataloged credential lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke",
+ "limitation": "Production protected execution and independently anchored PDP authentication remain incomplete",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U07"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "src/secrets_engine/decision_check.py"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.credential-lifecycle.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "Decision-bound SSH certificates",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "warden sign with local and OpenBao backends and adm/agt/atm actors",
+ "limitation": "Direct Tooling contact is a declared gap; certificate reachability is not target authorization",
+ "use_cases": [
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "prior_vector": "D4 / A3 / C3 / R2",
+ "vector": "D4 / A3 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.access-routing",
+ "name": "Credential routing and contained access",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "warden route and access catalog; exact lane conduit and secret-exec routing",
+ "limitation": "Routing grants no authority; interim delegates and attended high-risk lanes persist",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "wiki/CredentialRouting.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A3 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.access-routing.md"
+ },
+ {
+ "repo": "ops-warden",
+ "id": "capability.security.case-follow-through",
+ "name": "Security case operational follow-through",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "KnownSecurityCase route, plan and operational receipts",
+ "limitation": "Execution requires accepted structure and exact owner contracts; case closure is not automatic",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "workplans/WARDEN-WP-0044-security-case-follow-through.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.case-follow-through.md"
+ },
+ {
+ "repo": "ops-mason",
+ "id": "capability.security.structure-construction",
+ "name": "Reviewed security structure construction",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply",
+ "limitation": "Founder plan gate is an explicit exception; not full PDP conformance",
+ "use_cases": [
+ "U01",
+ "U05",
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/construction-plan-format.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.structure-construction.md"
+ },
+ {
+ "repo": "ops-bridge",
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH tunnel lifecycle",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Named tunnels, reconnect, health and TTL-aware cert_command",
+ "limitation": "Private transport does not authenticate applications or decide access",
+ "use_cases": [
+ "U06"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "prior_vector": "D3 / A2 / C2 / R1",
+ "vector": "D3 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md"
+ },
+ {
+ "repo": "audit-core",
+ "id": "capability.audit.event-retain",
+ "name": "Independent audit custody",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation",
+ "limitation": "Custody after arrival does not prove source completeness; freshness bounds integrity assertions",
+ "use_cases": [
+ "U08",
+ "U09",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/stream-completeness.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.audit.event-retain.md",
+ "prior_vector": "D4 provision / A4 / C3 / R2",
+ "vector": "D3 / A4 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.audit.event-retain.md"
+ },
+ {
+ "repo": "maturity-engine",
+ "id": "capability.security.maturity-claims",
+ "name": "Evidence-based maturity claims and gap register",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory",
+ "limitation": "No production deployment claimed; levels supply facts and cannot authorize actions",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/claim-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.maturity-claims.md"
+ },
+ {
+ "repo": "kings-guard",
+ "id": "capability.security.posture-assessment",
+ "name": "Security posture assessment and response proposals",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Normalized observation evaluator, cadence checks and secret-use snapshot adapter",
+ "limitation": "Bounded reference pilot; containment proposals only; deployed-stream admission remains open",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/SecretUseSnapshotAdmission.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.posture-assessment.md"
+ },
+ {
+ "repo": "whitehat-security",
+ "id": "capability.security.adversarial-evidence",
+ "name": "Authorized adversarial evidence harness",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Offline ASM and tenancy calibrations and engagement admission",
+ "limitation": "Live probes require a complete engagement; no blanket target authorization",
+ "use_cases": [
+ "U03",
+ "U08",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.adversarial-evidence.md"
+ },
+ {
+ "repo": "gate-house",
+ "id": "capability.security.doctrine-review",
+ "name": "Security doctrine and architecture review",
+ "availability": "A0",
+ "operational_estimate": 3,
+ "surface": "Layer rules, authority context, ASM criteria and interpretations",
+ "limitation": "Staff judgment; no runtime PDP, credential issuer or automatic enforcement",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "INTENT.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.doctrine-review.md"
+ },
+ {
+ "repo": "emergent-security",
+ "id": "capability.security.agent-knowledge",
+ "name": "Verified security orientation for agents",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports",
+ "limitation": "Current start card withheld for source drift; orientation never grants authority",
+ "use_cases": [
+ "U01",
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "knowledge/cards/start.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.agent-knowledge.md"
+ },
+ {
+ "repo": "informed-decision",
+ "id": "capability.security.human-decision-workspace",
+ "name": "Human security decision presentation and disposition",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Headless lifecycle and browser workspace with exact native approval references",
+ "limitation": "Initial audience is bounded; Approval Engine owns approval state, Access Engine decides",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.human-decision-workspace.md"
+ },
+ {
+ "repo": "policy-nexus",
+ "id": "capability.security.policy-publication",
+ "name": "Policy publication with source provenance",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Generated immutable publication, source currency and stable policy URLs",
+ "limitation": "Publication does not ratify policy or enforce it",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "README.md",
+ "docs/publication-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.policy-publication.md"
+ },
+ {
+ "repo": "risk-nexus",
+ "id": "capability.security.risk-register",
+ "name": "Security risk and exception review register",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Markdown findings and Python review, verification and due-work reports",
+ "limitation": "Judgment remains human or agent; no live EUR risk gate or autonomous response",
+ "use_cases": [
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.risk-register.md"
+ },
+ {
+ "repo": "role-engine",
+ "id": "capability.organization.role-catalog",
+ "name": "Organizational role definitions",
+ "availability": "A0",
+ "operational_estimate": 1,
+ "surface": "Versioned documentation catalog",
+ "limitation": "Not IAM roles, assignments or runtime authorization",
+ "use_cases": [
+ "U01",
+ "U11"
+ ],
+ "artifacts": [
+ "README.md",
+ "INTENT.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.organization.role-catalog.md"
+ },
+ {
+ "repo": "glas-harness",
+ "id": "capability.execution.profile-harness",
+ "name": "Profile-bound agent execution lifecycle",
+ "availability": "A3",
+ "operational_estimate": 2,
+ "surface": "Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration",
+ "limitation": "No ready profile asserted by SCOPE; Custodian native isolation remains open",
+ "use_cases": [
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A3 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.profile-harness.md"
+ },
+ {
+ "repo": "sand-boxer",
+ "id": "capability.execution.sandbox-provision",
+ "name": "Sandbox establishment and lifecycle",
+ "availability": "A5",
+ "operational_estimate": 2,
+ "surface": "Profiles, extensions, provision, checkpoints, TTL teardown and telemetry",
+ "limitation": "Backend-specific guarantees; a created sandbox alone proves no credential isolation",
+ "use_cases": [
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/execution.sandbox-provision.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D5 / A5 / C5 / R0",
+ "entry_path": "registry/capabilities/execution.sandbox-provision.md"
+ },
+ {
+ "repo": "rein-aharness",
+ "id": "capability.execution.scheduled-agent-rein",
+ "name": "Scheduled agent intake and harness routing",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Activity Core lease claim/heartbeat and Glas profile execution",
+ "limitation": "Legacy paths are time-gated; task success is not privileged authority",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.scheduled-agent-rein.md"
+ },
+ {
+ "repo": "rein-openweights",
+ "id": "capability.execution.openweight-rein",
+ "name": "Bounded open-weight agent execution",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Tool loop, path guards, turn/budget limits and verified-commit result",
+ "limitation": "Provider credential acquisition and runtime authority need separate custody controls",
+ "use_cases": [
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.execution.openweight-rein.md"
+ },
+ {
+ "repo": "agentic-resources",
+ "id": "capability.agents.performance-learning",
+ "name": "Agent performance learning",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Capture sessions, curate patterns, distribute lessons and measure outcomes",
+ "limitation": "Workforce assignments and broader authority contracts remain proposed",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.agents.performance-learning.md"
+ },
+ {
+ "repo": "runbook-tutorials",
+ "id": "capability.infotech.runbook-tutorials",
+ "name": "Guided administrative runbooks",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Pack schema, loader, local UI/CLI, gates, verification and rollback evidence",
+ "limitation": "Owner supplies procedures; UI progress is not runtime approval",
+ "use_cases": [
+ "U05",
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/pack-spec.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md",
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md"
+ },
+ {
+ "repo": "repo-manager",
+ "id": "capability.security.repository-secret-prevention",
+ "name": "Repository metadata and staged-secret prevention",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Repository observation plus pinned staged-blob scanner and hook integration",
+ "limitation": "Local hooks are bypassable; coverage is exact-checkout scoped",
+ "use_cases": [
+ "U07",
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.repository-secret-prevention.md"
+ },
+ {
+ "repo": "sbom-nexus",
+ "id": "capability.infotech.sbom-management",
+ "name": "Dependency provenance and SBOM evidence",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Controlled archive ingest, immutable snapshots, freshness and license review",
+ "limitation": "SBOM and license evidence do not prove vulnerability exploitability or artifact trust",
+ "use_cases": [
+ "U12",
+ "U09"
+ ],
+ "artifacts": [
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.sbom-management.md",
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.sbom-management.md"
+ },
+ {
+ "repo": "activity-core",
+ "id": "capability.activity.event-coordinate",
+ "name": "Durable automation and bounded operations",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks",
+ "limitation": "Not a general shell executor; first unassisted security-flow cadence acceptance remains open",
+ "use_cases": [
+ "U09",
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.activity.event-coordinate.md"
+ },
+ {
+ "repo": "issue-core",
+ "id": "capability.infotech.issue-tracking",
+ "name": "External issue tracker connector",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "CLI and Python adapters for external issue systems",
+ "limitation": "Internal work originates in owner files; external projection is optional",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.infotech.issue-tracking.md"
+ },
+ {
+ "repo": "state-hub",
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Cross-repository work tracking",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "File-derived workplans, tasks, dependencies, decisions and coordination views",
+ "limitation": "Read/cache/index of owner work; not runtime approval authority",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "README.md",
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "prior_vector": "D4 / A4 / C3 / R2",
+ "vector": "D4 / A4 / C3 / R2",
+ "entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md"
+ },
+ {
+ "repo": "state-hub",
+ "id": "capability.statehub.progress-log",
+ "name": "Progress and work evidence indexing",
+ "availability": "A4",
+ "operational_estimate": 3,
+ "surface": "REST progress and task evidence references",
+ "limitation": "Not independent security event custody",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "README.md",
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.statehub.progress-log.md",
+ "prior_vector": "D4 / A4 / C3 / R3",
+ "vector": "D4 / A4 / C3 / R3",
+ "entry_path": "registry/capabilities/capability.statehub.progress-log.md"
+ },
+ {
+ "repo": "the-custodian",
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Generic agent runtime and repository tooling",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Agent runtime modules and repository classification tooling",
+ "limitation": "Only generic tooling is reusable; confidential canon and session memory are excluded",
+ "use_cases": [
+ "U09",
+ "U11",
+ "U14"
+ ],
+ "artifacts": [
+ "runtime/README.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "prior_vector": "D2 / A1 / C1 / R0",
+ "vector": "D2 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md"
+ },
+ {
+ "repo": "coordination-engine",
+ "id": "capability.coordination.cross-owner-work",
+ "name": "Cross-owner coordination lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime",
+ "limitation": "Coordinates owners without replacing their execution or security authority",
+ "use_cases": [
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "spec/cross-owner-wait-mode-v0.1.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.coordination.cross-owner-work.md"
+ },
+ {
+ "repo": "reuse-surface",
+ "id": "capability.registry.register",
+ "name": "Capability registry and federation",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "Owner Markdown entries, indexes, federation hub and planning queries",
+ "limitation": "Discovery is not readiness; empty and stale entries need evidence-led maintenance",
+ "use_cases": [
+ "U01",
+ "U09",
+ "U14"
+ ],
+ "artifacts": [
+ "docs/RegistryFederation.md",
+ "specs/CapabilityMaturityStandard.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.registry.register.md",
+ "prior_vector": "D3 / A4 / C2 / R3",
+ "vector": "D3 / A3 / C2 / R3",
+ "entry_path": "registry/capabilities/capability.registry.register.md"
+ },
+ {
+ "repo": "reuse-surface",
+ "id": "capability.registry.validate",
+ "name": "Capability registry validation",
+ "availability": "A3",
+ "operational_estimate": 3,
+ "surface": "Schema, index consistency and relation checks",
+ "limitation": "Schema validity alone proves neither capability behavior nor hosted freshness",
+ "use_cases": [
+ "U01",
+ "U14"
+ ],
+ "artifacts": [
+ "docs/RegistryFederation.md",
+ "schemas/capability.schema.yaml"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.registry.validate.md",
+ "prior_vector": "D4 / A3 / C3 / R3",
+ "vector": "D4 / A3 / C3 / R3",
+ "entry_path": "registry/capabilities/capability.registry.validate.md"
+ },
+ {
+ "repo": "info-tech-canon",
+ "id": "capability.infotech.canon-service",
+ "name": "Shared semantic contracts and validation",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Markdown canon with library, CLI and read-only API",
+ "limitation": "Mixed seed/candidate maturity; validation is not owner runtime conformance",
+ "use_cases": [
+ "U01",
+ "U08",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.infotech.canon-service.md",
+ "prior_vector": "D2 / A2 / C1 / R0",
+ "vector": "D2 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.infotech.canon-service.md"
+ },
+ {
+ "repo": "railiance-master",
+ "id": "capability.railiance.security-consumption-contracts",
+ "name": "Platform security consumption architecture",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Rail/rapp/reef boundaries, exposure and security consumption contracts",
+ "limitation": "Architecture declarations do not prove implementation or production admission",
+ "use_cases": [
+ "U01",
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/netkingdom-security-consumption-contract.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.security-consumption-contracts.md"
+ },
+ {
+ "repo": "railiance-platform",
+ "id": "capability.railiance.platform-services",
+ "name": "Secret custody and platform data services",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts",
+ "limitation": "Package ownership is split to rapp repos; caches and object services are demand-led",
+ "use_cases": [
+ "U04",
+ "U05",
+ "U07",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "docs/openbao.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.platform-services.md",
+ "prior_vector": "D3 / A2 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.platform-services.md"
+ },
+ {
+ "repo": "railiance-infra",
+ "id": "capability.railiance.infra-provisioning",
+ "name": "Host convergence and security baseline",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Ansible inventory, firewall, SSH bootstrap and baseline verification",
+ "limitation": "Current hosts differ from the retained Hetzner provisioning path",
+ "use_cases": [
+ "U06",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "prior_vector": "D4 / A2 / C2 / R1",
+ "vector": "D4 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md"
+ },
+ {
+ "repo": "railiance-cluster",
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Kubernetes runtime and cluster controls",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "k3s, ingress, CNI, operators and kubeconfig/runtime checks",
+ "limitation": "Single-node runtime and workload recovery are distinct from bootstrap success",
+ "use_cases": [
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "prior_vector": "D3 / A2 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md"
+ },
+ {
+ "repo": "railiance-enablement",
+ "id": "capability.railiance.ci-enablement",
+ "name": "Developer delivery and CI templates",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Reusable CI workflows, build and deployment patterns",
+ "limitation": "Templates do not prove mandatory checks or runner isolation",
+ "use_cases": [
+ "U12",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "prior_vector": "D3 / A2 / C2 / R1",
+ "vector": "D3 / A2 / C2 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.ci-enablement.md"
+ },
+ {
+ "repo": "railiance-forge",
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Source forge, registries and runner substrate",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Forgejo operation, package registries and runner lifecycle",
+ "limitation": "Runner workload authority and independent verification coverage remain open",
+ "use_cases": [
+ "U12"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "workplans/FORGE-WP-0006-independent-secret-detection.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md"
+ },
+ {
+ "repo": "railiance-forge",
+ "id": "capability.security.forge-secret-prevention",
+ "name": "Independent introduced-history secret prevention",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Pinned receive adapter, lifecycle template and fail-closed scan",
+ "limitation": "Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate",
+ "use_cases": [
+ "U07",
+ "U12"
+ ],
+ "artifacts": [
+ "workplans/FORGE-WP-0006-independent-secret-detection.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.security.forge-secret-prevention.md"
+ },
+ {
+ "repo": "railiance-apps",
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Workload release configuration and guards",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Helm/manifests, exact image pins, application runbooks and rollout/rollback",
+ "limitation": "Release settings depend on underlying platform and workload owners",
+ "use_cases": [
+ "U12",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "prior_vector": "D3 / A2 / C1 / R1",
+ "vector": "D3 / A2 / C1 / R1",
+ "entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md"
+ },
+ {
+ "repo": "railiance-bootstrap",
+ "id": "capability.railiance.bootstrap-sequencing",
+ "name": "Bootstrap sequencing contracts",
+ "availability": "A0",
+ "operational_estimate": 1,
+ "surface": "Bare-VM to estate sequence and handoff contract",
+ "limitation": "End-to-end unattended rebuild is not established",
+ "use_cases": [
+ "U10",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.bootstrap-sequencing.md"
+ },
+ {
+ "repo": "rail-kubernetes",
+ "id": "capability.railiance.kubernetes-rail",
+ "name": "Generic Kubernetes workload lifecycle",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Workload declaration, rollout, observe, promote and rollback surfaces",
+ "limitation": "Compatibility extraction remains; not cluster or application-domain ownership",
+ "use_cases": [
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.kubernetes-rail.md"
+ },
+ {
+ "repo": "reef-railiance",
+ "id": "capability.railiance.substrate-bindings",
+ "name": "Substrate topology and bindings",
+ "availability": "A0",
+ "operational_estimate": 2,
+ "surface": "Grouped home-reef identity, topology and placement declarations",
+ "limitation": "Declarations are not automatic placement or authorization",
+ "use_cases": [
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A0 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.substrate-bindings.md"
+ },
+ {
+ "repo": "railiance-fabric",
+ "id": "capability.railiance.fabric-graph",
+ "name": "Infrastructure ownership and dependency graph",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Schemas, validation, graph queries and State Hub exports",
+ "limitation": "Graph assertions need current owner evidence; not an enforcement registry",
+ "use_cases": [
+ "U09",
+ "U13",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "prior_vector": "D3 / A1 / C1 / R0",
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.fabric-graph.md"
+ },
+ {
+ "repo": "rapp-openbao",
+ "id": "capability.railiance.openbao-package",
+ "name": "Managed OpenBao deployment package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Helm values, package deploy/status/smoke/rollback and custody boundary",
+ "limitation": "Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit",
+ "use_cases": [
+ "U04",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "README.md",
+ "docs/retained-s3-handoff.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.openbao-package.md"
+ },
+ {
+ "repo": "rapp-postgres",
+ "id": "capability.railiance.postgres-isolation-recovery",
+ "name": "Database isolation and recovery package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures",
+ "limitation": "Host-loss proof and consumer schemas stay with their owners",
+ "use_cases": [
+ "U03",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.postgres-isolation-recovery.md"
+ },
+ {
+ "repo": "rapp-user-engine",
+ "id": "capability.railiance.user-engine-package",
+ "name": "User Engine runtime package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Pinned deployment, dedicated CNPG, ExternalSecret references and rollback",
+ "limitation": "Domain, identity, PDP and custody authority are separate",
+ "use_cases": [
+ "U02",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.user-engine-package.md"
+ },
+ {
+ "repo": "rapp-tenant-engine",
+ "id": "capability.railiance.tenant-engine-package",
+ "name": "Tenant Engine runtime package",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Package declaration, smoke and rollback",
+ "limitation": "No tenant-domain ownership or credential values",
+ "use_cases": [
+ "U03",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.tenant-engine-package.md"
+ },
+ {
+ "repo": "rapp-policy-nexus",
+ "id": "capability.railiance.policy-publication-package",
+ "name": "Policy publication runtime package",
+ "availability": "A2",
+ "operational_estimate": 3,
+ "surface": "Immutable image, non-root/read-only runtime and approved TLS exposure",
+ "limitation": "No policy authoring or DNS/issuer administration",
+ "use_cases": [
+ "U01",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.policy-publication-package.md"
+ },
+ {
+ "repo": "rapp-playwright",
+ "id": "capability.railiance.browser-verification",
+ "name": "Managed browser verification pilot",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Bounded jobs, cancellation, artifacts, origin checks and restart receipts",
+ "limitation": "Pilot deployed; human/agent authentication and per-caller self-service connectivity pending",
+ "use_cases": [
+ "U02",
+ "U14"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.browser-verification.md"
+ },
+ {
+ "repo": "railiance-telemetry",
+ "id": "capability.observability.security-signals",
+ "name": "Security-relevant telemetry contracts and adapters",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Signal contract, platform adapters, report exporter and absence/alert rules",
+ "limitation": "Reference receiver is not a second production plane; end-to-end delivery acceptance pending",
+ "use_cases": [
+ "U08",
+ "U09"
+ ],
+ "artifacts": [
+ "SCOPE.md",
+ "README.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.observability.security-signals.md"
+ },
+ {
+ "repo": "rapp-telemetry",
+ "id": "capability.railiance.telemetry-package",
+ "name": "Private monitoring package",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Prometheus, Alertmanager and Grafana package with isolated restore evidence",
+ "limitation": "Private installation only; recurring recovery capture and audited confirmation pending",
+ "use_cases": [
+ "U08",
+ "U09",
+ "U10"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.railiance.telemetry-package.md"
+ },
+ {
+ "repo": "resource-control",
+ "id": "capability.resources.security-capacity",
+ "name": "Capacity and recovery resource planning",
+ "availability": "A2",
+ "operational_estimate": 2,
+ "surface": "Provider-neutral inventory, procurement evidence and optimization reports",
+ "limitation": "No payment authority or irreversible procurement; metrics do not prove usable runtime capacity",
+ "use_cases": [
+ "U09",
+ "U10",
+ "U13"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A2 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.resources.security-capacity.md"
+ },
+ {
+ "repo": "fin-hub",
+ "id": "capability.finance.security-budget-evidence",
+ "name": "Budget and cost evidence for security operations",
+ "availability": "A4",
+ "operational_estimate": 2,
+ "surface": "Budget, commitment, spend attribution and planning-evidence consumption",
+ "limitation": "No verified concurrent runtime EUR risk/cost enforcement for agents",
+ "use_cases": [
+ "U09",
+ "U11"
+ ],
+ "artifacts": [
+ "SCOPE.md"
+ ],
+ "existing_entry_path": null,
+ "prior_vector": null,
+ "vector": "D3 / A4 / C1 / R0",
+ "entry_path": "registry/capabilities/capability.finance.security-budget-evidence.md"
+ }
+ ],
+ "repositories": {
+ "access-engine": {
+ "head": "16ca97b2776789f730cc7049a2d6533612faaccd",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:f6c14f5f824fb86ac06368fb9c52e60d627ee42810817a45723d34a6a9a178a5",
+ "README.md": "sha256:7ed086b4d153ff067f4f8d3665891b65006a4a74cec8e6fb596e7e1dbd097b38",
+ "SCOPE.md": "sha256:dd1484a32a313135e69f16dbc833d768467491438bbb1d9127c2b098061edb60"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.authorization.policy-evaluate",
+ "name": "Authorization Policy Evaluation",
+ "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "flex-auth",
+ "path": "registry/capabilities/capability.authorization.policy-evaluate.md",
+ "tags": [
+ "authorization",
+ "policy",
+ "flex-auth"
+ ],
+ "consumption_modes": [
+ "source module"
+ ]
+ }
+ ]
+ }
+ },
+ "activity-core": {
+ "head": "83e6446807c4b36f3aa5023a5c16d4c7df8bd3df",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:8aec524060edb9309af679ef38bc5549aa3650752634d23977c7ae57c45bbefa",
+ "README.md": "sha256:549e7878b27bbf7edc9e958c7afbacd3eba773b082151d226b5f0a14af654f9b",
+ "SCOPE.md": "sha256:820aafbff2f7d1c314c0c270d745468172a0500d106ab276216e0eeb702ca7bd"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.activity.event-coordinate",
+ "name": "Organizational Event Coordination",
+ "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "activity-core",
+ "path": "registry/capabilities/capability.activity.event-coordinate.md",
+ "tags": [
+ "activity",
+ "coordination",
+ "automation"
+ ],
+ "consumption_modes": [
+ "informational"
+ ]
+ }
+ ]
+ }
+ },
+ "agentic-resources": {
+ "head": "65b3a5cb6bf3eb214b492b95a38f2eb729f89709",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:81dc51facb26c36ab6b7bc85a22802bbf89c88558c7cb3e749e0c205a0ba24d4",
+ "README.md": "sha256:4e890352ff6088a2e018a11738a1959971b07b584a4ca3b8fb2aed88b9ea26f1",
+ "SCOPE.md": "sha256:ba38e80cf2a374063eb6b6b60211a02e32bca5d3b260aea5f8a70978f67a5627"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "approval-engine": {
+ "head": "e1649617e8ad321f79632d5fd33e973ae5d5ae51",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:06dbab07ed14fa43d0fc6b54eaacc2b3f7b4a9196050e3f73c9c4e58086636c5",
+ "README.md": "sha256:4d095613decf7d64012e19d4e76823296bdbeedc82cae17c9b5cf752671b45c9",
+ "SCOPE.md": "sha256:1425d4ae5942cf09197719b1f66989c4d5e8d2d5627c7fa79dc6151908b03990",
+ "approval_engine/api.py": "sha256:4c686aa3b4d645c4ad2a84a5f299db9b013b59a5c747853837adbe3a3a05be63",
+ "docs/production-dependencies.md": "sha256:c2244e4a72dc174d0f5e9fc7da6b56fac2596d4b553a11c738976404cef05fa8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "audit-core": {
+ "head": "f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:cffd7a3730ea54dab4e745329005813011bb821d9922d9a6aff3977ec46162c7",
+ "README.md": "sha256:c7ab22ae28d07afc746d7cb10e168291dfbc3207be60cd32ec416ff0f27f51f1",
+ "SCOPE.md": "sha256:358ecab2cf8e32567f2220c5cd3d9b3f7ce9349faaa8d89bc464d5f82f09e80e",
+ "docs/stream-completeness.md": "sha256:e3c4b1e0ff5bdd648077ae0b6473a0094ccb4a65e8ce398df11aa43faf0d65cf"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-08-16",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.audit.event-retain",
+ "name": "Audit Event Retention",
+ "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.",
+ "joins": "operations.audit",
+ "provision": "data/capability/audit-core-operational.json",
+ "vector": "D4 provision / A4 / C3 / R2",
+ "domain": "infotech",
+ "status": "production",
+ "owner": "audit-core",
+ "path": "registry/capabilities/capability.audit.event-retain.md",
+ "tags": [
+ "audit",
+ "retention",
+ "compliance"
+ ],
+ "consumption_modes": [
+ "http ingest",
+ "source module"
+ ]
+ }
+ ]
+ }
+ },
+ "coordination-engine": {
+ "head": "c401067842072b75717f76480dd6e7db1836059c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7236c8dc284fcbe81c47eedde25e197d5a911a73267bfd448f8930140d2f6fd9",
+ "README.md": "sha256:fa6812b74956387a85cf07ccf3ef05f79aa07ca937e6f5d073edd318238e768d",
+ "SCOPE.md": "sha256:e207efd8bf40ede4ad6c2705121cefc809467dab72746054850c62f2e2e3a12e",
+ "spec/cross-owner-wait-mode-v0.1.md": "sha256:42f51f8dd1523a1243797fc3fc21a0d6d756c4e9d9d77142296735c1ef6de915"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "emergent-security": {
+ "head": "4c6fda38298fa50665ead41526b893adf069d335",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:64daea4874c8d8822a52437b15ffc8f9d5e30491dd0b61d0958bd186d1dc7269",
+ "README.md": "sha256:40e23e0233f5b33949fc25047cea13b827af3d44bd73e00b3c4eb8b1feb338cc",
+ "SCOPE.md": "sha256:b90916cef962e5999c8fee886f5d0b68f55707a38f428a20d0390d2bf2c0d603",
+ "knowledge/cards/start.md": "sha256:698a18f4a8f97a43da75ed0767aa0425c970e17c04a9cbea75cfab719564cc5d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "fin-hub": {
+ "head": "8f527c6705bbf5d7ffed43559411ca748bec8fe4",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7697ddd29c8324197c925378c55eadcbf89899903af4321d0325f26e52ca3d19",
+ "README.md": "sha256:f35fb3d21f6264f8fab0ab204b79c81f82e6f9764ebc06aa0735d330ad854470",
+ "SCOPE.md": "sha256:2ef38e5d1a36dedfa7785f128a35b0058ae7e123bba834efa41dcc809d18a631"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "gate-house": {
+ "head": "bc890c4d050a2e726ce8988a8260ab9caea133e3",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:013692bbb52ce85dc1ad8dc95292c64d4e7c2c58714549a1e23331eae5d556e7",
+ "README.md": "sha256:e2c7b7c94884260f4e3e33d963544299a6076bd63729baa0e03e0bb34c423002",
+ "SCOPE.md": "sha256:5c7b9bc38fa7887f2188c34cb1110e37f47f2b9ebc4f33e85ef96ef80a1c9a79"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "glas-harness": {
+ "head": "7b1557ba14f483569b90ebfdc2d0136fa69602fe",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:d9c256243816e372757a256b0c2b87f5a0333fb1d65f0488b66600f985553cf2",
+ "README.md": "sha256:23179d6a1760e442fa025ac73aed050ee0141e985e87979c0a05781fdc2ca350",
+ "SCOPE.md": "sha256:5a2b96f8a3aa7218ad43dbd72abc89319a44c329298e973589f49c4ec354b0c6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "info-tech-canon": {
+ "head": "3d206a56f4ece439f6ee87f9ee4d1800ab82166e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:aa739b333929bc5d36a0654ef5afea1b9dedabad38da0c335f3d8b0f17a38bad",
+ "README.md": "sha256:55f21ebac58356dabdd032d4396a6eb0e3af4c5d13c900667fb79827879b58b1",
+ "SCOPE.md": "sha256:342ee894c1d6d64da76ff521eeb3c21279c55c6e7b7f0892b34f54c2d89e91b3"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.canon-service",
+ "name": "InfoTechCanon Service Surface",
+ "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.",
+ "vector": "D2 / A2 / C1 / R0",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "info-tech-canon",
+ "path": "registry/capabilities/capability.infotech.canon-service.md",
+ "tags": [
+ "canon",
+ "infospace",
+ "service"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import",
+ "http api (read-only, local)"
+ ]
+ }
+ ]
+ }
+ },
+ "informed-decision": {
+ "head": "ee6a65b80a0fea1a914dfa31434b903669656c09",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:b543c2d80b97182393e2d080ae8fd3759f2e956a89306c2c568c0010e7425eeb",
+ "README.md": "sha256:7d2bcb581348c4cae55b59550eb7a9ef34abaa928375acae28ec41878c5abb7b",
+ "SCOPE.md": "sha256:ab352aa1a88ca53106517b14eafc62a3cb6504519638835227e6f852b3cdf68b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "issue-core": {
+ "head": "de368271f6ffc06353ec409998a0d6d0ec0bf25e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:fb6e1f77fed6b5ae110fdcfb92dd96263050c1907702a1f380895930a8ad0dd9",
+ "README.md": "sha256:00281e7af8fc9c8f9c41a46a71a959faea4c6db1c08c6c4b5b3fe3a5808b271a",
+ "SCOPE.md": "sha256:c43d8c15cf0b85dd8558bc0031a0662d668de9c0394eb2045a7735d044d7ed0e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-07",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.issue-tracking",
+ "name": "Universal Issue Tracking Coordination",
+ "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "issue-core",
+ "path": "registry/capabilities/capability.infotech.issue-tracking.md",
+ "tags": [
+ "issue-tracking",
+ "coordination",
+ "multi-platform"
+ ],
+ "consumption_modes": [
+ "cli",
+ "library import"
+ ]
+ }
+ ]
+ }
+ },
+ "key-cape": {
+ "head": "1344fc80e56315c5c99f58993f9ee02ce79e8a76",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md",
+ " M src/internal/server/oidc/authorize.go",
+ " M workplans/KEY-WP-0039-openbao-negative-probe-tokens.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:b22cb440691bb399b064ee10ab1a03e1e07838da1051bf6235fbfe2cf820eb10",
+ "README.md": "sha256:953586cca96d01e9240448186b922c9b8ea03827a7f314731e9a9ead4f19d0d3",
+ "SCOPE.md": "sha256:20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.iam.key-cape",
+ "name": "KeyCape Lightweight IAM (NetKingdom Profile)",
+ "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "key-cape",
+ "path": "registry/capabilities/capability.iam.key-cape.md",
+ "tags": [
+ "iam",
+ "oidc",
+ "netkingdom",
+ "security"
+ ],
+ "consumption_modes": [
+ "service (self-hosted deployment)"
+ ]
+ }
+ ]
+ }
+ },
+ "kings-guard": {
+ "head": "af02e2547598d6ec0e83f482d9ea3ef943ea67b7",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:923fd2ce1a22c29d486f562071a0a251c16b64fbb5d73490cac4d373daa0c83d",
+ "README.md": "sha256:57983baf2275d9afbd5109782cfe1f3559145f4ee906ea97345c6d517a5e4fc7",
+ "SCOPE.md": "sha256:8e77e587c67aa419df35d4f642468bb57bc30df65e1ea6a922fdca282ea9ed63",
+ "docs/SecretUseSnapshotAdmission.md": "sha256:7fd32df4c8203d83aa14334ccaed0700682730679539a5c657d93f5efbf5d31c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "maturity-engine": {
+ "head": "2f1de542cc8f24a79452f906d99f95be39d8b6a9",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:d17b9169ad82b60450244988dafa3ab4a515790ee08903a7fcee9df5fd8eae0c",
+ "README.md": "sha256:66333483d63f45c2dd744661610d062440569955bb150927ebd9d21d72b85daa",
+ "SCOPE.md": "sha256:653f47b0d370dfdb45c723b361f6fee53be7e384732c201443d7238c04d155bc",
+ "docs/claim-contract.md": "sha256:082490f3651db8f771dfd72c42f5c5df4c3317361c9dec1ec0f0dc9814f80a2a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "net-kingdom": {
+ "head": "1a36e857cc5aae6fe738f794417126c46dd94627",
+ "branch": "main",
+ "dirty_paths": [
+ "M WORK-RECORDS.md",
+ "?? intakes/NET-IN-0005-single-use-setup-link-mail-handoff.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54",
+ "README.md": "sha256:25172bafe09fd3a26467d44a74ca90e8f123bc81bfa2784a483837c0e9efe9fe",
+ "SCOPE.md": "sha256:0f896db98d03aa7460d88999b738ea00be87dd34fe0b250f11bf0b6f170b0172",
+ "SECURITY-COMPANION.md": "sha256:06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643",
+ "canon/standards/security-case-types_v0.1.md": "sha256:a4fda906d5138d2594a1f8d047c7c28e1cdf96b1eae051f543b9a5e5852bcb5e",
+ "tools/custody-record/README.md": "sha256:ec653a17b4f35e56d37824c1db15f1ea6b1761c564863fca4ea168a3ed625000",
+ "tools/emission-cadence-profile/README.md": "sha256:a4adadb43b0d55f7d705d89166ef63ce01aceeff742b260039263dda92ce85b8",
+ "tools/posture-feedback/README.md": "sha256:83b8de1da01de77318e950c9266e5f2755091dbd0e5a318d75bc5cc8f556ef18",
+ "tools/posture-feedback/posture_feedback.py": "sha256:629779308e4965be3aabbb76f105fd9c8b532c64987915d2ccab5b543273bfe4",
+ "tools/security-bootstrap-console/README.md": "sha256:bc1af3598d667346370a476d0765bff1f0c3ebb57f751c4da6e61a4add29f30d",
+ "tools/security-case-types/README.md": "sha256:03e1c503bc60990214d5b1a7cec8878cf47fc892d82c82d682f3490e33dc71f5",
+ "tools/security-scenario-composer/README.md": "sha256:447554e04816c0bc815f57d9138430d354790c9f3813e48bbd38fee034f98015",
+ "tools/security-scenario-composer/security_scenario_composer.py": "sha256:9f0cc69930aa8ee2cc3fb92236e6a99728df17b8c0fe36e1250241c38fc01c4f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-08-23",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.security.iam-tooling-suite",
+ "name": "NetKingdom Security/IAM Tooling Suite",
+ "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "net-kingdom",
+ "path": "registry/capabilities/capability.security.iam-tooling-suite.md",
+ "tags": [
+ "security",
+ "iam",
+ "kubernetes",
+ "conformance"
+ ],
+ "consumption_modes": [
+ "cli",
+ "local web ui"
+ ]
+ }
+ ]
+ }
+ },
+ "ops-bridge": {
+ "head": "190ef1e188e12c606f1359325fd9fdd1dbef29e2",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:2134f693649803414d7ab2f9839416f1fe06169aa86732e64c9dd962c35f412b",
+ "SCOPE.md": "sha256:63cd52d1cdf38e72af0285c25aa2292f959080c6befe565a1d2690747a813975"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.ops.tunnel-bridge",
+ "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)",
+ "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "ops-bridge",
+ "path": "registry/capabilities/capability.ops.tunnel-bridge.md",
+ "tags": [
+ "ssh",
+ "tunnel",
+ "ops",
+ "connectivity"
+ ],
+ "consumption_modes": [
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "ops-mason": {
+ "head": "d86ad141befb6800468f5132d4c7c9ce2f852bb5",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:482269782f4fd337f83674b4e2c36a5cd9f8eb694918e55709e9a7e78a003c71",
+ "README.md": "sha256:9e0c9b5c76c3a2d4aeeaf032579e96d8da9056662ac4655b8885b16ed7f3bca5",
+ "SCOPE.md": "sha256:7da4c8c660b1c8d15675768a5f6040303fe3ca3b4f05b1bba4633be3cc6e0c77",
+ "docs/construction-plan-format.md": "sha256:468678089885193b8fefe3993cd6878bbdbeaaa64aa088b18b90047b696ce564"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "ops-warden": {
+ "head": "6d2f1be9691b19e826898a2166ae4451e4802ae2",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:3e9382fefa52ee0970dfac133cc799656e5034760b26dccc1bf9bab65fc538d9",
+ "README.md": "sha256:1f11071d7fd651806da180272cc4aa4e3ae19d7bad0e321aa97c7dcaea7f2857",
+ "SCOPE.md": "sha256:47b47468746617c84f8411ac671bb488ab740b4c3133401f5d7b55d3d024345f",
+ "wiki/CredentialRouting.md": "sha256:544530cc13052e33d2135fa3b0583e620010abb0af86079be6d8e09c36844646",
+ "workplans/WARDEN-WP-0044-security-case-follow-through.md": "sha256:c0029545bd2d8c015ae0cac87f6d53a2e5ee935b7bf5d5e1b81bf1ff5dbdc4f8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-17",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.security.ssh-certificate-issuance",
+ "name": "SSH Certificate Issuance",
+ "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.",
+ "vector": "D4 / A3 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "ops-warden",
+ "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md",
+ "tags": [
+ "ssh",
+ "certificate",
+ "ca",
+ "ops-warden",
+ "openbao",
+ "security"
+ ],
+ "consumption_modes": [
+ "CLI",
+ "cert_command subprocess"
+ ]
+ }
+ ]
+ }
+ },
+ "policy-nexus": {
+ "head": "f784f017b0822f34c785f0b34c7c55fcf39c9d99",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:58b95e4e158da6b978b9bd3a2ecbaf7f279553098906a8e8ed404afd3d582494",
+ "README.md": "sha256:cc3a825974a8cea0c737a16cc8b06d3fec56e10f593c6ed7169bc54786df5a81",
+ "docs/publication-contract.md": "sha256:65a9a233201ba966db0f2c5465ff3b0684147af3075f43180b8eefb3e059abb4"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rail-kubernetes": {
+ "head": "35159e49c1340b7a0e30c49188975c8839d346f6",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:72a64030f25f0474e4f3837860d3eba60e3d5a1c2b31e8f6d062e15da8f209c4",
+ "README.md": "sha256:89c6c0155f3d9829c7d0ff33f27883ed2fdd8f6d857eae013656136467296cd2",
+ "SCOPE.md": "sha256:00fce3ee7cb4bbbd7eff210adb2a03c533f2b43870f7327cfc35f28354bb549a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "railiance-apps": {
+ "head": "706461b845086ee2df8ce9acae3dae7feebfffda",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:31060dc1738aa4540f78735019359a276ece39dad8afbf1be740713bebbe65e5",
+ "SCOPE.md": "sha256:8243098d979d4258c9e7f9e39b5de24ce78b521cd82a7e199028df30bc130b14"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.workload-deployment-tooling",
+ "name": "Railiance Application Workload Deployment Tooling",
+ "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.",
+ "vector": "D3 / A2 / C1 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-apps",
+ "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "helm",
+ "deployment"
+ ],
+ "consumption_modes": [
+ "cli (shell scripts)",
+ "helm/kubernetes deployment"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-bootstrap": {
+ "head": "ae00b2652737aaf18358431e66f59eeb7c01e16b",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:c1840c7df1cb87d72a22a7b1bc95417687a0a9d9355b6ffb50392d8bf6ae241f",
+ "README.md": "sha256:3acd2adcf4bf3c3801be99c95d96da8ac7638f5a21c03d6f987505402a00afa6",
+ "SCOPE.md": "sha256:4efdd7f7817e39c01d6024e2f8bcbd70c2b10b90baf9f92855bb3967cd629831"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": []
+ }
+ },
+ "railiance-cluster": {
+ "head": "12d1e881ff2086566712fbc591db293b38ea2bcf",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:a00fe12563c77734e19b538ca8307d44fcfae9f040bec284c705146f99bb3490",
+ "README.md": "sha256:5c82b7c31adb126e1f95ccd5057156888fff73a05828abd5e8ab3e013c7fe59f",
+ "SCOPE.md": "sha256:e4f6a8dd3d72a1f04f0d94721d57ca2a4c7e98790a8373876a5005b87ec5d8a6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.cluster-bootstrap",
+ "name": "Railiance Cluster Runtime Bootstrap",
+ "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-cluster",
+ "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md",
+ "tags": [
+ "railiance",
+ "kubernetes",
+ "iac",
+ "bootstrap"
+ ],
+ "consumption_modes": [
+ "cli",
+ "ansible playbook"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-enablement": {
+ "head": "51a7c4cee68b48ed7a236e661b39c1d3cca92063",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:5a562d3f019156969948315e8072ce925c81e21d027a47096e21c8535473a588",
+ "SCOPE.md": "sha256:2a554aef6d6803f1a176ea3bdb3bcc0f077f03d131b0a897a5ec56bd6df85f88"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.ci-enablement",
+ "name": "Railiance Developer Enablement And CI/CD Templates",
+ "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.",
+ "vector": "D3 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-enablement",
+ "path": "registry/capabilities/capability.railiance.ci-enablement.md",
+ "tags": [
+ "railiance",
+ "ci-cd",
+ "developer-enablement",
+ "forgejo"
+ ],
+ "consumption_modes": [
+ "ci workflow template (copy/reference)",
+ "cli (promote-repo-to-forgejo.sh)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-fabric": {
+ "head": "96d19127125e85bdab7ff0ff79fc3ecf7d19045e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:1cdca96e57849709aef333c88ace903f9573eeb2894f52246e473928c7e3846c",
+ "README.md": "sha256:8705fec071bfe75d3bdfcc5677ac8801f5d66b5ee3a49043cc8d019443a1fb8c",
+ "SCOPE.md": "sha256:b80d4a8b39c2920818ba4069318f888e56736a0f0e8d40f3a72568b0472fb36d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.fabric-graph",
+ "name": "Railiance Fabric Ecosystem Graph",
+ "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-fabric",
+ "path": "registry/capabilities/capability.railiance.fabric-graph.md",
+ "tags": [
+ "railiance",
+ "graph",
+ "ownership",
+ "discovery"
+ ],
+ "consumption_modes": [
+ "library import",
+ "cli (validation)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-forge": {
+ "head": "a15fac8e938c11b041eb39386f05b63d46ae566a",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:310d6ad12a1f621c05396a3d6aab19ff8a6bacc4f67814e64d07f09da124ea54",
+ "README.md": "sha256:e10a07e1b8935a444699ee456f6d3f98e02109d7e453db41823a31261d181b2a",
+ "SCOPE.md": "sha256:dc4c179e33898e32fae7b2e8e30e88a66d9efc3ad2f488651ccedf600274c1b8",
+ "workplans/FORGE-WP-0006-independent-secret-detection.md": "sha256:fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.forge-infrastructure",
+ "name": "Railiance Forge And Artifact Infrastructure",
+ "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.",
+ "vector": "D3 / A1 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-forge",
+ "path": "registry/capabilities/capability.railiance.forge-infrastructure.md",
+ "tags": [
+ "railiance",
+ "forgejo",
+ "forge",
+ "ci-runner"
+ ],
+ "consumption_modes": [
+ "cli (operator tooling)",
+ "documentation/runbooks"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-infra": {
+ "head": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:00d05aeeedd6e11527fdacd35070a37c0b67ff16914ed6ce0f634baaded5f1ae",
+ "README.md": "sha256:dcea6117a34fa466e75c7943fb43dcfc42eb8f6f6c9c5207458eb7621e694ced",
+ "SCOPE.md": "sha256:18cdf933d658eeddcb68528bb9c222ceb0866d8c5f0ec4bb3ea955de762c3c33"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.infra-provisioning",
+ "name": "RailianceHosts Infrastructure Provisioning",
+ "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-infra",
+ "path": "registry/capabilities/capability.railiance.infra-provisioning.md",
+ "tags": [
+ "railiance",
+ "terraform",
+ "ansible",
+ "infrastructure"
+ ],
+ "consumption_modes": [
+ "cli (terraform/ansible)",
+ "gitops"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-master": {
+ "head": "865c3bed86b3992244b29d6f1d6b8ebbe8db78c7",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:dacbc59b7d42412e3e65d3d16ce058d0bde486e16435112c7abf83b696572eda",
+ "README.md": "sha256:4a706ec49c177ef13343ea3e56e61bf5a7bd6c601562b301a87189690ee800ff",
+ "SCOPE.md": "sha256:63ebaef0397795257650521e6f3be6b46cca1142f53b1865d9df9ed0c0530fc8",
+ "docs/netkingdom-security-consumption-contract.md": "sha256:be50d016b7cd14ac27127a2c641c4a9a0c8d1605495ba62ba5cf30ef0f65bab7"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "railiance-platform": {
+ "head": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:12c6540735af591f7a4a9fe85ff10d3cd00eec55b5b6b1ddf148abf2d3ac9a9c",
+ "SCOPE.md": "sha256:bb18dc91f3be50337d7ebc81d269f1234f65919f7014eef990b09c3df54a5347",
+ "docs/openbao.md": "sha256:9c92b0e30c81351b258da44df46720f4cdd2941488a7ca2f8687b8937da8099b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.railiance.platform-services",
+ "name": "Railiance Platform Services",
+ "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.",
+ "vector": "D3 / A2 / C1 / R0",
+ "domain": "financials",
+ "status": "draft",
+ "owner": "railiance-platform",
+ "path": "registry/capabilities/capability.railiance.platform-services.md",
+ "tags": [
+ "railiance",
+ "platform",
+ "secrets",
+ "postgres"
+ ],
+ "consumption_modes": [
+ "cli (shell/python scripts)"
+ ]
+ }
+ ]
+ }
+ },
+ "railiance-telemetry": {
+ "head": "81d905971c38de9aaf11088ba605e112152d8268",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:de793b403514f8c7984ba7c20608ecca9d1fea422d3fcc20ec186a0d7c2f2f47",
+ "README.md": "sha256:4fdb18006ab2e5a0c4d72127324a88c7abacb55a30b80de6a95e55ce46c56468",
+ "SCOPE.md": "sha256:206279dabc14fe1a44ba6df8ad2b664cc91d3460379b732951d3e29bb6a814da"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-openbao": {
+ "head": "13ab9144bbb1d88fe760362df91a83c8b34e4e66",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:28b74eec385f6cef4f8c846992f10b6067ce436cb9d52de19338dd57c111f90e",
+ "README.md": "sha256:9964de809b5b645c24871774621747f9d6ce2f069443d507b9ef9616ee255d85",
+ "SCOPE.md": "sha256:cdcf80122c8c55dfe697312d6cd67b76861f322cae9816b85123aefe2345c674",
+ "docs/retained-s3-handoff.md": "sha256:d1b2f27f740176ab16f6b4b589b0c25dab41c923d6f377d84059ec8369c0a3b6"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-playwright": {
+ "head": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:b719684974f35812708e562cd8c0b4573662ae22fd12f4252bd4abaca627882b",
+ "README.md": "sha256:e64daa81de97b3d2c6afe4028f9a2d4aca6e9892ac36a798316a8d8e8fa80ce8",
+ "SCOPE.md": "sha256:c1489a7b75a87a3a8b00edb9b9497d256b0e5ec72d5fe5236cc038745215dc91"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-policy-nexus": {
+ "head": "d3fee97d32ad47e3a7e3201a9c5b7209b4333fda",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:a3ae592c56822697ad24bd64851578b5b17f1a9bd8622a247e3e425a5de594c7",
+ "README.md": "sha256:41c1bfeaa90d11f4778d22a3e58a97cb9653d153712657ff2e3aecc45dda240f",
+ "SCOPE.md": "sha256:dfb85b48d6ff68a9945178a5fc1b85f1d342f765d046a58285e7edc52f517438"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-postgres": {
+ "head": "03744030c9258e920f6403a9ce184a26d7b75268",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:2a9ce4f5eb8fbbffbaeb8532a677c855b97973a6028536520018ccd1796a4735",
+ "README.md": "sha256:298079470d931ab78d79a0a44274f207606d6a877740d79a8925d9c37f8ff15a",
+ "SCOPE.md": "sha256:5919caed210fc8c6977845b3469ebe419b0216f6aafa69e01a40b9d12d6050bc"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-telemetry": {
+ "head": "17053dbc47f7c22efd67fd90d06d108d154835fa",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:fc3ac98e40f67384f3ff94ecf223d89f0713c031ba5ca6093320278b269e4276",
+ "README.md": "sha256:fd797950ffaa67123773da7cdfa6e45984f367f820caba7c10e0fd300f96d630",
+ "SCOPE.md": "sha256:3776b5924bd90f8114e77f7bbbcacc7f3713cd56ca26440a3e4bce792ce8b142"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-tenant-engine": {
+ "head": "c160be23577ab4d99ee2cd008deb455b07f0597d",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:5eb0a651c1fd20a7d60a3a30060431925d2fb3ed64cf6ae22293dcc5546c7251",
+ "README.md": "sha256:05596b39a47fa22cc4e966714c4c755220894ca54c7759cdd3088e78b31c00e6",
+ "SCOPE.md": "sha256:fc0c5a80f37c410c10eb29a7541ca37088668e5f76d64ece4e889c7f0145a13d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rapp-user-engine": {
+ "head": "15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:891150bf022c2456d62c234db10172a16cb2e1a9c9aa5284aafd5d89755a82fb",
+ "README.md": "sha256:f1d89f8f1c1cc67f2b79bd2bd3dd94b9a895fcaf308c44b5d8d23fc7b9f1bb7a",
+ "SCOPE.md": "sha256:732fd68b194d034e81faf170d5a69e1d61cfab5385457b93a5f5689a63a2f184"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "reef-railiance": {
+ "head": "ffb9e272ce1489cc37cc6388873558d8ba56c239",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:deb16216816dfcc1c42c2d826b6fcd496d9c0e6789169c0312e0bc9d0fa88781",
+ "README.md": "sha256:31480d89ba5a8f868c28c2b09f62a51d662aad6a0ec93a56340fed39a789c395",
+ "SCOPE.md": "sha256:a273078d5dc7ceb72bbdf5473b5146cd624411b08bdc6b1e7d78113c4e675cc8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rein-aharness": {
+ "head": "398949a3d34b6c9faae0fa1d0ff0aa039565aa42",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:f9a35aa6f9c4803a1d978aeb487ba475830505670871c564a5fecacb77b11ec4",
+ "README.md": "sha256:da0f62f0eda7bac0018151b73ffa2bcf9cab9dbd796adb285c738c435853afc3",
+ "SCOPE.md": "sha256:d9979b35ec0909f76e6c34a0f40de2e5cbc700d1bb5c7b5f73c6e2b20e3cbc48"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "rein-openweights": {
+ "head": "e1fccb39b738a5381a9de6e1d799f124797798ce",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:e1284da2b06a44d93e050638d34ab8abf15173bed77f82788ddcc32939359cd6",
+ "README.md": "sha256:0eb6e6225727770985c4b6442acdb17e8a0d5e707c25aaeb561e47b921f6aa74",
+ "SCOPE.md": "sha256:f7791a1f858cd7225e217b9b53213066e44ddd7ac4a1e748383a2c8756d3aa3c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "repo-manager": {
+ "head": "7677b00f69cd6362ac16a1021dc180ec6df4ebfa",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:62afa83ecb1fd733abce07489d48d0d7c7e14ccf9def9f561c118cf8ec5409b2",
+ "README.md": "sha256:9330836f65bde7466f7a1414f4a6df28682acde710aca0ea3e45be429622c75c",
+ "SCOPE.md": "sha256:bca5806e11f04e4550ce5c147d4d98e6c0014fed1f17fa3f134e5b193adec43c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "resource-control": {
+ "head": "3604d468f86ede7d320f4d22dd4aea775306b53f",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:f81326a4f18e284d8f7ca73f71dbe9502b7a75b1d567074e9bec48ebdd968309",
+ "SCOPE.md": "sha256:2daf0899d730bb6da30bd471f364061b86428cb5e38573df9d5551aff9dd5e29"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "reuse-surface": {
+ "head": "a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:511d1029a7aefc67b68a6363ed3ce8f803f2516c00062ff805263dffe26c771b",
+ "README.md": "sha256:6e4dc8d382612320cc2c8558ad583b0564ff594a7032b33137cb7a61887621cc",
+ "SCOPE.md": "sha256:2c30972ceb2a643147ce61c04c6919b16797b6754c2a407df998c81ce76c9c30",
+ "docs/RegistryFederation.md": "sha256:bfc80be5eac1250189ac2ba726a6188c03928ccf1e9992ec58cf59e58009f289",
+ "schemas/capability.schema.yaml": "sha256:3b0172baa4e6d54f400e911af6adb0d86b4576b86d7aea6d8f18c3fce3b8ae3f",
+ "specs/CapabilityMaturityStandard.md": "sha256:3eb3c7e1dd51b85e993c9936b2a176f6b3998e6198666695bdbb5b7ba7d8b17c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-10-13",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.infotech.headless-browser",
+ "name": "Headless Browser Automation",
+ "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.",
+ "vector": "D3 / A5 / C2 / R2",
+ "domain": "infotech",
+ "status": "reviewed",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.infotech.headless-browser.md",
+ "tags": [
+ "headless",
+ "browser",
+ "automation",
+ "playwright",
+ "chromium",
+ "testing",
+ "screenshots",
+ "extraction",
+ "firefox",
+ "webkit",
+ "selenium",
+ "puppeteer"
+ ],
+ "consumption_modes": [
+ "informational",
+ "source adaptation",
+ "JavaScript library",
+ "Python library",
+ "cli",
+ "service API",
+ "container"
+ ]
+ },
+ {
+ "id": "capability.registry.register",
+ "name": "Capability Registration",
+ "summary": "Register a new capability so it becomes visible for planning and implementation reuse.",
+ "vector": "D3 / A4 / C2 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.register.md",
+ "tags": [
+ "registry",
+ "governance",
+ "meta"
+ ],
+ "consumption_modes": [
+ "informational",
+ "markdown authoring",
+ "cli",
+ "service API"
+ ]
+ },
+ {
+ "id": "capability.registry.validate",
+ "name": "Registry Entry Validation",
+ "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.",
+ "vector": "D4 / A3 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "reuse-surface",
+ "path": "registry/capabilities/capability.registry.validate.md",
+ "tags": [
+ "registry",
+ "validation",
+ "cli"
+ ],
+ "consumption_modes": [
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "risk-nexus": {
+ "head": "b877231d66e1289dc32fda07ed2c61dcb3e970dc",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:38783193bce6e05a502463a0965341fe7940cc98d72c800c7d70a36e9defae83",
+ "README.md": "sha256:05dd751b2569801f5bc0971b3ebeeb263b3488a880cb334c3b4f076ed15d6ceb",
+ "SCOPE.md": "sha256:82e5f7476f5ebe327bc720691f858f3dbac3990da6860ac8114f83c3b287394c"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "role-engine": {
+ "head": "d231241dbfeeb541b34243f4022883aa6417a1eb",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:06678fc42521c91514ef9684674479c70ae47ee829e7a1e5e6c5d7ae54c0d7a2",
+ "README.md": "sha256:a98b021f59566bce52d02b7f7e2c9f2d3f637f9357037c54d752c69a13cb15bf"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "runbook-tutorials": {
+ "head": "df97fadf5decfcdb5c3c6ab90211226335ffdf8e",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:6a96bddd785357c6084d3137c66c188b9266f9e69cd1ad6e2c2562106a296b63",
+ "README.md": "sha256:747bd15db6182f5f473a4a774ade282d14341f63ee427c0cd862cbd3a6c0a6d0",
+ "SCOPE.md": "sha256:5da9ba54026809314e6c0d97894642ca705793cb752c8a9cb535551cef9aee5c",
+ "docs/pack-spec.md": "sha256:075a67476ba9226e79bc955caa039c9c1bad6ead96a7e61fb8e68b8ea56d2a0d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-09-29",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.infotech.runbook-tutorials",
+ "name": "Runbook-tutorial engine",
+ "summary": "Engine, local UI and CLI for guided, parameterized operator runbooks; packs live in the repos that own the procedure.",
+ "domain": "infotech",
+ "status": "active",
+ "owner": "runbook-tutorials",
+ "path": "registry/capabilities/capability.infotech.runbook-tutorials.md",
+ "tags": [
+ "runbook",
+ "tutorial",
+ "operator",
+ "guided"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "cli"
+ ]
+ }
+ ]
+ }
+ },
+ "sand-boxer": {
+ "head": "b06d94f02b037764ff41c73c8ab43f4c8f5d309d",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:a87d81568311ae5bee941183f10eb23fbe60541dc41d2c5a7fbfbac52a89dd37",
+ "README.md": "sha256:d5038e80f041429f8f8f8e2fc9b2b45a223a5478731ab7c75592378a174e0d2a",
+ "SCOPE.md": "sha256:68f4623825cc54ebbbe777b0abd78a358cb3232bf2f6577980c6fc945a80ed7a"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-22",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.execution.sandbox-provision",
+ "name": "Sandbox Provisioning",
+ "summary": "Isolated execution environments for agentic development, e2e testing, and bounded automations \u2014 profile-based provision, TTL teardown, and State Hub lifecycle registration.",
+ "vector": "D4 / A2 / C2 / R1",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "sand-boxer",
+ "path": "registry/capabilities/execution.sandbox-provision.md",
+ "tags": [
+ "sandbox",
+ "isolation",
+ "provision",
+ "e2e",
+ "agentic",
+ "execution",
+ "profile"
+ ],
+ "consumption_modes": [
+ "CLI",
+ "core library"
+ ]
+ }
+ ]
+ }
+ },
+ "sbom-nexus": {
+ "head": "07e998d9abfd4e4fcc74db9e292ed22c6f407522",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:0e3eed8bc510109f615d0739502cf15c2aa5a025e74db01a6cedfb316f2d9e58",
+ "README.md": "sha256:8cc888ebf6370cabb1cfe1539b11e372e3f432dda2aa303c8470a5fc32f70844",
+ "SCOPE.md": "sha256:32f6e853b366c5097b3ab1a3d05413a0091ec48585de4def7adcbacd57da02ba"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "schema": "reuse-surface.capability-index.v1",
+ "repo": "sbom-nexus",
+ "capabilities": [
+ {
+ "id": "capability.infotech.sbom-management",
+ "path": "registry/capabilities/capability.infotech.sbom-management.md",
+ "status": "emerging"
+ }
+ ]
+ }
+ },
+ "secrets-engine": {
+ "head": "d379a3dfba73c42cd97f4d9cba3a02d705155e4d",
+ "branch": "main",
+ "dirty_paths": [
+ "M .custodian-brief.md",
+ " M WORK-RECORDS.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:188dc6d99ca9a441e7389a3715ba48275ab6e8745deaff686bd27d2aac34d678",
+ "README.md": "sha256:6c85cc0e1f57fcc06ef00368d0b7ea1a02657a8a1358bebc38be446be20deeed",
+ "SCOPE.md": "sha256:d77af9b9bab0383928120b80ed4a70f471cf244e22718ee6feb6039a70aedf6f",
+ "src/secrets_engine/decision_check.py": "sha256:a8c9a45320b752871bf6b8238cc25074e8f08ed29fee131e99030606fc091e6e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-24",
+ "domain": "infotech",
+ "capabilities": [
+ {
+ "id": "capability.infotech.repo-template",
+ "name": "Coulomb Repository Template",
+ "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.",
+ "vector": "D3 / A3 / C2 / R2",
+ "domain": "infotech",
+ "status": "draft",
+ "owner": "repo-seed",
+ "path": "registry/capabilities/capability.infotech.repo-template.md",
+ "tags": [
+ "template",
+ "bootstrap",
+ "state-hub",
+ "onboarding"
+ ],
+ "consumption_modes": [
+ "git clone",
+ "informational"
+ ]
+ }
+ ]
+ }
+ },
+ "security-canon": {
+ "head": "1664a6def20be2759a1e575024563efd27c9f36f",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:d2e8ebdbc9500b613162c45145f50fd88471beeca3e96ebe6c2df5d85d07539c",
+ "README.md": "sha256:0ab66ab06438b14b86cc67ad0084ef88126618a283a37baed663176709ef1236",
+ "SCOPE.md": "sha256:74ebe3d738fa554be113866e82cd2b049c49b4c7a302c61f21ffadf31c297ce8",
+ "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md": "sha256:f79a6dfe1067028810677426cb7e8c5be16735074121437f3cc97849d08fb72b"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "state-hub": {
+ "head": "8ca9201f6a1445c66fe1d1b0ba0c8d044c131647",
+ "branch": "main",
+ "dirty_paths": [
+ "M api/main.py",
+ " M api/models/__init__.py",
+ " M api/models/agent_message.py",
+ " M api/routers/messages.py",
+ " M docs/inbox-change-feed-contract.md",
+ " M workplans/STATE-WP-0094-routed-gates-and-owner-returns.md",
+ "?? api/routers/message_feed.py",
+ "?? api/schemas/inbox_feed.py",
+ "?? docs/evidence/legacy-meter-weekly-review-20261014.json",
+ "?? migrations/versions/c4d5e6f7a8b9_inbox_feed_revision.py",
+ "?? tests/test_message_feed.py"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:4888ffa0a126a26bef3ba94658c76c3a23dbdc1399f4686c94e325b9d934e85f",
+ "README.md": "sha256:af3dde630cbc54664aab3681190e3095f04facd4e9b3fbc9cac7c279df05fc2d",
+ "SCOPE.md": "sha256:cfdd20b8718d92db1413c9bfcccdb1ae1e7fdee638aadcedf6508cee9f7c713f"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-06-16",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.statehub.progress-log",
+ "name": "Work Progress Logging",
+ "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.",
+ "vector": "D4 / A4 / C3 / R3",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.progress-log.md",
+ "tags": [
+ "state-hub",
+ "progress",
+ "coordination"
+ ],
+ "consumption_modes": [
+ "service API"
+ ]
+ },
+ {
+ "id": "capability.statehub.workstream-coordinate",
+ "name": "Workstream And Task Coordination",
+ "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.",
+ "vector": "D4 / A4 / C3 / R2",
+ "domain": "helix_forge",
+ "status": "draft",
+ "owner": "state-hub",
+ "path": "registry/capabilities/capability.statehub.workstream-coordinate.md",
+ "tags": [
+ "state-hub",
+ "coordination",
+ "workplans"
+ ],
+ "consumption_modes": [
+ "service API",
+ "HTTP REST"
+ ]
+ }
+ ]
+ }
+ },
+ "tenant-engine": {
+ "head": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:c2deaef01f7492ca1b39f52e36bf703f6a55b04158b2888b7befae73452ce285",
+ "README.md": "sha256:4beddb32ea5dae1f67e0b489b63f13f7ba9bbc4d3c7f27b80957a199bcf144e0",
+ "SCOPE.md": "sha256:63f86c1bc39110db862fe60e273703463415e6e0365e4c058ab6c65be399d62e"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-23",
+ "domain": "infotech",
+ "capabilities": []
+ }
+ },
+ "the-custodian": {
+ "head": "3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e",
+ "branch": "main",
+ "dirty_paths": [
+ "M WORK-RECORDS.md",
+ "?? docs/assessments/netkingdom-2026-10-14/",
+ "?? workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:6ccb4f1f2c8a87f27d59dcfcafaa654d68ff90ba09b94c863d5d444b2a35052c",
+ "README.md": "sha256:238b643e0c94446cf04bc8ac5d69e4c57d0f681825b5c45b9d444e6198f83f1a",
+ "SCOPE.md": "sha256:6d64208332890f24f04ae8d6f9067bcd8ed3b541e245fb2649ea3435f401b459",
+ "runtime/README.md": "sha256:c9bcfe727705b1503447d863f6fed4a84e97eb18a84b335c9073dac6dbb756e4"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.agents.custodian-runtime-tooling",
+ "name": "Custodian Runtime And Repo-Classification Tooling",
+ "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.",
+ "vector": "D2 / A1 / C1 / R0",
+ "domain": "custodian",
+ "status": "draft",
+ "owner": "the-custodian",
+ "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md",
+ "tags": [
+ "agents",
+ "runtime",
+ "classification"
+ ],
+ "consumption_modes": [
+ "library import (runtime/)",
+ "cli (tools/ scripts)"
+ ]
+ }
+ ]
+ }
+ },
+ "user-engine": {
+ "head": "85a419d6c5d0b4434d3ca7f33bde3092f5838f79",
+ "branch": "main",
+ "dirty_paths": [
+ "M workplans/USER-WP-0035-onboarding-handoff-findings.md",
+ "?? .claude/settings.local.json.",
+ "?? docs/evidence/2026-10-11-setup-link-owner-handoff/"
+ ],
+ "source_sha256": {
+ "INTENT.md": "sha256:8aa0f276e0879d3545338727188a1fd5af973c43acbfa986a135b20979ec7ba4",
+ "README.md": "sha256:74f788850117b3a1d6a1e06f68a26cbf699f8da9a27ed58d68d552a6e40dec3d",
+ "SCOPE.md": "sha256:0e863e1cc93e2aac373f566db4a4445348a930029a1c0968cf8e30c456b003e8"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {
+ "version": 1,
+ "updated": "2026-07-06",
+ "domain": "helix_forge",
+ "capabilities": [
+ {
+ "id": "capability.identity.user-engine",
+ "name": "Headless Multi-Tenant User Engine",
+ "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.",
+ "vector": "D4 / A1 / C2 / R0",
+ "domain": "communication",
+ "status": "draft",
+ "owner": "user-engine",
+ "path": "registry/capabilities/capability.identity.user-engine.md",
+ "tags": [
+ "identity",
+ "user-management",
+ "multi-tenant"
+ ],
+ "consumption_modes": [
+ "library import"
+ ]
+ }
+ ]
+ }
+ },
+ "whitehat-security": {
+ "head": "5587a8f6ac4b129527db819bc72832051c7fcc3b",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:acef2293815fb9bded28a60ee1bc47c196bb38541a28265d895d69ae773731ba",
+ "README.md": "sha256:3ddf3898b71ffaffec497e4e821f2a048d3cec1ae4269872b203db3422e14aca",
+ "SCOPE.md": "sha256:394dc1d432d4dd3eec735289ef83a8beedeb3afce667f5a8c3a052902a1e26ba"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ },
+ "zone-engine": {
+ "head": "b5a6f88a82b125ebc82c0484bec1ea541e4f95d0",
+ "branch": "main",
+ "dirty_paths": [],
+ "source_sha256": {
+ "INTENT.md": "sha256:7684ce5960c2623fe4a295e17f777326daad88d6d7c274002a71cf6046537c51",
+ "README.md": "sha256:194caa3a00b9ff041511a7e7a7c550f8e2b2906d1e71f2a9b05aef3220039806",
+ "SCOPE.md": "sha256:953dbf718481adae00fa53258ede0632df65bdc7f6a1cb3e1dd3344357dba80d"
+ },
+ "missing_review_artifacts": [],
+ "existing_index": {}
+ }
+ }
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml b/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml
new file mode 100644
index 00000000..520c63ab
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml
@@ -0,0 +1,2516 @@
+version: 1
+updated: '2026-10-14'
+domain: helix_forge
+collision_policy: warn
+sources:
+- repo: access-engine
+ count: 1
+ index: ../access-engine/registry/indexes/capabilities.yaml
+- repo: activity-core
+ count: 1
+ index: ../activity-core/registry/indexes/capabilities.yaml
+- repo: agentic-resources
+ count: 1
+ index: ../agentic-resources/registry/indexes/capabilities.yaml
+- repo: approval-engine
+ count: 1
+ index: ../approval-engine/registry/indexes/capabilities.yaml
+- repo: artifact-store
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml
+- repo: audit-core
+ count: 1
+ index: ../audit-core/registry/indexes/capabilities.yaml
+- repo: can-you-assist
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml
+- repo: citation-engine
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml
+- repo: citation-evidence
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml
+- repo: citation-work
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/citation-work.yaml
+- repo: commerce-canon
+ count: 2
+ url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml
+- repo: config-atlas
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml
+- repo: coordination-engine
+ count: 1
+ index: ../coordination-engine/registry/indexes/capabilities.yaml
+- repo: core-hub
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml
+- repo: domain-tree
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/domain-tree.yaml
+- repo: email-connect
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml
+- repo: emergent-security
+ count: 1
+ index: ../emergent-security/registry/indexes/capabilities.yaml
+- repo: evidence-anchor
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/evidence-anchor.yaml
+- repo: evidence-binder
+ count: 2
+ url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml
+- repo: evidence-source
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml
+- repo: feature-control
+ count: 3
+ url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml
+- repo: fin-hub
+ count: 1
+ index: ../fin-hub/registry/indexes/capabilities.yaml
+- repo: gate-house
+ count: 1
+ index: ../gate-house/registry/indexes/capabilities.yaml
+- repo: glas-harness
+ count: 1
+ index: ../glas-harness/registry/indexes/capabilities.yaml
+- repo: guide-board
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml
+- repo: helix-forge
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/helix-forge.yaml
+- repo: hub-core
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml
+- repo: human-resources
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml
+- repo: ihp-railiance-probe
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/ihp-railiance-probe.yaml
+- repo: info-tech-canon
+ count: 1
+ index: ../info-tech-canon/registry/indexes/capabilities.yaml
+- repo: informed-decision
+ count: 1
+ index: ../informed-decision/registry/indexes/capabilities.yaml
+- repo: infospace-bench
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml
+- repo: issue-core
+ count: 1
+ index: ../issue-core/registry/indexes/capabilities.yaml
+- repo: kaizen-agentic
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml
+- repo: key-cape
+ count: 1
+ index: ../key-cape/registry/indexes/capabilities.yaml
+- repo: kings-guard
+ count: 1
+ index: ../kings-guard/registry/indexes/capabilities.yaml
+- repo: kontextual-engine
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml
+- repo: llm-connect
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml
+- repo: markitect-filter
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml
+- repo: markitect-main
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml
+- repo: markitect-quarkdown
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml
+- repo: markitect-tool
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml
+- repo: maturity-engine
+ count: 1
+ index: ../maturity-engine/registry/indexes/capabilities.yaml
+- repo: net-kingdom
+ count: 6
+ index: ../net-kingdom/registry/indexes/capabilities.yaml
+- repo: open-cmis-tck
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml
+- repo: open-reuse
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml
+- repo: ops-bridge
+ count: 1
+ index: ../ops-bridge/registry/indexes/capabilities.yaml
+- repo: ops-hub
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml
+- repo: ops-mason
+ count: 1
+ index: ../ops-mason/registry/indexes/capabilities.yaml
+- repo: ops-warden
+ count: 3
+ index: ../ops-warden/registry/indexes/capabilities.yaml
+- repo: phase-memory
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml
+- repo: policy-nexus
+ count: 1
+ index: ../policy-nexus/registry/indexes/capabilities.yaml
+- repo: rail-knative
+ count: 1
+ index: ../rail-knative/registry/indexes/capabilities.yaml
+- repo: rail-kubernetes
+ count: 1
+ index: ../rail-kubernetes/registry/indexes/capabilities.yaml
+- repo: railiance-apps
+ count: 1
+ index: ../railiance-apps/registry/indexes/capabilities.yaml
+- repo: railiance-bootstrap
+ count: 1
+ index: ../railiance-bootstrap/registry/indexes/capabilities.yaml
+- repo: railiance-cluster
+ count: 1
+ index: ../railiance-cluster/registry/indexes/capabilities.yaml
+- repo: railiance-enablement
+ count: 1
+ index: ../railiance-enablement/registry/indexes/capabilities.yaml
+- repo: railiance-fabric
+ count: 1
+ index: ../railiance-fabric/registry/indexes/capabilities.yaml
+- repo: railiance-forge
+ count: 2
+ index: ../railiance-forge/registry/indexes/capabilities.yaml
+- repo: railiance-infra
+ count: 1
+ index: ../railiance-infra/registry/indexes/capabilities.yaml
+- repo: railiance-master
+ count: 1
+ index: ../railiance-master/registry/indexes/capabilities.yaml
+- repo: railiance-platform
+ count: 1
+ index: ../railiance-platform/registry/indexes/capabilities.yaml
+- repo: railiance-telemetry
+ count: 1
+ index: ../railiance-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-openbao
+ count: 1
+ index: ../rapp-openbao/registry/indexes/capabilities.yaml
+- repo: rapp-playwright
+ count: 1
+ index: ../rapp-playwright/registry/indexes/capabilities.yaml
+- repo: rapp-policy-nexus
+ count: 1
+ index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml
+- repo: rapp-postgres
+ count: 1
+ index: ../rapp-postgres/registry/indexes/capabilities.yaml
+- repo: rapp-sbom-nexus
+ count: 1
+ index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml
+- repo: rapp-telemetry
+ count: 1
+ index: ../rapp-telemetry/registry/indexes/capabilities.yaml
+- repo: rapp-tenant-engine
+ count: 1
+ index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml
+- repo: rapp-user-engine
+ count: 1
+ index: ../rapp-user-engine/registry/indexes/capabilities.yaml
+- repo: reef-railiance
+ count: 1
+ index: ../reef-railiance/registry/indexes/capabilities.yaml
+- repo: rein-aharness
+ count: 1
+ index: ../rein-aharness/registry/indexes/capabilities.yaml
+- repo: rein-openweights
+ count: 1
+ index: ../rein-openweights/registry/indexes/capabilities.yaml
+- repo: repo-manager
+ count: 1
+ index: ../repo-manager/registry/indexes/capabilities.yaml
+- repo: repo-scoping
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml
+- repo: repo-seed
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml
+- repo: resource-control
+ count: 1
+ index: ../resource-control/registry/indexes/capabilities.yaml
+- repo: reuse-surface
+ count: 3
+ index: ../reuse-surface/registry/indexes/capabilities.yaml
+- repo: risk-nexus
+ count: 1
+ index: ../risk-nexus/registry/indexes/capabilities.yaml
+- repo: role-engine
+ count: 1
+ index: ../role-engine/registry/indexes/capabilities.yaml
+- repo: runbook-tutorials
+ count: 1
+ index: ../runbook-tutorials/registry/indexes/capabilities.yaml
+- repo: sand-boxer
+ count: 1
+ index: ../sand-boxer/registry/indexes/capabilities.yaml
+- repo: sbom-nexus
+ count: 1
+ index: ../sbom-nexus/registry/indexes/capabilities.yaml
+- repo: secrets-engine
+ count: 1
+ index: ../secrets-engine/registry/indexes/capabilities.yaml
+- repo: security-canon
+ count: 1
+ index: ../security-canon/registry/indexes/capabilities.yaml
+- repo: shard-wiki
+ count: 8
+ url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- repo: state-hub
+ count: 2
+ index: ../state-hub/registry/indexes/capabilities.yaml
+- repo: tegwick-control
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/tegwick-control.yaml
+- repo: tenant-engine
+ count: 1
+ index: ../tenant-engine/registry/indexes/capabilities.yaml
+- repo: the-custodian
+ count: 1
+ index: ../the-custodian/registry/indexes/capabilities.yaml
+- repo: user-engine
+ count: 1
+ index: ../user-engine/registry/indexes/capabilities.yaml
+- repo: vantage-point
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml
+- repo: vergabe-teilnahme
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml
+- repo: whitehat-security
+ count: 1
+ index: ../whitehat-security/registry/indexes/capabilities.yaml
+- repo: whynot-control
+ count: 0
+ url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/whynot-control.yaml
+- repo: whynot-design
+ count: 1
+ url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml
+ cache: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml
+- repo: zone-engine
+ count: 1
+ index: ../zone-engine/registry/indexes/capabilities.yaml
+capabilities:
+- id: capability.activity.event-coordinate
+ name: Durable automation and bounded operations
+ summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime
+ sinks.
+ domain: helix_forge
+ status: draft
+ owner: activity-core
+ tags:
+ - activity
+ - coordination
+ - automation
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.activity.event-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: activity-core
+ source_index: ../activity-core/registry/indexes/capabilities.yaml
+- id: capability.agents.cli-assistant
+ name: Console-Native LLM Assistant (cya)
+ summary: Console-native, backend-agnostic assistant CLI that expresses user intent
+ in natural language and returns safe, explainable, context-aware help.
+ vector: D2 / A2 / C1 / R0
+ domain: agents
+ status: draft
+ owner: can-you-assist
+ path: registry/capabilities/capability.agents.cli-assistant.md
+ tags:
+ - cli
+ - assistant
+ - llm
+ - safety
+ consumption_modes:
+ - cli
+ source_repo: can-you-assist
+ source_url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml
+- id: capability.agents.custodian-runtime-tooling
+ name: Generic agent runtime and repository tooling
+ summary: Agent runtime modules and repository classification tooling.
+ domain: custodian
+ status: draft
+ owner: the-custodian
+ tags:
+ - agents
+ - runtime
+ - classification
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.custodian-runtime-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: the-custodian
+ source_index: ../the-custodian/registry/indexes/capabilities.yaml
+- id: capability.agents.kaizen-framework
+ name: Kaizen Agentic Framework
+ summary: AI agency framework providing 20 deployable agent instruction sets, project
+ memory, metrics, role and engagement contracts, and scheduled preparation for
+ governed execution.
+ vector: D3 / A2 / C1 / R0
+ domain: agents
+ status: draft
+ owner: kaizen-agentic
+ path: registry/capabilities/capability.agents.kaizen-framework.md
+ tags:
+ - agents
+ - memory
+ - coordination
+ - metrics
+ - scheduling
+ - engagements
+ consumption_modes:
+ - cli
+ - library import
+ - file contracts
+ source_repo: kaizen-agentic
+ source_url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml
+- id: capability.agents.llm-connector
+ name: Pluggable LLM Adapter Library (llm-connect)
+ summary: Provider-neutral Python/CLI LLM adapter library supporting OpenRouter,
+ Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract
+ interface for adding new providers.
+ vector: D3 / A2 / C2 / R1
+ domain: agents
+ status: draft
+ owner: llm-connect
+ path: registry/capabilities/capability.agents.llm-connector.md
+ tags:
+ - llm
+ - adapter
+ - provider-neutral
+ consumption_modes:
+ - library import
+ - cli
+ source_repo: llm-connect
+ source_url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml
+- id: capability.agents.performance-learning
+ name: Agent performance learning
+ summary: Capture sessions, curate patterns, distribute lessons and measure outcomes.
+ domain: infotech
+ status: draft
+ owner: agentic-resources
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.agents.performance-learning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: agentic-resources
+ source_index: ../agentic-resources/registry/indexes/capabilities.yaml
+- id: capability.agents.repo-scoping-service
+ name: Repository Scoping Service
+ summary: Maps repositories from usefulness to implementation (Ability -> Capability
+ -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP
+ API, and curator UI.
+ vector: D2 / A2 / C1 / R0
+ domain: agents
+ status: draft
+ owner: repo-scoping
+ path: registry/capabilities/capability.agents.repo-scoping-service.md
+ tags:
+ - classification
+ - scoping
+ - registry
+ consumption_modes:
+ - http api
+ - library import
+ - ui
+ source_repo: repo-scoping
+ source_url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml
+- id: capability.audit.event-retain
+ name: Independent audit custody
+ summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.
+ domain: infotech
+ status: draft
+ owner: audit-core
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C3 / R2
+ path: registry/capabilities/capability.audit.event-retain.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: audit-core
+ source_index: ../audit-core/registry/indexes/capabilities.yaml
+- id: capability.authorization.policy-evaluate
+ name: Policy evaluation and decision evidence
+ summary: Check, batch, list-allowed, explain, binding, lifetime and decision records.
+ domain: helix_forge
+ status: draft
+ owner: access-engine
+ tags:
+ - authorization
+ - policy
+ - flex-auth
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.authorization.policy-evaluate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: access-engine
+ source_index: ../access-engine/registry/indexes/capabilities.yaml
+- id: capability.cmis.tck
+ name: OpenCMIS Conformance-Preparation Extension
+ summary: CMIS conformance-preparation extension for guide-board, keeping CMIS-specific
+ runner code, profiles, capability mappings, and workplans outside the generic
+ compliance framework.
+ vector: D2 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: open-cmis-tck
+ path: registry/capabilities/capability.cmis.tck.md
+ tags:
+ - cmis
+ - compliance
+ - guide-board-extension
+ consumption_modes:
+ - library import (guide-board extension)
+ source_repo: open-cmis-tck
+ source_url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml
+- id: capability.communication.compliance-evidence-framework
+ name: Certification And Compliance Evidence Framework
+ summary: Framework that turns standards, conformance, regulatory, and repository-quality
+ claims into structured, reviewable, repeatable, comparable evidence via a pluggable
+ extension architecture.
+ vector: D2 / A2 / C1 / R0
+ domain: communication
+ status: draft
+ owner: guide-board
+ path: registry/capabilities/capability.communication.compliance-evidence-framework.md
+ tags:
+ - compliance
+ - certification
+ - evidence
+ - extensions
+ consumption_modes:
+ - cli
+ source_repo: guide-board
+ source_url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml
+- id: capability.communication.context-engine
+ name: Kontextual Engine (Knowledge Operations Runtime)
+ summary: Headless knowledge-operations engine turning heterogeneous information
+ assets into persistent, contextual, governed, retrievable, transformable, and
+ agent-operable knowledge.
+ vector: D4 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: kontextual-engine
+ path: registry/capabilities/capability.communication.context-engine.md
+ tags:
+ - knowledge
+ - context
+ - runtime
+ consumption_modes:
+ - library import
+ source_repo: kontextual-engine
+ source_url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml
+- id: capability.communication.infospace-workspace
+ name: Infospace Workspace And Evaluation Bench
+ summary: Workspace and service for creating, developing, evaluating, and inspecting
+ structured knowledge spaces (infospaces); application-layer successor to the infospace
+ work begun in markitect-main.
+ vector: D3 / A1 / C2 / R1
+ domain: communication
+ status: draft
+ owner: infospace-bench
+ path: registry/capabilities/capability.communication.infospace-workspace.md
+ tags:
+ - infospace
+ - knowledge
+ - evaluation
+ consumption_modes:
+ - cli
+ - library import (consumed by info-tech-canon)
+ source_repo: infospace-bench
+ source_url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml
+- id: capability.communication.markitect-legacy-platform
+ name: MarkiTect Legacy Platform
+ summary: Intelligent markdown engine and information-management platform treating
+ documents as structured, queryable information spaces with schema validation,
+ transclusion, and LLM-driven evaluation; the legacy umbrella now being split into
+ markitect-tool, infospace-bench, and kontextual-engine.
+ vector: D3 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: markitect-main
+ path: registry/capabilities/capability.communication.markitect-legacy-platform.md
+ tags:
+ - markitect
+ - markdown
+ - legacy
+ consumption_modes:
+ - application (legacy, not recommended for new integration)
+ source_repo: markitect-main
+ source_url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml
+- id: capability.communication.markitect-quarkdown-adapter
+ name: Markitect Quarkdown Render Adapter
+ summary: Concrete Quarkdown render/export adapter for Markitect, mapping Markitect
+ profiles to Quarkdown profiles and running controlled Quarkdown CLI execution
+ plans without forking or reimplementing Quarkdown.
+ vector: D3 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: markitect-quarkdown
+ path: registry/capabilities/capability.communication.markitect-quarkdown-adapter.md
+ tags:
+ - markitect
+ - quarkdown
+ - adapter
+ consumption_modes:
+ - library import (plugin/entry-point)
+ source_repo: markitect-quarkdown
+ source_url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml
+- id: capability.communication.markitect-source-adapters
+ name: Markitect Source-Format Adapters
+ summary: Concrete source-format adapters (EPUB3, PDF) converting external document
+ formats into canonical Markitect Markdown, implementing the markitect-tool source
+ adapter contract.
+ vector: D2 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: markitect-filter
+ path: registry/capabilities/capability.communication.markitect-source-adapters.md
+ tags:
+ - markitect
+ - adapter
+ - document-conversion
+ consumption_modes:
+ - library import (plugin/entry-point)
+ source_repo: markitect-filter
+ source_url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml
+- id: capability.communication.markitect-toolkit
+ name: Markitect Markdown Toolkit And CLI
+ summary: Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown
+ into structured, queryable, reusable knowledge artifacts; syntax-layer successor
+ to markitect-main.
+ vector: D4 / A2 / C2 / R1
+ domain: communication
+ status: draft
+ owner: markitect-tool
+ path: registry/capabilities/capability.communication.markitect-toolkit.md
+ tags:
+ - markitect
+ - markdown
+ - cli
+ - toolkit
+ consumption_modes:
+ - cli
+ - library import
+ source_repo: markitect-tool
+ source_url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml
+- id: capability.coordination.cross-owner-work
+ name: Cross-owner coordination lifecycle
+ summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime.
+ domain: infotech
+ status: draft
+ owner: coordination-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.coordination.cross-owner-work.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: coordination-engine
+ source_index: ../coordination-engine/registry/indexes/capabilities.yaml
+- id: capability.design.whynot-system
+ name: Whynot Design System
+ summary: 'Framework-agnostic visual language for whynot prototype/market-signal
+ artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain
+ HTML, and Django template adapters.'
+ vector: D3 / A2 / C2 / R1
+ domain: consumer
+ status: draft
+ owner: whynot-design
+ path: registry/capabilities/capability.design.whynot-system.md
+ tags:
+ - design-system
+ - web-components
+ - frontend
+ consumption_modes:
+ - library import (npm)
+ - cli
+ - django template adapter
+ source_repo: whynot-design
+ source_url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml
+- id: capability.evidence.binding
+ name: Evidence-to-Target Binding
+ summary: Links evidence items to structured targets with relation, status, and confidence
+ metadata, bidirectional queries, active-state coordination, and canonical engine
+ events.
+ vector: D3 / A2 / C3 / R3
+ domain: infotech
+ status: draft
+ owner: evidence-binder
+ path: registry/capabilities/capability.evidence.binding.md
+ tags:
+ - evidence
+ - binding
+ - evidence-link
+ - form-field
+ - citation-evidence
+ consumption_modes:
+ - source module
+ - React provider
+ source_repo: evidence-binder
+ source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml
+- id: capability.evidence.rect-registry
+ name: Visual-Guide Rect Registry
+ summary: Coordinates field, evidence-card, and highlight rectangles from independent
+ renderers so an SVG overlay can draw the active visual guide without polling.
+ vector: D3 / A2 / C3 / R3
+ domain: infotech
+ status: draft
+ owner: evidence-binder
+ path: registry/capabilities/capability.evidence.rect-registry.md
+ tags:
+ - rect-registry
+ - visual-guide
+ - overlay
+ - active-state
+ - citation-evidence
+ consumption_modes:
+ - source module
+ - React component
+ source_repo: evidence-binder
+ source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml
+- id: capability.execution.openweight-rein
+ name: Bounded open-weight agent execution
+ summary: Tool loop, path guards, turn/budget limits and verified-commit result.
+ domain: infotech
+ status: draft
+ owner: rein-openweights
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.openweight-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-openweights
+ source_index: ../rein-openweights/registry/indexes/capabilities.yaml
+- id: capability.execution.profile-harness
+ name: Profile-bound agent execution lifecycle
+ summary: Typed execution requests, profile/rein resolution, sandbox and cleanup
+ orchestration.
+ domain: infotech
+ status: draft
+ owner: glas-harness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.execution.profile-harness.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: glas-harness
+ source_index: ../glas-harness/registry/indexes/capabilities.yaml
+- id: capability.execution.sandbox-provision
+ name: Sandbox establishment and lifecycle
+ summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.
+ domain: infotech
+ status: draft
+ owner: sand-boxer
+ tags:
+ - sandbox
+ - isolation
+ - provision
+ - e2e
+ - agentic
+ - execution
+ - profile
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D5 / A5 / C5 / R0
+ path: registry/capabilities/execution.sandbox-provision.md
+ consumption_modes:
+ - containerized service
+ - CLI
+ source_repo: sand-boxer
+ source_index: ../sand-boxer/registry/indexes/capabilities.yaml
+- id: capability.execution.scheduled-agent-rein
+ name: Scheduled agent intake and harness routing
+ summary: Activity Core lease claim/heartbeat and Glas profile execution.
+ domain: infotech
+ status: draft
+ owner: rein-aharness
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.execution.scheduled-agent-rein.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rein-aharness
+ source_index: ../rein-aharness/registry/indexes/capabilities.yaml
+- id: capability.feature-control.evaluate
+ name: Feature Availability Evaluation
+ summary: Evaluate whether a feature is active, hidden, disabled, or unavailable
+ for a subject in context.
+ vector: D5 / A4 / C3 / R3
+ domain: helix_forge
+ status: draft
+ owner: feature-control
+ path: registry/capabilities/capability.feature-control.evaluate.md
+ tags:
+ - feature-control
+ - evaluation
+ - sdk
+ consumption_modes:
+ - SDK
+ - service API
+ source_repo: feature-control
+ source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml
+- id: capability.feature-control.rollout
+ name: Feature Rollout Control
+ summary: Gradually expose features to subjects across tenants, domains, groups,
+ or cohorts using rollout rules.
+ vector: D4 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: feature-control
+ path: registry/capabilities/capability.feature-control.rollout.md
+ tags:
+ - feature-control
+ - rollout
+ - planning
+ consumption_modes:
+ - source module
+ - SDK
+ source_repo: feature-control
+ source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml
+- id: capability.feature-control.visibility
+ name: Feature Visibility Control
+ summary: Control whether features are visible or hidden for subjects without changing
+ entitlement or authorization.
+ vector: D4 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: feature-control
+ path: registry/capabilities/capability.feature-control.visibility.md
+ tags:
+ - feature-control
+ - visibility
+ consumption_modes:
+ - source module
+ source_repo: feature-control
+ source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml
+- id: capability.finance.security-budget-evidence
+ name: Budget and cost evidence for security operations
+ summary: Budget, commitment, spend attribution and planning-evidence consumption.
+ domain: infotech
+ status: draft
+ owner: fin-hub
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.finance.security-budget-evidence.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: fin-hub
+ source_index: ../fin-hub/registry/indexes/capabilities.yaml
+- id: capability.graph.nbgm-spec
+ name: Network-Based Graph Model (NBGM) Specification
+ summary: Generic system and versioned protocol specification for exploring dependency
+ structures as network-based graph models (NBGM), unifying entity/relationship
+ inspection and reasoning across arbitrary domains.
+ vector: D2 / A0 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: vantage-point
+ path: registry/capabilities/capability.graph.nbgm-spec.md
+ tags:
+ - graph
+ - nbgm
+ - specification
+ consumption_modes:
+ - informational (specification only)
+ source_repo: vantage-point
+ source_url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml
+- id: capability.hr.workflow-catalog
+ name: HR Workflow Catalog
+ summary: Markdown-first registry of HR planning workflows with an iterative assessment
+ loop tied to INTENT phases.
+ vector: D3 / A1 / C1 / R0
+ domain: consumer
+ status: draft
+ owner: human-resources
+ path: registry/capabilities/capability.hr.workflow-catalog.md
+ tags:
+ - hr
+ - workflows
+ - assessment
+ - planning
+ consumption_modes:
+ - informational
+ source_repo: human-resources
+ source_url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml
+- id: capability.iam.key-cape
+ name: OIDC identity and assurance
+ summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.
+ domain: infotech
+ status: draft
+ owner: key-cape
+ tags:
+ - iam
+ - oidc
+ - netkingdom
+ - security
+ - framework-reuse
+ vector: D4 / A4 / C2 / R1
+ path: registry/capabilities/capability.iam.key-cape.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: key-cape
+ source_index: ../key-cape/registry/indexes/capabilities.yaml
+- id: capability.identity.subject-resolution
+ name: Identity Subject Resolution
+ summary: Resolve who or what is acting by mapping principals, accounts, actors,
+ and identifiers to a stable subject model.
+ vector: D3 / A0 / C1 / R0
+ domain: helix_forge
+ status: draft
+ owner: commerce-canon
+ path: registry/capabilities/capability.identity.subject-resolution.md
+ tags:
+ - identity
+ - subject
+ - architecture
+ consumption_modes:
+ - informational
+ source_repo: commerce-canon
+ source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml
+- id: capability.identity.tenant-facts
+ name: Tenant lifecycle and guardrail facts
+ summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store.
+ domain: infotech
+ status: draft
+ owner: tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.identity.tenant-facts.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: tenant-engine
+ source_index: ../tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.identity.user-engine
+ name: User lifecycle and account journeys
+ summary: Accounts, identity links, membership, MFA and recovery portal, advisory
+ catalog.
+ domain: communication
+ status: draft
+ owner: user-engine
+ tags:
+ - identity
+ - user-management
+ - multi-tenant
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C2 / R0
+ path: registry/capabilities/capability.identity.user-engine.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: user-engine
+ source_index: ../user-engine/registry/indexes/capabilities.yaml
+- id: capability.identity.vocabulary-canonicalize
+ name: Identity Vocabulary Canonicalization
+ summary: Define an implementation-neutral vocabulary for identity-related concepts
+ across overlapping domains.
+ vector: D4 / A0 / C2 / R0
+ domain: helix_forge
+ status: draft
+ owner: commerce-canon
+ path: registry/capabilities/capability.identity.vocabulary-canonicalize.md
+ tags:
+ - identity
+ - terminology
+ - research
+ consumption_modes:
+ - informational
+ source_repo: commerce-canon
+ source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml
+- id: capability.infotech.artifact-store
+ name: Artifact Registry And Storage Gateway
+ summary: Generic artifact registry and storage gateway for generated outputs, evidence
+ packages, reports, logs, snapshots, exports, and release artifacts.
+ vector: D3 / A1 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: artifact-store
+ path: registry/capabilities/capability.infotech.artifact-store.md
+ tags:
+ - artifact
+ - storage
+ - provenance
+ - registry
+ consumption_modes:
+ - library import
+ - cli
+ source_repo: artifact-store
+ source_url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml
+- id: capability.infotech.canon-service
+ name: Shared semantic contracts and validation
+ summary: Markdown canon with library, CLI and read-only API.
+ domain: infotech
+ status: draft
+ owner: info-tech-canon
+ tags:
+ - canon
+ - infospace
+ - service
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D2 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.canon-service.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: info-tech-canon
+ source_index: ../info-tech-canon/registry/indexes/capabilities.yaml
+- id: capability.infotech.citation-engine
+ name: Citation Evidence Domain Engine
+ summary: "Core domain model and engine services for the citation-evidence ecosystem\
+ \ \u2014 shared vocabulary, in-memory repositories, orchestration services, event\
+ \ bus, and citation card renderers."
+ vector: D3 / A1 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: citation-engine
+ path: registry/capabilities/capability.infotech.citation-engine.md
+ tags:
+ - citation
+ - evidence
+ - domain-model
+ consumption_modes:
+ - library import (workspace link)
+ source_repo: citation-engine
+ source_url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml
+- id: capability.infotech.citation-evidence-workspace
+ name: Citation Evidence Workspace
+ summary: "Document-centered evidence workspace for capturing, managing, presenting,\
+ \ and re-opening citations \u2014 the umbrella application over the citation-evidence\
+ \ six-package design."
+ vector: D4 / A1 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: citation-evidence
+ path: registry/capabilities/capability.infotech.citation-evidence-workspace.md
+ tags:
+ - citation
+ - evidence
+ - workspace
+ consumption_modes:
+ - application (local dev server)
+ source_repo: citation-evidence
+ source_url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml
+- id: capability.infotech.config-surface-atlas
+ name: Configuration Surface Atlas
+ summary: "Read-first, cross-kind map and evidence layer for configuration surfaces\
+ \ \u2014 what configures a system, who owns it, its scope, and where the source\
+ \ of truth lives."
+ vector: D5 / A0 / C2 / R2
+ domain: infotech
+ status: draft
+ owner: config-atlas
+ path: registry/capabilities/capability.infotech.config-surface-atlas.md
+ tags:
+ - configuration
+ - registry
+ - control-plane
+ - effective-config
+ - evidence
+ consumption_modes:
+ - informational
+ - source module
+ source_repo: config-atlas
+ source_url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml
+- id: capability.infotech.core-hub
+ name: Core Hub Production Interaction Framework
+ summary: Contract-first framework for cross-domain state, agent coordination, evidence,
+ registries, workplans, and operator interaction surfaces.
+ vector: D3 / A1 / C1 / R1
+ domain: infotech
+ status: draft
+ owner: core-hub
+ path: registry/capabilities/capability.infotech.core-hub.md
+ tags:
+ - interaction-framework
+ - state-hub
+ - inter-hub-successor
+ - agent-coordination
+ - registry
+ - api
+ consumption_modes:
+ - informational
+ - planning
+ - cli
+ source_repo: core-hub
+ source_url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml
+- id: capability.infotech.email-connector
+ name: Mailbox Evidence Scanner (email-connect)
+ summary: Headless, provider-neutral email communication and evidence service; first
+ slice scans a mailbox or fixture directory and produces timestamped CSV evidence
+ reports.
+ vector: D2 / A1 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: email-connect
+ path: registry/capabilities/capability.infotech.email-connector.md
+ tags:
+ - email
+ - evidence
+ - coordination
+ consumption_modes:
+ - cli
+ source_repo: email-connect
+ source_url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml
+- id: capability.infotech.headless-browser
+ name: Headless Browser Automation
+ summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright
+ 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container;
+ managed Railiance admission is pending. Download the Python 3.10+ standalone client
+ from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py
+ and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then
+ `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01`
+ with a fresh output directory. This endpoint was verified locally on 2026-10-13
+ and is ephemeral; it installs no browser for the caller. If unreachable, follow
+ the local container setup in the capability card or adapt its A2 source examples;
+ this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.'
+ vector: D3 / A5 / C2 / R2
+ domain: infotech
+ status: reviewed
+ owner: reuse-surface
+ path: registry/capabilities/capability.infotech.headless-browser.md
+ tags:
+ - headless
+ - browser
+ - automation
+ - playwright
+ - chromium
+ - testing
+ - screenshots
+ - extraction
+ - firefox
+ - webkit
+ - selenium
+ - puppeteer
+ consumption_modes:
+ - informational
+ - source adaptation
+ - JavaScript library
+ - Python library
+ - cli
+ - service API
+ - container
+ source_repo: reuse-surface
+ source_index: ../reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.infotech.hub-core-library
+ name: Reusable FOS Hub Core Primitives
+ summary: Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State
+ Hub for use by other FOS (Federation of Services) hubs.
+ vector: D2 / A1 / C1 / R1
+ domain: infotech
+ status: draft
+ owner: hub-core
+ path: registry/capabilities/capability.infotech.hub-core-library.md
+ tags:
+ - hub
+ - fastapi
+ - sqlalchemy
+ - mcp
+ consumption_modes:
+ - library import
+ source_repo: hub-core
+ source_url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml
+- id: capability.infotech.issue-tracking
+ name: External issue tracker connector
+ summary: CLI and Python adapters for external issue systems.
+ domain: infotech
+ status: draft
+ owner: issue-core
+ tags:
+ - issue-tracking
+ - connector
+ - work-record
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.infotech.issue-tracking.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: issue-core
+ source_index: ../issue-core/registry/indexes/capabilities.yaml
+- id: capability.infotech.oss-integration-continuity
+ name: Managed Continuity For OSS Integrations
+ summary: Turns proven open-source integrations into structured, maintainable, continuously
+ managed assets with clear boundaries and update loops, so they remain robust and
+ transparent as upstream evolves.
+ vector: D2 / A1 / C1 / R0
+ domain: infotech
+ status: draft
+ owner: open-reuse
+ path: registry/capabilities/capability.infotech.oss-integration-continuity.md
+ tags:
+ - oss
+ - integration
+ - maintenance
+ consumption_modes:
+ - library import
+ source_repo: open-reuse
+ source_url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml
+- id: capability.infotech.pdf-evidence-ingest
+ name: Headless PDF Evidence Ingest
+ summary: "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation\
+ \ \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map\
+ \ \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling."
+ vector: D2 / A1 / C1 / R1
+ domain: infotech
+ status: draft
+ owner: evidence-source
+ path: registry/capabilities/capability.infotech.pdf-evidence-ingest.md
+ tags:
+ - pdf
+ - ingest
+ - fingerprint
+ - canonical-text
+ - evidence
+ consumption_modes:
+ - library import
+ source_repo: evidence-source
+ source_url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml
+- id: capability.infotech.repo-template
+ name: Coulomb Repository Template
+ summary: Bootstrap new git repositories with agent instructions, registry scaffold,
+ and State Hub onboarding conventions.
+ vector: D3 / A3 / C2 / R2
+ domain: infotech
+ status: draft
+ owner: repo-seed
+ path: registry/capabilities/capability.infotech.repo-template.md
+ tags:
+ - template
+ - bootstrap
+ - state-hub
+ - onboarding
+ consumption_modes:
+ - git clone
+ - informational
+ source_repo: repo-seed
+ source_url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml
+- id: capability.infotech.runbook-tutorials
+ name: Guided administrative runbooks
+ summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence.
+ domain: infotech
+ status: draft
+ owner: runbook-tutorials
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.infotech.runbook-tutorials.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: runbook-tutorials
+ source_index: ../runbook-tutorials/registry/indexes/capabilities.yaml
+- id: capability.infotech.sbom-management
+ name: Dependency provenance and SBOM evidence
+ summary: Controlled archive ingest, immutable snapshots, freshness and license review.
+ domain: infotech
+ status: draft
+ owner: sbom-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.infotech.sbom-management.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: sbom-nexus
+ source_index: ../sbom-nexus/registry/indexes/capabilities.yaml
+- id: capability.memory.phase-planning
+ name: Profile-Driven Memory Phase Planning (phase-memory)
+ summary: Interprets Markitect memory profiles as runtime plans, modeling memory
+ phases and producing deterministic dry-run actions for retention, refresh, compaction,
+ stabilization, and activation.
+ vector: D3 / A1 / C1 / R0
+ domain: communication
+ status: draft
+ owner: phase-memory
+ path: registry/capabilities/capability.memory.phase-planning.md
+ tags:
+ - memory
+ - agentic
+ - planning
+ consumption_modes:
+ - library import
+ source_repo: phase-memory
+ source_url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml
+- id: capability.observability.security-signals
+ name: Security-relevant telemetry contracts and adapters
+ summary: Signal contract, platform adapters, report exporter and absence/alert rules.
+ domain: infotech
+ status: draft
+ owner: railiance-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.observability.security-signals.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-telemetry
+ source_index: ../railiance-telemetry/registry/indexes/capabilities.yaml
+- id: capability.operations.ops-hub
+ name: Operations Hub Extension Contract
+ summary: Versioned hub-extension package and bootstrap client for operational truth,
+ service-catalog records, readiness evidence, and migration gates.
+ vector: D3 / A1 / C1 / R1
+ domain: operations
+ status: reviewed
+ owner: ops-hub
+ path: registry/capabilities/capability.operations.ops-hub.md
+ tags:
+ - operations
+ - service-catalog
+ - readiness
+ - hub-extension
+ consumption_modes:
+ - contract package
+ - command-line bootstrap
+ source_repo: ops-hub
+ source_url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml
+- id: capability.ops.tunnel-bridge
+ name: SSH tunnel lifecycle
+ summary: Named tunnels, reconnect, health and TTL-aware cert_command.
+ domain: infotech
+ status: draft
+ owner: ops-bridge
+ tags:
+ - ssh
+ - tunnel
+ - ops
+ - connectivity
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.ops.tunnel-bridge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-bridge
+ source_index: ../ops-bridge/registry/indexes/capabilities.yaml
+- id: capability.organization.role-catalog
+ name: Organizational role definitions
+ summary: Versioned documentation catalog.
+ domain: infotech
+ status: draft
+ owner: role-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.organization.role-catalog.md
+ consumption_modes:
+ - informational
+ source_repo: role-engine
+ source_index: ../role-engine/registry/indexes/capabilities.yaml
+- id: capability.procurement.vergabe-teilnahme
+ name: Vergabe Teilnahme (Public Procurement Participation) Application
+ summary: "Django application (with a Vite/Tailwind frontend) for managing German\
+ \ public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und\
+ \ Teilnahme-Management-System."
+ vector: D3 / A1 / C1 / R1
+ domain: communication
+ status: draft
+ owner: vergabe-teilnahme
+ path: registry/capabilities/capability.procurement.vergabe-teilnahme.md
+ tags:
+ - procurement
+ - django
+ - vergabe
+ consumption_modes:
+ - application (Django + Vite, local dev via docker-compose)
+ source_repo: vergabe-teilnahme
+ source_url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml
+- id: capability.railiance.bootstrap-sequencing
+ name: Bootstrap sequencing contracts
+ summary: Bare-VM to estate sequence and handoff contract.
+ domain: infotech
+ status: draft
+ owner: railiance-bootstrap
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.bootstrap-sequencing.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-bootstrap
+ source_index: ../railiance-bootstrap/registry/indexes/capabilities.yaml
+- id: capability.railiance.browser-verification
+ name: Managed browser verification pilot
+ summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts.
+ domain: infotech
+ status: draft
+ owner: rapp-playwright
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.railiance.browser-verification.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: rapp-playwright
+ source_index: ../rapp-playwright/registry/indexes/capabilities.yaml
+- id: capability.railiance.ci-enablement
+ name: Developer delivery and CI templates
+ summary: Reusable CI workflows, build and deployment patterns.
+ domain: financials
+ status: draft
+ owner: railiance-enablement
+ tags:
+ - railiance
+ - ci-cd
+ - developer-enablement
+ - forgejo
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.ci-enablement.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-enablement
+ source_index: ../railiance-enablement/registry/indexes/capabilities.yaml
+- id: capability.railiance.cluster-bootstrap
+ name: Kubernetes runtime and cluster controls
+ summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks.
+ domain: financials
+ status: draft
+ owner: railiance-cluster
+ tags:
+ - railiance
+ - kubernetes
+ - iac
+ - bootstrap
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.cluster-bootstrap.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-cluster
+ source_index: ../railiance-cluster/registry/indexes/capabilities.yaml
+- id: capability.railiance.fabric-graph
+ name: Infrastructure ownership and dependency graph
+ summary: Schemas, validation, graph queries and State Hub exports.
+ domain: financials
+ status: draft
+ owner: railiance-fabric
+ tags:
+ - railiance
+ - graph
+ - ownership
+ - discovery
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.fabric-graph.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-fabric
+ source_index: ../railiance-fabric/registry/indexes/capabilities.yaml
+- id: capability.railiance.forge-infrastructure
+ name: Source forge, registries and runner substrate
+ summary: Forgejo operation, package registries and runner lifecycle.
+ domain: financials
+ status: draft
+ owner: railiance-forge
+ tags:
+ - railiance
+ - forgejo
+ - forge
+ - ci-runner
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.forge-infrastructure.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: ../railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.railiance.infra-provisioning
+ name: Host convergence and security baseline
+ summary: Ansible inventory, firewall, SSH bootstrap and baseline verification.
+ domain: financials
+ status: draft
+ owner: railiance-infra
+ tags:
+ - railiance
+ - terraform
+ - ansible
+ - infrastructure
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A2 / C2 / R1
+ path: registry/capabilities/capability.railiance.infra-provisioning.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-infra
+ source_index: ../railiance-infra/registry/indexes/capabilities.yaml
+- id: capability.railiance.knative-rail
+ name: Knative workload lifecycle
+ summary: Derived rail for activation, revisions, traffic, scaling and rollback.
+ domain: infotech
+ status: draft
+ owner: rail-knative
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.knative-rail.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rail-knative
+ source_index: ../rail-knative/registry/indexes/capabilities.yaml
+- id: capability.railiance.kubernetes-rail
+ name: Generic Kubernetes workload lifecycle
+ summary: Workload declaration, rollout, observe, promote and rollback surfaces.
+ domain: infotech
+ status: draft
+ owner: rail-kubernetes
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.kubernetes-rail.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rail-kubernetes
+ source_index: ../rail-kubernetes/registry/indexes/capabilities.yaml
+- id: capability.railiance.openbao-package
+ name: Managed OpenBao deployment package
+ summary: Helm values, package deploy/status/smoke/rollback and custody boundary.
+ domain: infotech
+ status: draft
+ owner: rapp-openbao
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.openbao-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-openbao
+ source_index: ../rapp-openbao/registry/indexes/capabilities.yaml
+- id: capability.railiance.platform-services
+ name: Secret custody and platform data services
+ summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup
+ contracts.
+ domain: financials
+ status: draft
+ owner: railiance-platform
+ tags:
+ - railiance
+ - platform
+ - secrets
+ - postgres
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.platform-services.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-platform
+ source_index: ../railiance-platform/registry/indexes/capabilities.yaml
+- id: capability.railiance.policy-publication-package
+ name: Policy publication runtime package
+ summary: Immutable image, non-root/read-only runtime and approved TLS exposure.
+ domain: infotech
+ status: draft
+ owner: rapp-policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.policy-publication-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-policy-nexus
+ source_index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.railiance.postgres-isolation-recovery
+ name: Database isolation and recovery package
+ summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore
+ procedures.
+ domain: infotech
+ status: draft
+ owner: rapp-postgres
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-postgres
+ source_index: ../rapp-postgres/registry/indexes/capabilities.yaml
+- id: capability.railiance.sbom-runtime-package
+ name: Private SBOM runtime and dynamic database delivery
+ summary: Immutable deployment, private network policy, dynamic database leases and
+ migration/rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-sbom-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.sbom-runtime-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-sbom-nexus
+ source_index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml
+- id: capability.railiance.security-consumption-contracts
+ name: Platform security consumption architecture
+ summary: Rail/rapp/reef boundaries, exposure and security consumption contracts.
+ domain: infotech
+ status: draft
+ owner: railiance-master
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.security-consumption-contracts.md
+ consumption_modes:
+ - informational
+ source_repo: railiance-master
+ source_index: ../railiance-master/registry/indexes/capabilities.yaml
+- id: capability.railiance.substrate-bindings
+ name: Substrate topology and bindings
+ summary: Grouped home-reef identity, topology and placement declarations.
+ domain: infotech
+ status: draft
+ owner: reef-railiance
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.railiance.substrate-bindings.md
+ consumption_modes:
+ - informational
+ source_repo: reef-railiance
+ source_index: ../reef-railiance/registry/indexes/capabilities.yaml
+- id: capability.railiance.telemetry-package
+ name: Private monitoring package
+ summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence.
+ domain: infotech
+ status: draft
+ owner: rapp-telemetry
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.telemetry-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-telemetry
+ source_index: ../rapp-telemetry/registry/indexes/capabilities.yaml
+- id: capability.railiance.tenant-engine-package
+ name: Tenant Engine runtime package
+ summary: Package declaration, smoke and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-tenant-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.tenant-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-tenant-engine
+ source_index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.user-engine-package
+ name: User Engine runtime package
+ summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback.
+ domain: infotech
+ status: draft
+ owner: rapp-user-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.railiance.user-engine-package.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: rapp-user-engine
+ source_index: ../rapp-user-engine/registry/indexes/capabilities.yaml
+- id: capability.railiance.workload-deployment-tooling
+ name: Workload release configuration and guards
+ summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback.
+ domain: financials
+ status: draft
+ owner: railiance-apps
+ tags:
+ - railiance
+ - kubernetes
+ - helm
+ - deployment
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.railiance.workload-deployment-tooling.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-apps
+ source_index: ../railiance-apps/registry/indexes/capabilities.yaml
+- id: capability.registry.register
+ name: Capability registry and federation
+ summary: Owner Markdown entries, indexes, federation hub and planning queries.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - governance
+ - meta
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C2 / R3
+ path: registry/capabilities/capability.registry.register.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: ../reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.registry.validate
+ name: Capability registry validation
+ summary: Schema, index consistency and relation checks.
+ domain: helix_forge
+ status: draft
+ owner: reuse-surface
+ tags:
+ - registry
+ - validation
+ - cli
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R3
+ path: registry/capabilities/capability.registry.validate.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: reuse-surface
+ source_index: ../reuse-surface/registry/indexes/capabilities.yaml
+- id: capability.resources.security-capacity
+ name: Capacity and recovery resource planning
+ summary: Provider-neutral inventory, procurement evidence and optimization reports.
+ domain: infotech
+ status: draft
+ owner: resource-control
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.resources.security-capacity.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: resource-control
+ source_index: ../resource-control/registry/indexes/capabilities.yaml
+- id: capability.security.access-routing
+ name: Credential routing and contained access
+ summary: warden route and access catalog; exact lane conduit and secret-exec routing.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A3 / C1 / R0
+ path: registry/capabilities/capability.security.access-routing.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: ../ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.adversarial-evidence
+ name: Authorized adversarial evidence harness
+ summary: Offline ASM and tenancy calibrations and engagement admission.
+ domain: infotech
+ status: draft
+ owner: whitehat-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.adversarial-evidence.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: whitehat-security
+ source_index: ../whitehat-security/registry/indexes/capabilities.yaml
+- id: capability.security.agent-knowledge
+ name: Verified security orientation for agents
+ summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed
+ exports.
+ domain: infotech
+ status: draft
+ owner: emergent-security
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.agent-knowledge.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: emergent-security
+ source_index: ../emergent-security/registry/indexes/capabilities.yaml
+- id: capability.security.approval-lifecycle
+ name: Bound approval lifecycle
+ summary: Authenticated issue, claim, revoke, supersede and atomic consume API with
+ outbox.
+ domain: infotech
+ status: draft
+ owner: approval-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.approval-lifecycle.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: approval-engine
+ source_index: ../approval-engine/registry/indexes/capabilities.yaml
+- id: capability.security.bootstrap-recovery
+ name: Guarded bootstrap and recovery preparation
+ summary: Local identity, bootstrap console, encrypted custody handoff and caller
+ tools.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.bootstrap-recovery.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-contracts
+ name: Security case types and instance validation
+ summary: Versioned types, cases and schema validation.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-contracts.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.case-follow-through
+ name: Security case operational follow-through
+ summary: KnownSecurityCase route, plan and operational receipts.
+ domain: infotech
+ status: draft
+ owner: ops-warden
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.case-follow-through.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-warden
+ source_index: ../ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.credential-lifecycle
+ name: Cataloged credential lifecycle
+ summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification,
+ delivery and revoke.
+ domain: infotech
+ status: draft
+ owner: secrets-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.credential-lifecycle.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: secrets-engine
+ source_index: ../secrets-engine/registry/indexes/capabilities.yaml
+- id: capability.security.doctrine-review
+ name: Security doctrine and architecture review
+ summary: Layer rules, authority context, ASM criteria and interpretations.
+ domain: infotech
+ status: draft
+ owner: gate-house
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.doctrine-review.md
+ consumption_modes:
+ - informational
+ source_repo: gate-house
+ source_index: ../gate-house/registry/indexes/capabilities.yaml
+- id: capability.security.emission-profile
+ name: Security emission cadence validation
+ summary: Security profile over generic emission contracts and validator.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.emission-profile.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.forge-secret-prevention
+ name: Independent introduced-history secret prevention
+ summary: Pinned receive adapter, lifecycle template and fail-closed scan.
+ domain: infotech
+ status: draft
+ owner: railiance-forge
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.forge-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: railiance-forge
+ source_index: ../railiance-forge/registry/indexes/capabilities.yaml
+- id: capability.security.human-decision-workspace
+ name: Human security decision presentation and disposition
+ summary: Headless lifecycle and browser workspace with exact native approval references.
+ domain: infotech
+ status: draft
+ owner: informed-decision
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A4 / C1 / R0
+ path: registry/capabilities/capability.security.human-decision-workspace.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: informed-decision
+ source_index: ../informed-decision/registry/indexes/capabilities.yaml
+- id: capability.security.iam-tooling-suite
+ name: NetKingdom security architecture and conformance tooling
+ summary: Versioned IAM, layer, tenancy and credential contracts plus validators.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - iam
+ - kubernetes
+ - conformance
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R1
+ path: registry/capabilities/capability.security.iam-tooling-suite.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.maturity-claims
+ name: Evidence-based maturity claims and gap register
+ summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and
+ stance inventory.
+ domain: infotech
+ status: draft
+ owner: maturity-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.maturity-claims.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: maturity-engine
+ source_index: ../maturity-engine/registry/indexes/capabilities.yaml
+- id: capability.security.policy-publication
+ name: Policy publication with source provenance
+ summary: Generated immutable publication, source currency and stable policy URLs.
+ domain: infotech
+ status: draft
+ owner: policy-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.policy-publication.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: policy-nexus
+ source_index: ../policy-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.posture-assessment
+ name: Security posture assessment and response proposals
+ summary: Normalized observation evaluator, cadence checks and secret-use snapshot
+ adapter.
+ domain: infotech
+ status: draft
+ owner: kings-guard
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-assessment.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: kings-guard
+ source_index: ../kings-guard/registry/indexes/capabilities.yaml
+- id: capability.security.posture-feedback
+ name: Deterministic posture feedback
+ summary: CLI evaluates evidence age and posture into owner-routed findings.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.posture-feedback.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.practice-canon
+ name: Security practice and authority vocabulary
+ summary: Versioned SEC-DSM and Mode of Authority documents.
+ domain: infotech
+ status: draft
+ owner: security-canon
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A0 / C1 / R0
+ path: registry/capabilities/capability.security.practice-canon.md
+ consumption_modes:
+ - informational
+ source_repo: security-canon
+ source_index: ../security-canon/registry/indexes/capabilities.yaml
+- id: capability.security.repository-secret-prevention
+ name: Repository metadata and staged-secret prevention
+ summary: Repository observation plus pinned staged-blob scanner and hook integration.
+ domain: infotech
+ status: draft
+ owner: repo-manager
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.repository-secret-prevention.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: repo-manager
+ source_index: ../repo-manager/registry/indexes/capabilities.yaml
+- id: capability.security.risk-register
+ name: Security risk and exception review register
+ summary: Markdown findings and Python review, verification and due-work reports.
+ domain: infotech
+ status: draft
+ owner: risk-nexus
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.risk-register.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: risk-nexus
+ source_index: ../risk-nexus/registry/indexes/capabilities.yaml
+- id: capability.security.scenario-compose
+ name: Deterministic security scenario composition
+ summary: CLI selects pinned providers and orders trust transitions.
+ domain: infotech
+ status: draft
+ owner: net-kingdom
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.scenario-compose.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: net-kingdom
+ source_index: ../net-kingdom/registry/indexes/capabilities.yaml
+- id: capability.security.ssh-certificate-issuance
+ name: Decision-bound SSH certificates
+ summary: warden sign with local and OpenBao backends and adm/agt/atm actors.
+ domain: helix_forge
+ status: draft
+ owner: ops-warden
+ tags:
+ - ssh
+ - certificate
+ - ca
+ - ops-warden
+ - openbao
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A3 / C3 / R2
+ path: registry/capabilities/capability.security.ssh-certificate-issuance.md
+ consumption_modes:
+ - library
+ - CLI
+ source_repo: ops-warden
+ source_index: ../ops-warden/registry/indexes/capabilities.yaml
+- id: capability.security.structure-construction
+ name: Reviewed security structure construction
+ summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply.
+ domain: infotech
+ status: draft
+ owner: ops-mason
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.structure-construction.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: ops-mason
+ source_index: ../ops-mason/registry/indexes/capabilities.yaml
+- id: capability.security.zone-reference
+ name: Zone membership reference conformance
+ summary: Offline resolution, exception and lineage checks.
+ domain: infotech
+ status: draft
+ owner: zone-engine
+ tags:
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D3 / A2 / C1 / R0
+ path: registry/capabilities/capability.security.zone-reference.md
+ consumption_modes:
+ - CLI
+ - source
+ source_repo: zone-engine
+ source_index: ../zone-engine/registry/indexes/capabilities.yaml
+- id: capability.statehub.progress-log
+ name: Progress and work evidence indexing
+ summary: REST progress and task evidence references.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - progress
+ - coordination
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R3
+ path: registry/capabilities/capability.statehub.progress-log.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: ../state-hub/registry/indexes/capabilities.yaml
+- id: capability.statehub.workstream-coordinate
+ name: Cross-repository work tracking
+ summary: File-derived workplans, tasks, dependencies, decisions and coordination
+ views.
+ domain: helix_forge
+ status: draft
+ owner: state-hub
+ tags:
+ - state-hub
+ - coordination
+ - workplans
+ - security
+ - netkingdom
+ - framework-reuse
+ vector: D4 / A4 / C3 / R2
+ path: registry/capabilities/capability.statehub.workstream-coordinate.md
+ consumption_modes:
+ - HTTP API
+ - source
+ source_repo: state-hub
+ source_index: ../state-hub/registry/indexes/capabilities.yaml
+- id: capability.wiki.adapter-contract
+ name: Capability-Aware Shard Adapter Contract
+ summary: A versioned backend interface where each binding declares a verified capability
+ profile, so federation ops degrade by capability.
+ vector: D5 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.adapter-contract.md
+ tags:
+ - wiki
+ - adapter
+ - capability
+ - contract
+ - conformance
+ - shard-wiki
+ consumption_modes:
+ - source module
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.coordination-journal
+ name: Event-Sourced Coordination Journal
+ summary: An append-only, totally-ordered-per-space decision log whose current state
+ is a derived fold; git-addressable history.
+ vector: D5 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.coordination-journal.md
+ tags:
+ - wiki
+ - event-sourcing
+ - coordination
+ - git
+ - journal
+ - shard-wiki
+ consumption_modes:
+ - source module
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.derived-views
+ name: Wiki Derived Views
+ summary: "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges,\
+ \ AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance."
+ vector: D3 / A0 / C0 / R0
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.derived-views.md
+ tags:
+ - wiki
+ - derived-views
+ - backlinks
+ - recentchanges
+ - search
+ - shard-wiki
+ consumption_modes:
+ - informational
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.engine-typed-extensions
+ name: Wiki Engine with Typed Extensions
+ summary: A small-core wiki engine realizing a typed-extension framework that addresses
+ all wiki use cases and lets each shard activate only the features it needs.
+ vector: D3 / A0 / C0 / R0
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.engine-typed-extensions.md
+ tags:
+ - wiki
+ - engine
+ - typed-extensions
+ - feature-activation
+ - shard-wiki
+ consumption_modes:
+ - informational
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.federation-models
+ name: Selectable Federation-Model Taxonomy
+ summary: Federation as a plural, composable coordination axis (fork+journal, VCS-replication,
+ query-join, feed, activity-streams, engine-mirror) selected per space.
+ vector: D4 / A0 / C1 / R0
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.federation-models.md
+ tags:
+ - wiki
+ - federation
+ - taxonomy
+ - composable
+ - shard-wiki
+ consumption_modes:
+ - informational
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.overlay
+ name: Overlay-Before-Mutation Write Path
+ summary: Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only
+ or limited backends be edited safely without silent remote mutation.
+ vector: D5 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.overlay.md
+ tags:
+ - wiki
+ - overlay
+ - patch
+ - write-path
+ - conflict
+ - shard-wiki
+ consumption_modes:
+ - source module
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.page-model
+ name: Backend-Neutral Wiki Page Model
+ summary: A Markdown-first but stretchable page model with stable identity separate
+ from placement and layered provenance.
+ vector: D5 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.page-model.md
+ tags:
+ - wiki
+ - page-model
+ - identity
+ - provenance
+ - markdown
+ - shard-wiki
+ consumption_modes:
+ - source module
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
+- id: capability.wiki.shard-orchestration
+ name: Wiki Shard Orchestration
+ summary: Present a union of pages across heterogeneous wiki-shaped shards while
+ preserving each shard's provenance, capabilities, and history.
+ vector: D5 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: shard-wiki
+ path: registry/capabilities/capability.wiki.shard-orchestration.md
+ tags:
+ - wiki
+ - federation
+ - orchestration
+ - union
+ - shard-wiki
+ consumption_modes:
+ - source module
+ source_repo: shard-wiki
+ source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml
diff --git a/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json b/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json
new file mode 100644
index 00000000..ac92baa9
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json
@@ -0,0 +1,8 @@
+{
+ "source_count": 99,
+ "reviewed_count": 70,
+ "all_exactly_once": true,
+ "warnings": [],
+ "previous_sources_sha256": "29a877f165b8d474ceb032f199efa87349a4c4f90c3599fab0cb244110113d10",
+ "scope": "Workstation local federation. Existing unrelated sources preserved; hosted registration is separate."
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json b/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json
new file mode 100644
index 00000000..b38a32d4
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json
@@ -0,0 +1,21 @@
+{
+ "default_federated_index": "/home/worsch/reuse-surface/registry/indexes/federated.yaml",
+ "total_capabilities_including_unrelated_sources": 114,
+ "reviewed_exactly_once": 70,
+ "composition_warnings": [],
+ "plan_check_trials": [
+ {
+ "intent": "bound approval consumption before credential delivery",
+ "top_id": "capability.security.approval-lifecycle",
+ "verdict": "extend",
+ "score": 0.2857
+ },
+ {
+ "intent": "deterministic posture feedback evidence expiry",
+ "top_id": "capability.security.posture-feedback",
+ "verdict": "reuse",
+ "score": 0.6
+ }
+ ],
+ "meaning": "Discovery works through the normal CLI. Ranking verdicts are lexical planning recommendations, not permission or runtime readiness."
+}
diff --git a/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md b/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md
new file mode 100644
index 00000000..5fe1446f
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md
@@ -0,0 +1,27 @@
+# NetKingdom security capability discovery
+
+The workstation federation includes 70 reviewed security and supporting capabilities from 60 sibling repositories. Two additional inspected repositories are nonproviders: rapp-secrets-engine is retired and rapp-forgejo is a placeholder without a package declaration. The owner capability entries are the reusable source; the architecture assessment is in the-custodian CUST-WP-0081.
+
+## Local discovery
+
+From a reuse-surface checkout beside those repositories:
+
+```sh
+reuse-surface federation compose
+reuse-surface plan-check --intent "bound approval consumption before credential delivery" --no-llm
+reuse-surface plan-check --intent "deterministic posture feedback evidence expiry" --no-llm
+```
+
+The source manifest uses relative sibling paths for the reviewed cohort and requires their indexes to exist. Other federation sources are preserved. A missing sibling is a composition error rather than silent loss of a reviewed capability. The composed local index supports planning; it is not a runtime readiness or authorization grant. `reuse-surface query` searches this repository's own index, while `plan-check` uses the composed federation.
+
+## Hosted discovery
+
+```sh
+reuse-surface plan-check --hub-url https://reuse.coulomb.social --intent "bound approval consumption" --no-llm
+```
+
+As checked on 2026-10-14, all 60 source registry commits are published, while the hosted hub contains 32 of the 70 reviewed capabilities. Thirty-eight new owner registrations remain pending scoped write access: the normal Warden lane was allowed by the PDP but OpenBao refused the current caller with HTTP 403. Seven of those indexes also require admitted private-source read access; anonymous retrieval returns 404. Do not change repository visibility or reuse another workload's credential to make discovery pass.
+
+The seven private sources are rapp-openbao, rapp-policy-nexus, rapp-postgres, rapp-telemetry, rapp-tenant-engine, rapp-user-engine and rapp-sbom-nexus. Hosted registration supports an `auth_env` reference to a credential already configured at the hub. Source-owner approval, scoped read provisioning and a successful native fetch must precede their registration. Thirty-one public-source registrations are otherwise ready.
+
+The exact registration plan, source commits, raw retrieval results and local/hosted verification receipts are retained in the-custodian at `docs/assessments/netkingdom-2026-10-14/`. Existing IDs were preserved where valid; the copied Secrets Engine repository-template entry was removed. Registry C/R values retained from older entries remain owner assessments, not renewed evidence.
diff --git a/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml b/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml
new file mode 100644
index 00000000..457f4e6c
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml
@@ -0,0 +1,431 @@
+version: 1
+domain: helix_forge
+collision_policy: warn
+sources:
+- repo: activity-core
+ url: https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: agentic-resources
+ url: https://forgejo.coulomb.social/coulomb/agentic-resources/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: artifact-store
+ url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: audit-core
+ url: https://forgejo.coulomb.social/coulomb/audit-core/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: can-you-assist
+ url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-engine
+ url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-evidence
+ url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-work
+ url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: config-atlas
+ url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: infotech
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: coordination-engine
+ url: https://forgejo.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: core-hub
+ url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: domain-tree
+ url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: email-connect
+ url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: evidence-anchor
+ url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: evidence-binder
+ url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: evidence-source
+ url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: feature-control
+ url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: access-engine
+ url: https://forgejo.coulomb.social/coulomb/access-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: guide-board
+ url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: helix-forge
+ url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: hub-core
+ url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: human-resources
+ url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: commerce-canon
+ url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ihp-railiance-probe
+ url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: info-tech-canon
+ url: https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: infospace-bench
+ url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: issue-core
+ url: https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: kaizen-agentic
+ url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: key-cape
+ url: https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: kontextual-engine
+ url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: llm-connect
+ url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-filter
+ url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-main
+ url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-quarkdown
+ url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-tool
+ url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: net-kingdom
+ url: https://forgejo.coulomb.social/coulomb/net-kingdom/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: open-cmis-tck
+ url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: open-reuse
+ url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ops-bridge
+ url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ops-hub
+ url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ops-warden
+ url: https://forgejo.coulomb.social/coulomb/ops-warden/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: phase-memory
+ url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-apps
+ url: https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-cluster
+ url: https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-enablement
+ url: https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-fabric
+ url: https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-forge
+ url: https://forgejo.coulomb.social/coulomb/railiance-forge/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-infra
+ url: https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: railiance-platform
+ url: https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: repo-scoping
+ url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: repo-seed
+ url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: reuse-surface
+ # Include this checkout's entries in local plan-check before publication.
+ index: registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: helix_forge
+ description: Capability registry for helix_forge
+- repo: shard-wiki
+ url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: state-hub
+ url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: tegwick-control
+ url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: the-custodian
+ url: https://forgejo.coulomb.social/coulomb/the-custodian/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: user-engine
+ url: https://forgejo.coulomb.social/coulomb/user-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: vantage-point
+ url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: vergabe-teilnahme
+ url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: whynot-control
+ url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: whynot-design
+ url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
diff --git a/docs/assessments/netkingdom-2026-10-14/local-sources.yaml b/docs/assessments/netkingdom-2026-10-14/local-sources.yaml
new file mode 100644
index 00000000..02a3e229
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/local-sources.yaml
@@ -0,0 +1,577 @@
+version: 1
+domain: helix_forge
+collision_policy: warn
+sources:
+- repo: access-engine
+ index: ../access-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: activity-core
+ index: ../activity-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: agentic-resources
+ index: ../agentic-resources/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: approval-engine
+ index: ../approval-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: artifact-store
+ url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: audit-core
+ index: ../audit-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: can-you-assist
+ url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-engine
+ url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-evidence
+ url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: citation-work
+ url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: commerce-canon
+ url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: config-atlas
+ url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: infotech
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: coordination-engine
+ index: ../coordination-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: core-hub
+ url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: domain-tree
+ url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: email-connect
+ url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: emergent-security
+ index: ../emergent-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: evidence-anchor
+ url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: evidence-binder
+ url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: evidence-source
+ url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: feature-control
+ url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: fin-hub
+ index: ../fin-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: gate-house
+ index: ../gate-house/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: glas-harness
+ index: ../glas-harness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: guide-board
+ url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: helix-forge
+ url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: hub-core
+ url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: human-resources
+ url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ihp-railiance-probe
+ url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: info-tech-canon
+ index: ../info-tech-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: informed-decision
+ index: ../informed-decision/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: infospace-bench
+ url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: issue-core
+ index: ../issue-core/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: kaizen-agentic
+ url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: key-cape
+ index: ../key-cape/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: kings-guard
+ index: ../kings-guard/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: kontextual-engine
+ url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: llm-connect
+ url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-filter
+ url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-main
+ url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-quarkdown
+ url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: markitect-tool
+ url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: maturity-engine
+ index: ../maturity-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: net-kingdom
+ index: ../net-kingdom/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: open-cmis-tck
+ url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: open-reuse
+ url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ops-bridge
+ index: ../ops-bridge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: ops-hub
+ url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: ops-mason
+ index: ../ops-mason/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: ops-warden
+ index: ../ops-warden/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: phase-memory
+ url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: policy-nexus
+ index: ../policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rail-knative
+ index: ../rail-knative/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rail-kubernetes
+ index: ../rail-kubernetes/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-apps
+ index: ../railiance-apps/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-bootstrap
+ index: ../railiance-bootstrap/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-cluster
+ index: ../railiance-cluster/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-enablement
+ index: ../railiance-enablement/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-fabric
+ index: ../railiance-fabric/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-forge
+ index: ../railiance-forge/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-infra
+ index: ../railiance-infra/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-master
+ index: ../railiance-master/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-platform
+ index: ../railiance-platform/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: railiance-telemetry
+ index: ../railiance-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-openbao
+ index: ../rapp-openbao/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-playwright
+ index: ../rapp-playwright/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-policy-nexus
+ index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-postgres
+ index: ../rapp-postgres/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-sbom-nexus
+ index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-telemetry
+ index: ../rapp-telemetry/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-tenant-engine
+ index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rapp-user-engine
+ index: ../rapp-user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: reef-railiance
+ index: ../reef-railiance/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rein-aharness
+ index: ../rein-aharness/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: rein-openweights
+ index: ../rein-openweights/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: repo-manager
+ index: ../repo-manager/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: repo-scoping
+ url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: repo-seed
+ url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: resource-control
+ index: ../resource-control/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: reuse-surface
+ index: ../reuse-surface/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: risk-nexus
+ index: ../risk-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: role-engine
+ index: ../role-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: runbook-tutorials
+ index: ../runbook-tutorials/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: sand-boxer
+ index: ../sand-boxer/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: sbom-nexus
+ index: ../sbom-nexus/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: secrets-engine
+ index: ../secrets-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: security-canon
+ index: ../security-canon/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: shard-wiki
+ url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: state-hub
+ index: ../state-hub/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: tegwick-control
+ url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: tenant-engine
+ index: ../tenant-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: the-custodian
+ index: ../the-custodian/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: user-engine
+ index: ../user-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: vantage-point
+ url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: vergabe-teilnahme
+ url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: whitehat-security
+ index: ../whitehat-security/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
+- repo: whynot-control
+ url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: whynot-design
+ url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml
+ enabled: true
+ required: false
+ domain: helix_forge
+ cache_ttl_seconds: 86400
+ auth_header: Authorization
+- repo: zone-engine
+ index: ../zone-engine/registry/indexes/capabilities.yaml
+ enabled: true
+ required: true
+ domain: infotech
diff --git a/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py b/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py
new file mode 100644
index 00000000..901cc557
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py
@@ -0,0 +1,17 @@
+from pathlib import Path
+import hashlib,json,sys,yaml
+sys.path.insert(0,'/home/worsch/reuse-surface')
+from reuse_surface.federation import compose_federated_index
+OUT=Path(__file__).resolve().parent;ROOT=Path('/home/worsch/reuse-surface')
+v=json.loads((OUT/'full-inventory.json').read_text());src=ROOT/'registry/federation/sources.yaml';old=yaml.safe_load(src.read_text())
+sources={s['repo']:s for s in old['sources']}
+for n in v['repositories']:
+ sources[n]={'repo':n,'index':f'../{n}/registry/indexes/capabilities.yaml','enabled':True,'required':True,'domain':'infotech'}
+manifest={**old,'sources':sorted(sources.values(),key=lambda s:s['repo'])}
+(OUT/'local-sources-before.yaml').write_bytes(src.read_bytes());(OUT/'local-sources.yaml').write_text(yaml.safe_dump(manifest,sort_keys=False))
+federated,warnings=compose_federated_index(manifest,cache_dir=Path('/tmp/netkingdom-reuse-federation-cache'))
+counts={r['id']:sum(c['id']==r['id'] for c in federated['capabilities']) for r in v['capabilities']}
+receipt={'source_count':len(sources),'reviewed_count':len(counts),'all_exactly_once':all(n==1 for n in counts.values()),'warnings':warnings,'previous_sources_sha256':hashlib.sha256(src.read_bytes()).hexdigest(),'scope':'Workstation local federation. Existing unrelated sources preserved; hosted registration is separate.'}
+(OUT/'local-default-federation-receipt.json').write_text(json.dumps(receipt,indent=2)+'\n')
+(OUT/'local-default-federated.yaml').write_text(yaml.safe_dump(federated,sort_keys=False))
+print(json.dumps(receipt,indent=2));assert receipt['all_exactly_once']
diff --git a/docs/assessments/netkingdom-2026-10-14/prepare_registry.py b/docs/assessments/netkingdom-2026-10-14/prepare_registry.py
new file mode 100644
index 00000000..f38bc66b
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/prepare_registry.py
@@ -0,0 +1,122 @@
+"""Prepare exact registry edits for review. Does not mutate owner repositories."""
+from pathlib import Path
+import json, hashlib, sys, copy
+import yaml
+sys.path.insert(0,'/home/worsch/reuse-surface')
+from reuse_surface.registry import parse_front_matter,entry_vector
+from reuse_surface.cli import _run_validate
+BASE=Path('/home/worsch'); OUT=Path(__file__).resolve().parent; STAGE=OUT/'registry-stage'
+data=json.loads((OUT/'inventory.json').read_text()); rows=data['capabilities']
+CASES={
+'U01':'Architect composes a security deployment from explicit owner contracts and case types',
+'U02':'Human signs in with MFA and manages account or factor recovery',
+'U03':'Application combines identity, tenant and resource facts and enforces a bound decision',
+'U04':'Protected operation obtains and consumes exact human approval before its side effect',
+'U05':'Operator provisions and delivers a scoped workload credential through the approved owner lane',
+'U06':'Operator or automation obtains a bounded SSH certificate and maintains private connectivity',
+'U07':'Owner inventories, rotates, revokes and detects exposure of credentials',
+'U08':'Consumer emits security events and reconciles independently retained evidence',
+'U09':'Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes',
+'U10':'Operator recovers identity, custody or data with independently held recovery material',
+'U11':'Agent executes an attributable bounded task and supplies supervision evidence',
+'U12':'Developer builds and publishes through controlled source, dependency and runner paths',
+'U13':'Platform owner deploys and rolls back a workload with explicit substrate and custody bindings',
+'U14':'Framework adopter validates and reuses selected contracts, tools and reference compositions',
+}
+# Adjacencies express interfaces, not a claim that every edge is natively admitted.
+NEIGHBORS={
+'net-kingdom':['security-canon','gate-house','key-cape','access-engine','reuse-surface'],
+'key-cape':['user-engine','tenant-engine','access-engine'],
+'user-engine':['key-cape','tenant-engine','access-engine','audit-core'],
+'access-engine':['approval-engine','key-cape','tenant-engine','zone-engine','maturity-engine'],
+'approval-engine':['access-engine','key-cape','secrets-engine','audit-core'],
+'secrets-engine':['approval-engine','access-engine','railiance-platform','ops-warden'],
+'ops-warden':['secrets-engine','access-engine','ops-bridge','ops-mason'],
+'ops-mason':['secrets-engine','net-kingdom','railiance-platform'],
+'audit-core':['approval-engine','tenant-engine','kings-guard','railiance-telemetry'],
+'kings-guard':['maturity-engine','audit-core','risk-nexus','net-kingdom'],
+'maturity-engine':['gate-house','access-engine','kings-guard'],
+'whitehat-security':['gate-house','audit-core','approval-engine'],
+'emergent-security':['net-kingdom','gate-house','glas-harness'],
+'informed-decision':['approval-engine','access-engine','state-hub'],
+'policy-nexus':['net-kingdom','security-canon','risk-nexus'],
+'glas-harness':['sand-boxer','rein-aharness','rein-openweights'],
+'agentic-resources':['glas-harness','activity-core','fin-hub'],
+'repo-manager':['railiance-forge','sbom-nexus','state-hub'],
+'railiance-forge':['repo-manager','railiance-enablement','railiance-apps'],
+'railiance-platform':['rapp-openbao','rapp-postgres','key-cape','secrets-engine'],
+'railiance-telemetry':['rapp-telemetry','audit-core','kings-guard'],
+'rapp-telemetry':['railiance-telemetry','rail-kubernetes','reef-railiance'],
+'fin-hub':['resource-control','agentic-resources'],
+}
+primary={}
+for r in rows: primary.setdefault(r['repo'],r['id'])
+changes=[]; validation=[]
+def stage(repo,rel,content):
+ dst=STAGE/repo/rel;dst.parent.mkdir(parents=True,exist_ok=True); dst.write_text(content)
+ src=BASE/repo/rel
+ if src.exists():
+ baseline=OUT/'registry-before'/repo/rel;baseline.parent.mkdir(parents=True,exist_ok=True);baseline.write_bytes(src.read_bytes())
+ if not src.exists() or src.read_bytes()!=dst.read_bytes():
+ changes.append({'repo':repo,'path':rel,'before_sha256':hashlib.sha256(src.read_bytes()).hexdigest() if src.exists() else None,'after_sha256':hashlib.sha256(dst.read_bytes()).hexdigest(),'operation':'write'})
+for repo,rv in data['repositories'].items():
+ root=BASE/repo; rs=[r for r in rows if r['repo']==repo]
+ ix=copy.deepcopy(rv['existing_index'] or {'version':1,'domain':'infotech','capabilities':[]})
+ marker=root/'registry/NO_CAPABILITIES.md'
+ if marker.exists(): changes.append({'repo':repo,'path':'registry/NO_CAPABILITIES.md','before_sha256':hashlib.sha256(marker.read_bytes()).hexdigest(),'after_sha256':None,'operation':'delete'})
+ ix['updated']='2026-10-14';ix.setdefault('version',1);ix.setdefault('domain','infotech')
+ # Include unchanged sibling entries in staged validation without rewriting them.
+ for p in (root/'registry/capabilities').glob('*.md'):
+ if repo=='secrets-engine' and parse_front_matter(p).get('id')=='capability.infotech.repo-template':
+ changes.append({'repo':repo,'path':str(p.relative_to(root)),'before_sha256':hashlib.sha256(p.read_bytes()).hexdigest(),'after_sha256':None,'operation':'delete'})
+ ix['capabilities']=[c for c in ix['capabilities'] if c['id']!='capability.infotech.repo-template'];continue
+ dst=STAGE/repo/p.relative_to(root);dst.parent.mkdir(parents=True,exist_ok=True);dst.write_bytes(p.read_bytes())
+ for r in rs:
+ rel=r['existing_entry_path'] or f"registry/capabilities/{r['id']}.md"
+ try: old=parse_front_matter(root/rel) if (root/rel).exists() else {}
+ except (ValueError,yaml.YAMLError):
+ try: old=yaml.safe_load((root/rel).read_text()[4:])
+ except yaml.YAMLError: old={}
+ valid_old='maturity' in old and 'external_evidence' in old
+ fm=copy.deepcopy(old) if valid_old else {'id':r['id'],'owner':repo,'status':'draft','domain':'infotech','maturity':{'discovery':{'current':'D3','target':'D5','confidence':'medium'},'availability':{'current':r['availability'],'target':r['availability'],'confidence':'medium'}},'external_evidence':{'completeness':{'level':'C1','confidence':'low','basis':'Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.'},'reliability':{'level':'R0','confidence':'low','basis':'No longitudinal consumer reliability measurement established by this review.'}}}
+ fm.pop('consumption_modes',None)
+ fm.update(name=r['name'],summary=r['surface']+'.',owner=repo)
+ fm['tags']=list(dict.fromkeys(fm.get('tags',[])+['security','netkingdom','framework-reuse']))
+ if old.get('external_evidence'):
+ for key in ['completeness','reliability']:
+ if key in old['external_evidence']: fm['external_evidence'][key]=old['external_evidence'][key]
+ fm['external_evidence'].setdefault('reliability',{'level':'R0','confidence':'low','basis':'No longitudinal reliability assessment available.'})
+ previous=entry_vector(fm)
+ fm['maturity']['availability']['current']=r['availability']
+ if int(fm['maturity']['availability'].get('target',r['availability'])[1:])
+ Provide inspectable authorization decisions between verified identity and
+ protected resources using policy-as-code.
+ includes:
+ - policy evaluation
+ - authorization registry
+ - decision explainability
+ excludes:
+ - identity issuance
+ - authentication protocols
+ use_cases: []
+
+availability:
+ current_level: A2
+ target_level: A5
+ current_artifacts:
+ - flex-auth/
+ consumption_modes:
+ - source module
+
+relations:
+ depends_on:
+ - capability.identity.subject-resolution
+ related_to:
+ - capability.feature-control.evaluate
+
+consumer_guidance:
+ recommended_for:
+ - planning authorization layer between identity and resources
+ not_recommended_for:
+ - feature visibility toggles without policy intent
+ known_limitations:
+ - maturity evidence is registry-external today
+---
+
+# Authorization Policy Evaluation
+
+Policy evaluation from flex-auth sits between identity resolution and protected
+systems.
\ No newline at end of file
diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml
new file mode 100644
index 00000000..6784c9b4
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml
@@ -0,0 +1,19 @@
+version: 1
+updated: '2026-06-16'
+domain: helix_forge
+capabilities:
+- id: capability.authorization.policy-evaluate
+ name: Authorization Policy Evaluation
+ summary: Evaluate access decisions from policy-as-code rules for subjects, resources,
+ and actions.
+ vector: D4 / A2 / C2 / R1
+ domain: helix_forge
+ status: draft
+ owner: flex-auth
+ path: registry/capabilities/capability.authorization.policy-evaluate.md
+ tags:
+ - authorization
+ - policy
+ - flex-auth
+ consumption_modes:
+ - source module
diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md
new file mode 100644
index 00000000..fd0037a0
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md
@@ -0,0 +1,77 @@
+---
+id: capability.activity.event-coordinate
+name: Organizational Event Coordination
+summary: Coordinate structured responses to cross-domain events through activity workflows and automation.
+owner: activity-core
+status: draft
+domain: helix_forge
+tags: [activity, coordination, automation]
+
+maturity:
+ discovery:
+ current: D3
+ target: D5
+ confidence: medium
+ rationale: activity-core INTENT defines org-wide event response boundary.
+ availability:
+ current: A1
+ target: A4
+ confidence: low
+ rationale: Conceptual workflows exist; consumable API surface still emerging.
+
+external_evidence:
+ completeness:
+ level: C1
+ name: Fragmentary
+ confidence: low
+ basis: scope_vs_intent_and_consumer_expectations
+ satisfied_expectations:
+ - problem and boundary documented in INTENT
+ broken_expectations:
+ - no registry-native automation artifacts indexed yet
+ out_of_scope_expectations:
+ - owning domain-specific business logic
+ reliability:
+ level: R0
+ confidence: low
+ basis: consumer_quality_signals
+ known_reliability_risks: []
+
+discovery:
+ intent: >
+ Give the organization a structural home for responding to events across repos
+ and domains in an auditable, automation-ready way.
+ includes:
+ - event-triggered coordination
+ - cross-domain maintenance workflows
+ excludes:
+ - single-repo cron replacements only
+ use_cases: []
+
+availability:
+ current_level: A1
+ target_level: A4
+ current_artifacts:
+ - activity-core/INTENT.md
+ consumption_modes:
+ - informational
+
+relations:
+ depends_on: []
+ related_to:
+ - capability.statehub.workstream-coordinate
+ - capability.audit.event-retain
+
+consumer_guidance:
+ recommended_for:
+ - planning org-wide event response patterns
+ not_recommended_for:
+ - assuming production automation is available
+ known_limitations:
+ - early discovery stage
+---
+
+# Organizational Event Coordination
+
+activity-core coordinates how the org responds to events—not the domain logic
+inside each repo.
\ No newline at end of file
diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml
new file mode 100644
index 00000000..ded089e3
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml
@@ -0,0 +1,19 @@
+version: 1
+updated: '2026-06-16'
+domain: helix_forge
+capabilities:
+- id: capability.activity.event-coordinate
+ name: Organizational Event Coordination
+ summary: Coordinate structured responses to cross-domain events through activity
+ workflows and automation.
+ vector: D3 / A1 / C1 / R0
+ domain: helix_forge
+ status: draft
+ owner: activity-core
+ path: registry/capabilities/capability.activity.event-coordinate.md
+ tags:
+ - activity
+ - coordination
+ - automation
+ consumption_modes:
+ - informational
diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md
new file mode 100644
index 00000000..60aa0019
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md
@@ -0,0 +1,15 @@
+---
+repo: agentic-resources
+reason: >
+ INTENT/SCOPE are aspirational HR-for-agents vision prose; no src/, no package manifest — vision-stage only, nothing implemented to reuse.
+reviewed: "2026-07-06"
+reviewed_by: claude-code
+revisit: >
+ Revisit once an implementation exists (src/ or package manifest lands).
+---
+
+# No reusable capability
+
+This repo was reviewed for the `reuse-surface` capability registry
+(REUSE-WP-0017 coverage campaign) and has no capability to register at this
+time. See the `reason` field above.
diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml
new file mode 100644
index 00000000..f944e472
--- /dev/null
+++ b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml
@@ -0,0 +1,4 @@
+version: 1
+updated: '2026-06-16'
+domain: helix_forge
+capabilities: []