From 2b6901eb9ce7922d6cb036affd6e3eac2c5098e0 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 14 Oct 2026 09:45:31 +0200 Subject: [PATCH] docs: publish reviewed NetKingdom evidence batch 1 --- .../netkingdom-2026-10-14/apply_registry.py | 20 + .../netkingdom-2026-10-14/build_inventory.py | 98 + .../capability-inventory.md | 504 +++ .../commit-scan-diagnosis.json | 10 + .../completion-audit.json | 42 + .../federated-local.yaml | 1502 +++++++++ .../federated-staged.yaml | 1461 ++++++++ .../federation-local.yaml | 244 ++ .../federation-staged.yaml | 236 ++ .../netkingdom-2026-10-14/full-inventory.json | 2987 +++++++++++++++++ .../hosted-after-publication.json | 2154 ++++++++++++ .../hosted-before-federated.json | 1872 +++++++++++ .../hosted-before-repos.json | 714 ++++ .../hosted-verification.json | 61 + .../hub-private-source-pending.json | 104 + .../hub-public-registration-plan.json | 374 +++ .../hub-registration-plan.json | 458 +++ .../hub-registration-proposal.json | 14 + .../hub-registration-receipt.json | 9 + .../netkingdom-2026-10-14/inventory.json | 2905 ++++++++++++++++ .../local-default-federated.yaml | 2516 ++++++++++++++ .../local-default-federation-receipt.json | 8 + .../local-discovery-receipt.json | 21 + .../local-federation-guide.md | 27 + .../local-sources-before.yaml | 431 +++ .../netkingdom-2026-10-14/local-sources.yaml | 577 ++++ .../prepare_local_federation.py | 17 + .../netkingdom-2026-10-14/prepare_registry.py | 122 + .../publication-preflight.json | 542 +++ .../publication_preflight.py | 18 + .../netkingdom-2026-10-14/publish_registry.py | 44 + .../published-source-verification.json | 1194 +++++++ .../netkingdom-2026-10-14/register_hub.py | 43 + .../registry-application.json | 6 + ...apability.authorization.policy-evaluate.md | 80 + .../registry/indexes/capabilities.yaml | 19 + .../capability.activity.event-coordinate.md | 77 + .../registry/indexes/capabilities.yaml | 19 + .../registry/NO_CAPABILITIES.md | 15 + .../registry/indexes/capabilities.yaml | 4 + 40 files changed, 21549 insertions(+) create mode 100644 docs/assessments/netkingdom-2026-10-14/apply_registry.py create mode 100644 docs/assessments/netkingdom-2026-10-14/build_inventory.py create mode 100644 docs/assessments/netkingdom-2026-10-14/capability-inventory.md create mode 100644 docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json create mode 100644 docs/assessments/netkingdom-2026-10-14/completion-audit.json create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-local.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/federated-staged.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-local.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/federation-staged.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/full-inventory.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hosted-verification.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json create mode 100644 docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json create mode 100644 docs/assessments/netkingdom-2026-10-14/inventory.json create mode 100644 docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json create mode 100644 docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json create mode 100644 docs/assessments/netkingdom-2026-10-14/local-federation-guide.md create mode 100644 docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/local-sources.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py create mode 100644 docs/assessments/netkingdom-2026-10-14/prepare_registry.py create mode 100644 docs/assessments/netkingdom-2026-10-14/publication-preflight.json create mode 100644 docs/assessments/netkingdom-2026-10-14/publication_preflight.py create mode 100644 docs/assessments/netkingdom-2026-10-14/publish_registry.py create mode 100644 docs/assessments/netkingdom-2026-10-14/published-source-verification.json create mode 100644 docs/assessments/netkingdom-2026-10-14/register_hub.py create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-application.json create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/capabilities/capability.authorization.policy-evaluate.md create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md create mode 100644 docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml diff --git a/docs/assessments/netkingdom-2026-10-14/apply_registry.py b/docs/assessments/netkingdom-2026-10-14/apply_registry.py new file mode 100644 index 00000000..d8ad3e01 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/apply_registry.py @@ -0,0 +1,20 @@ +"""Apply only the hash-pinned, reviewed metadata patch; never stage or commit.""" +from pathlib import Path +import hashlib,json +OUT=Path(__file__).resolve().parent;BASE=Path('/home/worsch') +changes=json.loads((OUT/'registry-changes.json').read_text()) +# Check the entire patch before the first write. Do not overwrite concurrent edits. +for c in changes: + p=BASE/c['repo']/c['path'];actual=hashlib.sha256(p.read_bytes()).hexdigest() if p.exists() else None + if actual!=c['before_sha256']:raise SystemExit('Concurrent change: '+str(p)) + if c['operation']=='write': + stage=OUT/'registry-stage'/c['repo']/c['path'] + if hashlib.sha256(stage.read_bytes()).hexdigest()!=c['after_sha256']:raise SystemExit('Staged digest differs: '+str(stage)) +for c in changes: + p=BASE/c['repo']/c['path'] + if p.exists(): + backup=OUT/'registry-before'/c['repo']/c['path'];backup.parent.mkdir(parents=True,exist_ok=True);backup.write_bytes(p.read_bytes()) + if c['operation']=='delete':p.unlink() + else:p.parent.mkdir(parents=True,exist_ok=True);p.write_bytes((OUT/'registry-stage'/c['repo']/c['path']).read_bytes()) +(OUT/'registry-application.json').write_text(json.dumps({'applied':len(changes),'repositories':len({c['repo'] for c in changes}),'verified_sha256':True,'git_staging_or_commits':False},indent=2)+'\n') +print('Applied',len(changes),'reviewed metadata edits') diff --git a/docs/assessments/netkingdom-2026-10-14/build_inventory.py b/docs/assessments/netkingdom-2026-10-14/build_inventory.py new file mode 100644 index 00000000..1e244120 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/build_inventory.py @@ -0,0 +1,98 @@ +"""Build the review's explicit capability denominator and staged registry patch.""" +from pathlib import Path +import hashlib, json, subprocess, yaml +BASE=Path('/home/worsch'); OUT=Path(__file__).resolve().parent +# repo | id suffix | capability | availability | operational estimate (1..5) | surface | limitation | use cases | artifacts +DATA=''' +security-canon|security.practice-canon|Security practice and authority vocabulary|A0|2|Versioned SEC-DSM and Mode of Authority documents|Normative practice; no runtime control or certification|U01 U07 U10 U14|SCOPE.md;infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md +net-kingdom|security.iam-tooling-suite|NetKingdom security architecture and conformance tooling|A2|2|Versioned IAM, layer, tenancy and credential contracts plus validators|Mixed accepted and proposed standards; framework integration remains incomplete|U01 U02 U03 U14|SCOPE.md;SECURITY-COMPANION.md +net-kingdom|security.scenario-compose|Deterministic security scenario composition|A2|2|CLI selects pinned providers and orders trust transitions|Plan only; execution.permitted is always false|U01 U14|tools/security-scenario-composer/README.md;tools/security-scenario-composer/security_scenario_composer.py +net-kingdom|security.posture-feedback|Deterministic posture feedback|A2|2|CLI evaluates evidence age and posture into owner-routed findings|Proposal only; no policy changes or remediation execution|U09 U14|tools/posture-feedback/README.md;tools/posture-feedback/posture_feedback.py +net-kingdom|security.case-contracts|Security case types and instance validation|A2|2|Versioned types, cases and schema validation|Type acknowledgment, case acceptance, structural materialization and native execution are distinct|U01 U05 U06|tools/security-case-types/README.md;canon/standards/security-case-types_v0.1.md +net-kingdom|security.bootstrap-recovery|Guarded bootstrap and recovery preparation|A2|2|Local identity, bootstrap console, encrypted custody handoff and caller tools|Source repairs and disposable native fixtures do not prove estate root isolation or recovery|U10|tools/security-bootstrap-console/README.md;tools/custody-record/README.md +net-kingdom|security.emission-profile|Security emission cadence validation|A2|2|Security profile over generic emission contracts and validator|Profile adoption and source completeness require owner-native evidence|U08 U09|tools/emission-cadence-profile/README.md +key-cape|iam.key-cape|OIDC identity and assurance|A4|3|OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI|Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates|U02 U03 U04 U10|SCOPE.md;README.md +user-engine|identity.user-engine|User lifecycle and account journeys|A4|3|Accounts, identity links, membership, MFA and recovery portal, advisory catalog|Application readback is advisory; applications must enforce their own authorization|U02 U03 U10|SCOPE.md;README.md +tenant-engine|identity.tenant-facts|Tenant lifecycle and guardrail facts|A4|3|Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store|Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate|U03 U04|SCOPE.md;README.md +zone-engine|security.zone-reference|Zone membership reference conformance|A2|2|Offline resolution, exception and lineage checks|No live zone engine, PDP or protected side effects|U01 U03 U14|SCOPE.md;README.md +access-engine|authorization.policy-evaluate|Policy evaluation and decision evidence|A4|3|Check, batch, list-allowed, explain, binding, lifetime and decision records|One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct|U03 U04 U05 U06|SCOPE.md;README.md +approval-engine|security.approval-lifecycle|Bound approval lifecycle|A4|2|Authenticated issue, claim, revoke, supersede and atomic consume API with outbox|Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open|U04 U05 U06|SCOPE.md;approval_engine/api.py;docs/production-dependencies.md +secrets-engine|security.credential-lifecycle|Cataloged credential lifecycle|A2|2|CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke|Production protected execution and independently anchored PDP authentication remain incomplete|U04 U05 U07|SCOPE.md;src/secrets_engine/decision_check.py +ops-warden|security.ssh-certificate-issuance|Decision-bound SSH certificates|A3|3|warden sign with local and OpenBao backends and adm/agt/atm actors|Direct Tooling contact is a declared gap; certificate reachability is not target authorization|U06|SCOPE.md;README.md +ops-warden|security.access-routing|Credential routing and contained access|A3|3|warden route and access catalog; exact lane conduit and secret-exec routing|Routing grants no authority; interim delegates and attended high-risk lanes persist|U04 U05 U06|SCOPE.md;wiki/CredentialRouting.md +ops-warden|security.case-follow-through|Security case operational follow-through|A2|2|KnownSecurityCase route, plan and operational receipts|Execution requires accepted structure and exact owner contracts; case closure is not automatic|U01 U05 U06|workplans/WARDEN-WP-0044-security-case-follow-through.md +ops-mason|security.structure-construction|Reviewed security structure construction|A2|2|Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply|Founder plan gate is an explicit exception; not full PDP conformance|U01 U05 U06|SCOPE.md;docs/construction-plan-format.md +ops-bridge|ops.tunnel-bridge|SSH tunnel lifecycle|A2|3|Named tunnels, reconnect, health and TTL-aware cert_command|Private transport does not authenticate applications or decide access|U06|SCOPE.md +audit-core|audit.event-retain|Independent audit custody|A4|3|Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation|Custody after arrival does not prove source completeness; freshness bounds integrity assertions|U08 U09 U10|SCOPE.md;docs/stream-completeness.md +maturity-engine|security.maturity-claims|Evidence-based maturity claims and gap register|A2|2|SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory|No production deployment claimed; levels supply facts and cannot authorize actions|U09 U14|SCOPE.md;docs/claim-contract.md +kings-guard|security.posture-assessment|Security posture assessment and response proposals|A2|2|Normalized observation evaluator, cadence checks and secret-use snapshot adapter|Bounded reference pilot; containment proposals only; deployed-stream admission remains open|U08 U09|SCOPE.md;docs/SecretUseSnapshotAdmission.md +whitehat-security|security.adversarial-evidence|Authorized adversarial evidence harness|A2|2|Offline ASM and tenancy calibrations and engagement admission|Live probes require a complete engagement; no blanket target authorization|U03 U08 U10 U14|SCOPE.md;README.md +gate-house|security.doctrine-review|Security doctrine and architecture review|A0|3|Layer rules, authority context, ASM criteria and interpretations|Staff judgment; no runtime PDP, credential issuer or automatic enforcement|U01 U09 U14|SCOPE.md;INTENT.md +emergent-security|security.agent-knowledge|Verified security orientation for agents|A2|2|Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports|Current start card withheld for source drift; orientation never grants authority|U01 U11 U14|SCOPE.md;knowledge/cards/start.md +informed-decision|security.human-decision-workspace|Human security decision presentation and disposition|A4|3|Headless lifecycle and browser workspace with exact native approval references|Initial audience is bounded; Approval Engine owns approval state, Access Engine decides|U04 U05 U09|SCOPE.md;README.md +policy-nexus|security.policy-publication|Policy publication with source provenance|A2|3|Generated immutable publication, source currency and stable policy URLs|Publication does not ratify policy or enforce it|U01 U09 U14|README.md;docs/publication-contract.md +risk-nexus|security.risk-register|Security risk and exception review register|A2|2|Markdown findings and Python review, verification and due-work reports|Judgment remains human or agent; no live EUR risk gate or autonomous response|U09 U14|SCOPE.md +role-engine|organization.role-catalog|Organizational role definitions|A0|1|Versioned documentation catalog|Not IAM roles, assignments or runtime authorization|U01 U11|README.md;INTENT.md +glas-harness|execution.profile-harness|Profile-bound agent execution lifecycle|A3|2|Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration|No ready profile asserted by SCOPE; Custodian native isolation remains open|U11|SCOPE.md;README.md +sand-boxer|execution.sandbox-provision|Sandbox establishment and lifecycle|A5|2|Profiles, extensions, provision, checkpoints, TTL teardown and telemetry|Backend-specific guarantees; a created sandbox alone proves no credential isolation|U11 U14|SCOPE.md;README.md +rein-aharness|execution.scheduled-agent-rein|Scheduled agent intake and harness routing|A2|3|Activity Core lease claim/heartbeat and Glas profile execution|Legacy paths are time-gated; task success is not privileged authority|U09 U11|SCOPE.md;README.md +rein-openweights|execution.openweight-rein|Bounded open-weight agent execution|A2|2|Tool loop, path guards, turn/budget limits and verified-commit result|Provider credential acquisition and runtime authority need separate custody controls|U11|SCOPE.md;README.md +agentic-resources|agents.performance-learning|Agent performance learning|A2|2|Capture sessions, curate patterns, distribute lessons and measure outcomes|Workforce assignments and broader authority contracts remain proposed|U09 U11|SCOPE.md +runbook-tutorials|infotech.runbook-tutorials|Guided administrative runbooks|A2|2|Pack schema, loader, local UI/CLI, gates, verification and rollback evidence|Owner supplies procedures; UI progress is not runtime approval|U05 U10 U14|SCOPE.md;docs/pack-spec.md +repo-manager|security.repository-secret-prevention|Repository metadata and staged-secret prevention|A2|3|Repository observation plus pinned staged-blob scanner and hook integration|Local hooks are bypassable; coverage is exact-checkout scoped|U07 U12|SCOPE.md;README.md +sbom-nexus|infotech.sbom-management|Dependency provenance and SBOM evidence|A4|3|Controlled archive ingest, immutable snapshots, freshness and license review|SBOM and license evidence do not prove vulnerability exploitability or artifact trust|U12 U09|README.md +activity-core|activity.event-coordinate|Durable automation and bounded operations|A4|3|Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks|Not a general shell executor; first unassisted security-flow cadence acceptance remains open|U09 U12|SCOPE.md;README.md +issue-core|infotech.issue-tracking|External issue tracker connector|A2|2|CLI and Python adapters for external issue systems|Internal work originates in owner files; external projection is optional|U09|README.md +state-hub|statehub.workstream-coordinate|Cross-repository work tracking|A4|3|File-derived workplans, tasks, dependencies, decisions and coordination views|Read/cache/index of owner work; not runtime approval authority|U09|README.md;SCOPE.md +state-hub|statehub.progress-log|Progress and work evidence indexing|A4|3|REST progress and task evidence references|Not independent security event custody|U08 U09|README.md;SCOPE.md +the-custodian|agents.custodian-runtime-tooling|Generic agent runtime and repository tooling|A2|2|Agent runtime modules and repository classification tooling|Only generic tooling is reusable; confidential canon and session memory are excluded|U09 U11 U14|runtime/README.md +coordination-engine|coordination.cross-owner-work|Cross-owner coordination lifecycle|A2|2|Observation, lease, wake-up, checkpoint and receipt contracts/runtime|Coordinates owners without replacing their execution or security authority|U09|SCOPE.md;spec/cross-owner-wait-mode-v0.1.md +reuse-surface|registry.register|Capability registry and federation|A3|3|Owner Markdown entries, indexes, federation hub and planning queries|Discovery is not readiness; empty and stale entries need evidence-led maintenance|U01 U09 U14|docs/RegistryFederation.md;specs/CapabilityMaturityStandard.md +reuse-surface|registry.validate|Capability registry validation|A3|3|Schema, index consistency and relation checks|Schema validity alone proves neither capability behavior nor hosted freshness|U01 U14|docs/RegistryFederation.md;schemas/capability.schema.yaml +info-tech-canon|infotech.canon-service|Shared semantic contracts and validation|A4|2|Markdown canon with library, CLI and read-only API|Mixed seed/candidate maturity; validation is not owner runtime conformance|U01 U08 U14|SCOPE.md +railiance-master|railiance.security-consumption-contracts|Platform security consumption architecture|A0|2|Rail/rapp/reef boundaries, exposure and security consumption contracts|Architecture declarations do not prove implementation or production admission|U01 U13 U14|SCOPE.md;docs/netkingdom-security-consumption-contract.md +railiance-platform|railiance.platform-services|Secret custody and platform data services|A2|3|OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts|Package ownership is split to rapp repos; caches and object services are demand-led|U04 U05 U07 U10 U13|SCOPE.md;docs/openbao.md +railiance-infra|railiance.infra-provisioning|Host convergence and security baseline|A2|3|Ansible inventory, firewall, SSH bootstrap and baseline verification|Current hosts differ from the retained Hetzner provisioning path|U06 U10 U13|SCOPE.md +railiance-cluster|railiance.cluster-bootstrap|Kubernetes runtime and cluster controls|A2|3|k3s, ingress, CNI, operators and kubeconfig/runtime checks|Single-node runtime and workload recovery are distinct from bootstrap success|U10 U13|SCOPE.md +railiance-enablement|railiance.ci-enablement|Developer delivery and CI templates|A2|2|Reusable CI workflows, build and deployment patterns|Templates do not prove mandatory checks or runner isolation|U12 U14|SCOPE.md +railiance-forge|railiance.forge-infrastructure|Source forge, registries and runner substrate|A2|3|Forgejo operation, package registries and runner lifecycle|Runner workload authority and independent verification coverage remain open|U12|SCOPE.md;workplans/FORGE-WP-0006-independent-secret-detection.md +railiance-forge|security.forge-secret-prevention|Independent introduced-history secret prevention|A2|3|Pinned receive adapter, lifecycle template and fail-closed scan|Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate|U07 U12|workplans/FORGE-WP-0006-independent-secret-detection.md +railiance-apps|railiance.workload-deployment-tooling|Workload release configuration and guards|A2|3|Helm/manifests, exact image pins, application runbooks and rollout/rollback|Release settings depend on underlying platform and workload owners|U12 U13|SCOPE.md +railiance-bootstrap|railiance.bootstrap-sequencing|Bootstrap sequencing contracts|A0|1|Bare-VM to estate sequence and handoff contract|End-to-end unattended rebuild is not established|U10 U14|SCOPE.md +rail-kubernetes|railiance.kubernetes-rail|Generic Kubernetes workload lifecycle|A2|2|Workload declaration, rollout, observe, promote and rollback surfaces|Compatibility extraction remains; not cluster or application-domain ownership|U13 U14|SCOPE.md +reef-railiance|railiance.substrate-bindings|Substrate topology and bindings|A0|2|Grouped home-reef identity, topology and placement declarations|Declarations are not automatic placement or authorization|U13 U14|SCOPE.md +railiance-fabric|railiance.fabric-graph|Infrastructure ownership and dependency graph|A2|2|Schemas, validation, graph queries and State Hub exports|Graph assertions need current owner evidence; not an enforcement registry|U09 U13 U14|SCOPE.md +rapp-openbao|railiance.openbao-package|Managed OpenBao deployment package|A2|3|Helm values, package deploy/status/smoke/rollback and custody boundary|Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit|U04 U10 U13|README.md;docs/retained-s3-handoff.md +rapp-postgres|railiance.postgres-isolation-recovery|Database isolation and recovery package|A2|3|CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures|Host-loss proof and consumer schemas stay with their owners|U03 U10 U13|SCOPE.md +rapp-user-engine|railiance.user-engine-package|User Engine runtime package|A2|3|Pinned deployment, dedicated CNPG, ExternalSecret references and rollback|Domain, identity, PDP and custody authority are separate|U02 U10 U13|SCOPE.md +rapp-tenant-engine|railiance.tenant-engine-package|Tenant Engine runtime package|A2|2|Package declaration, smoke and rollback|No tenant-domain ownership or credential values|U03 U13|SCOPE.md +rapp-policy-nexus|railiance.policy-publication-package|Policy publication runtime package|A2|3|Immutable image, non-root/read-only runtime and approved TLS exposure|No policy authoring or DNS/issuer administration|U01 U13|SCOPE.md +rapp-playwright|railiance.browser-verification|Managed browser verification pilot|A4|2|Bounded jobs, cancellation, artifacts, origin checks and restart receipts|Pilot deployed; human/agent authentication and per-caller self-service connectivity pending|U02 U14|SCOPE.md +railiance-telemetry|observability.security-signals|Security-relevant telemetry contracts and adapters|A2|2|Signal contract, platform adapters, report exporter and absence/alert rules|Reference receiver is not a second production plane; end-to-end delivery acceptance pending|U08 U09|SCOPE.md;README.md +rapp-telemetry|railiance.telemetry-package|Private monitoring package|A2|2|Prometheus, Alertmanager and Grafana package with isolated restore evidence|Private installation only; recurring recovery capture and audited confirmation pending|U08 U09 U10|SCOPE.md +resource-control|resources.security-capacity|Capacity and recovery resource planning|A2|2|Provider-neutral inventory, procurement evidence and optimization reports|No payment authority or irreversible procurement; metrics do not prove usable runtime capacity|U09 U10 U13|SCOPE.md +fin-hub|finance.security-budget-evidence|Budget and cost evidence for security operations|A4|2|Budget, commitment, spend attribution and planning-evidence consumption|No verified concurrent runtime EUR risk/cost enforcement for agents|U09 U11|SCOPE.md +''' +rows=[] +for line in DATA.strip().splitlines(): + repo,suffix,name,a,op,surface,limit,ucs,arts=line.split('|') + rows.append(dict(repo=repo,id='capability.'+suffix,name=name,availability=a,operational_estimate=int(op),surface=surface,limitation=limit,use_cases=ucs.split(),artifacts=arts.split(';'))) +# Source and current registry evidence, content hashes only (never credentials). +repos={} +for repo in sorted({r['repo'] for r in rows}): + root=BASE/repo + def git(*args): + p=subprocess.run(['git','-C',str(root),*args],capture_output=True,text=True);return p.stdout.strip() + ix=root/'registry/indexes/capabilities.yaml' + index=yaml.safe_load(ix.read_text()) if ix.exists() else {} + sources=sorted(set(['INTENT.md','SCOPE.md','README.md']+[a for r in rows if r['repo']==repo for a in r['artifacts']])) + hashes={p:'sha256:'+hashlib.sha256((root/p).read_bytes()).hexdigest() for p in sources if (root/p).is_file()} + missing=[p for r in rows if r['repo']==repo for p in r['artifacts'] if not (root/p).is_file()] + repos[repo]={'head':git('rev-parse','HEAD'),'branch':git('branch','--show-current'),'dirty_paths':git('status','--short').splitlines(),'source_sha256':hashes,'missing_review_artifacts':missing,'existing_index':index} + for r in [x for x in rows if x['repo']==repo]: + old=next((c for c in (index or {}).get('capabilities',[]) if c.get('id')==r['id']),None) + r['existing_entry_path']=old.get('path') if old else None + r['prior_vector']=old.get('vector') if old else None + r['vector']='D3 / '+r['availability']+' / C1 / R0' +(OUT/'inventory.json').write_text(json.dumps({'as_of':'2026-10-14','capabilities':rows,'repositories':repos},indent=2)+'\n') +print(json.dumps({'repos':len(repos),'capabilities':len(rows),'existing':sum(bool(r['existing_entry_path']) for r in rows),'missing_artifacts':{k:v['missing_review_artifacts'] for k,v in repos.items() if v['missing_review_artifacts']}},indent=2)) diff --git a/docs/assessments/netkingdom-2026-10-14/capability-inventory.md b/docs/assessments/netkingdom-2026-10-14/capability-inventory.md new file mode 100644 index 00000000..5b02cb26 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/capability-inventory.md @@ -0,0 +1,504 @@ +# NetKingdom repository and capability inventory + +Assessed 2026-10-14. See the [architecture review](../../netkingdom-security-architecture-review.md) for use cases U01–U14, evidence rules, operational maturity M1–M5 and D/A/C/R definitions. Existing external evidence levels are owner claims, not newly certified scores. + +**60 capability-owning repositories, 70 reviewed capabilities, plus two inspected nonproviders.** + +## access-engine + +Source revision `16ca97b2776789f730cc7049a2d6533612faaccd`. [Owner scope](../../../../access-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Policy evaluation and decision evidence](../../../../access-engine/SCOPE.md)
`capability.authorization.policy-evaluate` | Check, batch, list-allowed, explain, binding, lifetime and decision records.
U03, U04, U05, U06 | D4 / A4 / C2 / R1
M3 estimate | One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct. | + +## activity-core + +Source revision `83e6446807c4b36f3aa5023a5c16d4c7df8bd3df`. [Owner scope](../../../../activity-core/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Durable automation and bounded operations](../../../../activity-core/SCOPE.md)
`capability.activity.event-coordinate` | Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks.
U09, U12 | D3 / A4 / C1 / R0
M3 estimate | Not a general shell executor; first unassisted security-flow cadence acceptance remains open. | + +## agentic-resources + +Source revision `65b3a5cb6bf3eb214b492b95a38f2eb729f89709`. [Owner scope](../../../../agentic-resources/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Agent performance learning](../../../../agentic-resources/SCOPE.md)
`capability.agents.performance-learning` | Capture sessions, curate patterns, distribute lessons and measure outcomes.
U09, U11 | D3 / A2 / C1 / R0
M2 estimate | Workforce assignments and broader authority contracts remain proposed. | + +## approval-engine + +Source revision `e1649617e8ad321f79632d5fd33e973ae5d5ae51`. [Owner scope](../../../../approval-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Bound approval lifecycle](../../../../approval-engine/SCOPE.md)
`capability.security.approval-lifecycle` | Authenticated issue, claim, revoke, supersede and atomic consume API with outbox.
U04, U05, U06 | D3 / A4 / C1 / R0
M2 estimate | Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open. | + +## audit-core + +Source revision `f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9`. [Owner scope](../../../../audit-core/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Independent audit custody](../../../../audit-core/SCOPE.md)
`capability.audit.event-retain` | Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.
U08, U09, U10 | D3 / A4 / C3 / R2
M3 estimate | Custody after arrival does not prove source completeness; freshness bounds integrity assertions. | + +## coordination-engine + +Source revision `c401067842072b75717f76480dd6e7db1836059c`. [Owner scope](../../../../coordination-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Cross-owner coordination lifecycle](../../../../coordination-engine/SCOPE.md)
`capability.coordination.cross-owner-work` | Observation, lease, wake-up, checkpoint and receipt contracts/runtime.
U09 | D3 / A2 / C1 / R0
M2 estimate | Coordinates owners without replacing their execution or security authority. | + +## emergent-security + +Source revision `4c6fda38298fa50665ead41526b893adf069d335`. [Owner scope](../../../../emergent-security/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Verified security orientation for agents](../../../../emergent-security/SCOPE.md)
`capability.security.agent-knowledge` | Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports.
U01, U11, U14 | D3 / A2 / C1 / R0
M2 estimate | Current start card withheld for source drift; orientation never grants authority. | + +## fin-hub + +Source revision `8f527c6705bbf5d7ffed43559411ca748bec8fe4`. [Owner scope](../../../../fin-hub/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Budget and cost evidence for security operations](../../../../fin-hub/SCOPE.md)
`capability.finance.security-budget-evidence` | Budget, commitment, spend attribution and planning-evidence consumption.
U09, U11 | D3 / A4 / C1 / R0
M2 estimate | No verified concurrent runtime EUR risk/cost enforcement for agents. | + +## gate-house + +Source revision `bc890c4d050a2e726ce8988a8260ab9caea133e3`. [Owner scope](../../../../gate-house/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Security doctrine and architecture review](../../../../gate-house/SCOPE.md)
`capability.security.doctrine-review` | Layer rules, authority context, ASM criteria and interpretations.
U01, U09, U14 | D3 / A0 / C1 / R0
M3 estimate | Staff judgment; no runtime PDP, credential issuer or automatic enforcement. | + +## glas-harness + +Source revision `7b1557ba14f483569b90ebfdc2d0136fa69602fe`. [Owner scope](../../../../glas-harness/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Profile-bound agent execution lifecycle](../../../../glas-harness/SCOPE.md)
`capability.execution.profile-harness` | Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration.
U11 | D3 / A3 / C1 / R0
M2 estimate | No ready profile asserted by SCOPE; Custodian native isolation remains open. | + +## info-tech-canon + +Source revision `3d206a56f4ece439f6ee87f9ee4d1800ab82166e`. [Owner scope](../../../../info-tech-canon/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Shared semantic contracts and validation](../../../../info-tech-canon/SCOPE.md)
`capability.infotech.canon-service` | Markdown canon with library, CLI and read-only API.
U01, U08, U14 | D2 / A4 / C1 / R0
M2 estimate | Mixed seed/candidate maturity; validation is not owner runtime conformance. | + +## informed-decision + +Source revision `ee6a65b80a0fea1a914dfa31434b903669656c09`. [Owner scope](../../../../informed-decision/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Human security decision presentation and disposition](../../../../informed-decision/SCOPE.md)
`capability.security.human-decision-workspace` | Headless lifecycle and browser workspace with exact native approval references.
U04, U05, U09 | D3 / A4 / C1 / R0
M3 estimate | Initial audience is bounded; Approval Engine owns approval state, Access Engine decides. | + +## issue-core + +Source revision `de368271f6ffc06353ec409998a0d6d0ec0bf25e`. [Owner scope](../../../../issue-core/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [External issue tracker connector](../../../../issue-core/README.md)
`capability.infotech.issue-tracking` | CLI and Python adapters for external issue systems.
U09 | D4 / A2 / C2 / R1
M2 estimate | Internal work originates in owner files; external projection is optional. | + +## key-cape + +Source revision `1344fc80e56315c5c99f58993f9ee02ce79e8a76`. [Owner scope](../../../../key-cape/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [OIDC identity and assurance](../../../../key-cape/SCOPE.md)
`capability.iam.key-cape` | OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.
U02, U03, U04, U10 | D4 / A4 / C2 / R1
M3 estimate | Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates. | + +## kings-guard + +Source revision `af02e2547598d6ec0e83f482d9ea3ef943ea67b7`. [Owner scope](../../../../kings-guard/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Security posture assessment and response proposals](../../../../kings-guard/SCOPE.md)
`capability.security.posture-assessment` | Normalized observation evaluator, cadence checks and secret-use snapshot adapter.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Bounded reference pilot; containment proposals only; deployed-stream admission remains open. | + +## maturity-engine + +Source revision `2f1de542cc8f24a79452f906d99f95be39d8b6a9`. [Owner scope](../../../../maturity-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Evidence-based maturity claims and gap register](../../../../maturity-engine/SCOPE.md)
`capability.security.maturity-claims` | SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | No production deployment claimed; levels supply facts and cannot authorize actions. | + +## net-kingdom + +Source revision `1a36e857cc5aae6fe738f794417126c46dd94627`. [Owner scope](../../../../net-kingdom/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [NetKingdom security architecture and conformance tooling](../../../../net-kingdom/SCOPE.md)
`capability.security.iam-tooling-suite` | Versioned IAM, layer, tenancy and credential contracts plus validators.
U01, U02, U03, U14 | D3 / A2 / C1 / R1
M2 estimate | Mixed accepted and proposed standards; framework integration remains incomplete. | +| [Deterministic security scenario composition](../../../../net-kingdom/tools/security-scenario-composer/README.md)
`capability.security.scenario-compose` | CLI selects pinned providers and orders trust transitions.
U01, U14 | D3 / A2 / C1 / R0
M2 estimate | Plan only; execution.permitted is always false. | +| [Deterministic posture feedback](../../../../net-kingdom/tools/posture-feedback/README.md)
`capability.security.posture-feedback` | CLI evaluates evidence age and posture into owner-routed findings.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | Proposal only; no policy changes or remediation execution. | +| [Security case types and instance validation](../../../../net-kingdom/tools/security-case-types/README.md)
`capability.security.case-contracts` | Versioned types, cases and schema validation.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Type acknowledgment, case acceptance, structural materialization and native execution are distinct. | +| [Guarded bootstrap and recovery preparation](../../../../net-kingdom/tools/security-bootstrap-console/README.md)
`capability.security.bootstrap-recovery` | Local identity, bootstrap console, encrypted custody handoff and caller tools.
U10 | D3 / A2 / C1 / R0
M2 estimate | Source repairs and disposable native fixtures do not prove estate root isolation or recovery. | +| [Security emission cadence validation](../../../../net-kingdom/tools/emission-cadence-profile/README.md)
`capability.security.emission-profile` | Security profile over generic emission contracts and validator.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Profile adoption and source completeness require owner-native evidence. | + +## ops-bridge + +Source revision `190ef1e188e12c606f1359325fd9fdd1dbef29e2`. [Owner scope](../../../../ops-bridge/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [SSH tunnel lifecycle](../../../../ops-bridge/SCOPE.md)
`capability.ops.tunnel-bridge` | Named tunnels, reconnect, health and TTL-aware cert_command.
U06 | D3 / A2 / C2 / R1
M3 estimate | Private transport does not authenticate applications or decide access. | + +## ops-mason + +Source revision `d86ad141befb6800468f5132d4c7c9ce2f852bb5`. [Owner scope](../../../../ops-mason/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Reviewed security structure construction](../../../../ops-mason/SCOPE.md)
`capability.security.structure-construction` | Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Founder plan gate is an explicit exception; not full PDP conformance. | + +## ops-warden + +Source revision `6d2f1be9691b19e826898a2166ae4451e4802ae2`. [Owner scope](../../../../ops-warden/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Decision-bound SSH certificates](../../../../ops-warden/SCOPE.md)
`capability.security.ssh-certificate-issuance` | warden sign with local and OpenBao backends and adm/agt/atm actors.
U06 | D4 / A3 / C3 / R2
M3 estimate | Direct Tooling contact is a declared gap; certificate reachability is not target authorization. | +| [Credential routing and contained access](../../../../ops-warden/SCOPE.md)
`capability.security.access-routing` | warden route and access catalog; exact lane conduit and secret-exec routing.
U04, U05, U06 | D3 / A3 / C1 / R0
M3 estimate | Routing grants no authority; interim delegates and attended high-risk lanes persist. | +| [Security case operational follow-through](../../../../ops-warden/workplans/WARDEN-WP-0044-security-case-follow-through.md)
`capability.security.case-follow-through` | KnownSecurityCase route, plan and operational receipts.
U01, U05, U06 | D3 / A2 / C1 / R0
M2 estimate | Execution requires accepted structure and exact owner contracts; case closure is not automatic. | + +## policy-nexus + +Source revision `f784f017b0822f34c785f0b34c7c55fcf39c9d99`. [Owner scope](../../../../policy-nexus/README.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Policy publication with source provenance](../../../../policy-nexus/README.md)
`capability.security.policy-publication` | Generated immutable publication, source currency and stable policy URLs.
U01, U09, U14 | D3 / A2 / C1 / R0
M3 estimate | Publication does not ratify policy or enforce it. | + +## rail-knative + +Source revision `cd38dba3653e7fc85d3b2d3a074811b9a7216f25`. [Owner scope](../../../../rail-knative/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Knative workload lifecycle](../../../../rail-knative/SCOPE.md)
`capability.railiance.knative-rail` | Derived rail for activation, revisions, traffic, scaling and rollback.
U09, U13, U14 | D3 / A2 / C1 / R0
M3 estimate | Inherits Kubernetes common contract; verified readiness is not production approval. | + +## rail-kubernetes + +Source revision `35159e49c1340b7a0e30c49188975c8839d346f6`. [Owner scope](../../../../rail-kubernetes/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Generic Kubernetes workload lifecycle](../../../../rail-kubernetes/SCOPE.md)
`capability.railiance.kubernetes-rail` | Workload declaration, rollout, observe, promote and rollback surfaces.
U13, U14 | D3 / A2 / C1 / R0
M2 estimate | Compatibility extraction remains; not cluster or application-domain ownership. | + +## railiance-apps + +Source revision `706461b845086ee2df8ce9acae3dae7feebfffda`. [Owner scope](../../../../railiance-apps/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Workload release configuration and guards](../../../../railiance-apps/SCOPE.md)
`capability.railiance.workload-deployment-tooling` | Helm/manifests, exact image pins, application runbooks and rollout/rollback.
U12, U13 | D3 / A2 / C1 / R1
M3 estimate | Release settings depend on underlying platform and workload owners. | + +## railiance-bootstrap + +Source revision `ae00b2652737aaf18358431e66f59eeb7c01e16b`. [Owner scope](../../../../railiance-bootstrap/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Bootstrap sequencing contracts](../../../../railiance-bootstrap/SCOPE.md)
`capability.railiance.bootstrap-sequencing` | Bare-VM to estate sequence and handoff contract.
U10, U14 | D3 / A0 / C1 / R0
M1 estimate | End-to-end unattended rebuild is not established. | + +## railiance-cluster + +Source revision `12d1e881ff2086566712fbc591db293b38ea2bcf`. [Owner scope](../../../../railiance-cluster/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Kubernetes runtime and cluster controls](../../../../railiance-cluster/SCOPE.md)
`capability.railiance.cluster-bootstrap` | k3s, ingress, CNI, operators and kubeconfig/runtime checks.
U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Single-node runtime and workload recovery are distinct from bootstrap success. | + +## railiance-enablement + +Source revision `51a7c4cee68b48ed7a236e661b39c1d3cca92063`. [Owner scope](../../../../railiance-enablement/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Developer delivery and CI templates](../../../../railiance-enablement/SCOPE.md)
`capability.railiance.ci-enablement` | Reusable CI workflows, build and deployment patterns.
U12, U14 | D3 / A2 / C2 / R1
M2 estimate | Templates do not prove mandatory checks or runner isolation. | + +## railiance-fabric + +Source revision `96d19127125e85bdab7ff0ff79fc3ecf7d19045e`. [Owner scope](../../../../railiance-fabric/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Infrastructure ownership and dependency graph](../../../../railiance-fabric/SCOPE.md)
`capability.railiance.fabric-graph` | Schemas, validation, graph queries and State Hub exports.
U09, U13, U14 | D3 / A2 / C1 / R0
M2 estimate | Graph assertions need current owner evidence; not an enforcement registry. | + +## railiance-forge + +Source revision `a15fac8e938c11b041eb39386f05b63d46ae566a`. [Owner scope](../../../../railiance-forge/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Source forge, registries and runner substrate](../../../../railiance-forge/SCOPE.md)
`capability.railiance.forge-infrastructure` | Forgejo operation, package registries and runner lifecycle.
U12 | D3 / A2 / C1 / R0
M3 estimate | Runner workload authority and independent verification coverage remain open. | +| [Independent introduced-history secret prevention](../../../../railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md)
`capability.security.forge-secret-prevention` | Pinned receive adapter, lifecycle template and fail-closed scan.
U07, U12 | D3 / A2 / C1 / R0
M3 estimate | Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate. | + +## railiance-infra + +Source revision `ef64e324b61e9aa9b9ed03aad7dd2101915057ca`. [Owner scope](../../../../railiance-infra/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Host convergence and security baseline](../../../../railiance-infra/SCOPE.md)
`capability.railiance.infra-provisioning` | Ansible inventory, firewall, SSH bootstrap and baseline verification.
U06, U10, U13 | D4 / A2 / C2 / R1
M3 estimate | Current hosts differ from the retained Hetzner provisioning path. | + +## railiance-master + +Source revision `865c3bed86b3992244b29d6f1d6b8ebbe8db78c7`. [Owner scope](../../../../railiance-master/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Platform security consumption architecture](../../../../railiance-master/SCOPE.md)
`capability.railiance.security-consumption-contracts` | Rail/rapp/reef boundaries, exposure and security consumption contracts.
U01, U13, U14 | D3 / A0 / C1 / R0
M2 estimate | Architecture declarations do not prove implementation or production admission. | + +## railiance-platform + +Source revision `d303c99e3be993ffa989bc9ba3d7b471903858ce`. [Owner scope](../../../../railiance-platform/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Secret custody and platform data services](../../../../railiance-platform/SCOPE.md)
`capability.railiance.platform-services` | OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts.
U04, U05, U07, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Package ownership is split to rapp repos; caches and object services are demand-led. | + +## railiance-telemetry + +Source revision `81d905971c38de9aaf11088ba605e112152d8268`. [Owner scope](../../../../railiance-telemetry/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Security-relevant telemetry contracts and adapters](../../../../railiance-telemetry/SCOPE.md)
`capability.observability.security-signals` | Signal contract, platform adapters, report exporter and absence/alert rules.
U08, U09 | D3 / A2 / C1 / R0
M2 estimate | Reference receiver is not a second production plane; end-to-end delivery acceptance pending. | + +## rapp-openbao + +Source revision `13ab9144bbb1d88fe760362df91a83c8b34e4e66`. [Owner scope](../../../../rapp-openbao/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Managed OpenBao deployment package](../../../../rapp-openbao/README.md)
`capability.railiance.openbao-package` | Helm values, package deploy/status/smoke/rollback and custody boundary.
U04, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit. | + +## rapp-playwright + +Source revision `2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb`. [Owner scope](../../../../rapp-playwright/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Managed browser verification pilot](../../../../rapp-playwright/SCOPE.md)
`capability.railiance.browser-verification` | Bounded jobs, cancellation, artifacts, origin checks and restart receipts.
U02, U14 | D3 / A4 / C1 / R0
M2 estimate | Pilot deployed; human/agent authentication and per-caller self-service connectivity pending. | + +## rapp-policy-nexus + +Source revision `d3fee97d32ad47e3a7e3201a9c5b7209b4333fda`. [Owner scope](../../../../rapp-policy-nexus/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Policy publication runtime package](../../../../rapp-policy-nexus/SCOPE.md)
`capability.railiance.policy-publication-package` | Immutable image, non-root/read-only runtime and approved TLS exposure.
U01, U13 | D3 / A2 / C1 / R0
M3 estimate | No policy authoring or DNS/issuer administration. | + +## rapp-postgres + +Source revision `03744030c9258e920f6403a9ce184a26d7b75268`. [Owner scope](../../../../rapp-postgres/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Database isolation and recovery package](../../../../rapp-postgres/SCOPE.md)
`capability.railiance.postgres-isolation-recovery` | CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures.
U03, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Host-loss proof and consumer schemas stay with their owners. | + +## rapp-sbom-nexus + +Source revision `1566bcf69fc0757db5efc67f78b14af10d944c1b`. [Owner scope](../../../../rapp-sbom-nexus/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Private SBOM runtime and dynamic database delivery](../../../../rapp-sbom-nexus/SCOPE.md)
`capability.railiance.sbom-runtime-package` | Immutable deployment, private network policy, dynamic database leases and migration/rollback.
U07, U12, U13 | D3 / A2 / C1 / R0
M3 estimate | Product owns schema and ingestion; database and backup authority remain with platform owners. | + +## rapp-telemetry + +Source revision `17053dbc47f7c22efd67fd90d06d108d154835fa`. [Owner scope](../../../../rapp-telemetry/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Private monitoring package](../../../../rapp-telemetry/SCOPE.md)
`capability.railiance.telemetry-package` | Prometheus, Alertmanager and Grafana package with isolated restore evidence.
U08, U09, U10 | D3 / A2 / C1 / R0
M2 estimate | Private installation only; recurring recovery capture and audited confirmation pending. | + +## rapp-tenant-engine + +Source revision `c160be23577ab4d99ee2cd008deb455b07f0597d`. [Owner scope](../../../../rapp-tenant-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Tenant Engine runtime package](../../../../rapp-tenant-engine/SCOPE.md)
`capability.railiance.tenant-engine-package` | Package declaration, smoke and rollback.
U03, U13 | D3 / A2 / C1 / R0
M2 estimate | No tenant-domain ownership or credential values. | + +## rapp-user-engine + +Source revision `15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c`. [Owner scope](../../../../rapp-user-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [User Engine runtime package](../../../../rapp-user-engine/SCOPE.md)
`capability.railiance.user-engine-package` | Pinned deployment, dedicated CNPG, ExternalSecret references and rollback.
U02, U10, U13 | D3 / A2 / C1 / R0
M3 estimate | Domain, identity, PDP and custody authority are separate. | + +## reef-railiance + +Source revision `ffb9e272ce1489cc37cc6388873558d8ba56c239`. [Owner scope](../../../../reef-railiance/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Substrate topology and bindings](../../../../reef-railiance/SCOPE.md)
`capability.railiance.substrate-bindings` | Grouped home-reef identity, topology and placement declarations.
U13, U14 | D3 / A0 / C1 / R0
M2 estimate | Declarations are not automatic placement or authorization. | + +## rein-aharness + +Source revision `398949a3d34b6c9faae0fa1d0ff0aa039565aa42`. [Owner scope](../../../../rein-aharness/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Scheduled agent intake and harness routing](../../../../rein-aharness/SCOPE.md)
`capability.execution.scheduled-agent-rein` | Activity Core lease claim/heartbeat and Glas profile execution.
U09, U11 | D3 / A2 / C1 / R0
M3 estimate | Legacy paths are time-gated; task success is not privileged authority. | + +## rein-openweights + +Source revision `e1fccb39b738a5381a9de6e1d799f124797798ce`. [Owner scope](../../../../rein-openweights/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Bounded open-weight agent execution](../../../../rein-openweights/SCOPE.md)
`capability.execution.openweight-rein` | Tool loop, path guards, turn/budget limits and verified-commit result.
U11 | D3 / A2 / C1 / R0
M2 estimate | Provider credential acquisition and runtime authority need separate custody controls. | + +## repo-manager + +Source revision `7677b00f69cd6362ac16a1021dc180ec6df4ebfa`. [Owner scope](../../../../repo-manager/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Repository metadata and staged-secret prevention](../../../../repo-manager/SCOPE.md)
`capability.security.repository-secret-prevention` | Repository observation plus pinned staged-blob scanner and hook integration.
U07, U12 | D3 / A2 / C1 / R0
M3 estimate | Local hooks are bypassable; coverage is exact-checkout scoped. | + +## resource-control + +Source revision `3604d468f86ede7d320f4d22dd4aea775306b53f`. [Owner scope](../../../../resource-control/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Capacity and recovery resource planning](../../../../resource-control/SCOPE.md)
`capability.resources.security-capacity` | Provider-neutral inventory, procurement evidence and optimization reports.
U09, U10, U13 | D3 / A2 / C1 / R0
M2 estimate | No payment authority or irreversible procurement; metrics do not prove usable runtime capacity. | + +## reuse-surface + +Source revision `a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1`. [Owner scope](../../../../reuse-surface/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Capability registry and federation](../../../../reuse-surface/docs/RegistryFederation.md)
`capability.registry.register` | Owner Markdown entries, indexes, federation hub and planning queries.
U01, U09, U14 | D3 / A3 / C2 / R3
M3 estimate | Discovery is not readiness; empty and stale entries need evidence-led maintenance. | +| [Capability registry validation](../../../../reuse-surface/docs/RegistryFederation.md)
`capability.registry.validate` | Schema, index consistency and relation checks.
U01, U14 | D4 / A3 / C3 / R3
M3 estimate | Schema validity alone proves neither capability behavior nor hosted freshness. | + +## risk-nexus + +Source revision `b877231d66e1289dc32fda07ed2c61dcb3e970dc`. [Owner scope](../../../../risk-nexus/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Security risk and exception review register](../../../../risk-nexus/SCOPE.md)
`capability.security.risk-register` | Markdown findings and Python review, verification and due-work reports.
U09, U14 | D3 / A2 / C1 / R0
M2 estimate | Judgment remains human or agent; no live EUR risk gate or autonomous response. | + +## role-engine + +Source revision `d231241dbfeeb541b34243f4022883aa6417a1eb`. [Owner scope](../../../../role-engine/README.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Organizational role definitions](../../../../role-engine/README.md)
`capability.organization.role-catalog` | Versioned documentation catalog.
U01, U11 | D3 / A0 / C1 / R0
M1 estimate | Not IAM roles, assignments or runtime authorization. | + +## runbook-tutorials + +Source revision `df97fadf5decfcdb5c3c6ab90211226335ffdf8e`. [Owner scope](../../../../runbook-tutorials/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Guided administrative runbooks](../../../../runbook-tutorials/SCOPE.md)
`capability.infotech.runbook-tutorials` | Pack schema, loader, local UI/CLI, gates, verification and rollback evidence.
U05, U10, U14 | D3 / A2 / C1 / R0
M2 estimate | Owner supplies procedures; UI progress is not runtime approval. | + +## sand-boxer + +Source revision `b06d94f02b037764ff41c73c8ab43f4c8f5d309d`. [Owner scope](../../../../sand-boxer/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Sandbox establishment and lifecycle](../../../../sand-boxer/SCOPE.md)
`capability.execution.sandbox-provision` | Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.
U11, U14 | D5 / A5 / C5 / R0
M2 estimate | Backend-specific guarantees; a created sandbox alone proves no credential isolation. | + +## sbom-nexus + +Source revision `07e998d9abfd4e4fcc74db9e292ed22c6f407522`. [Owner scope](../../../../sbom-nexus/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Dependency provenance and SBOM evidence](../../../../sbom-nexus/README.md)
`capability.infotech.sbom-management` | Controlled archive ingest, immutable snapshots, freshness and license review.
U12, U09 | D3 / A4 / C1 / R0
M3 estimate | SBOM and license evidence do not prove vulnerability exploitability or artifact trust. | + +## secrets-engine + +Source revision `d379a3dfba73c42cd97f4d9cba3a02d705155e4d`. [Owner scope](../../../../secrets-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Cataloged credential lifecycle](../../../../secrets-engine/SCOPE.md)
`capability.security.credential-lifecycle` | CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke.
U04, U05, U07 | D3 / A2 / C1 / R0
M2 estimate | Production protected execution and independently anchored PDP authentication remain incomplete. | + +## security-canon + +Source revision `1664a6def20be2759a1e575024563efd27c9f36f`. [Owner scope](../../../../security-canon/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Security practice and authority vocabulary](../../../../security-canon/SCOPE.md)
`capability.security.practice-canon` | Versioned SEC-DSM and Mode of Authority documents.
U01, U07, U10, U14 | D3 / A0 / C1 / R0
M2 estimate | Normative practice; no runtime control or certification. | + +## state-hub + +Source revision `8ca9201f6a1445c66fe1d1b0ba0c8d044c131647`. [Owner scope](../../../../state-hub/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Cross-repository work tracking](../../../../state-hub/README.md)
`capability.statehub.workstream-coordinate` | File-derived workplans, tasks, dependencies, decisions and coordination views.
U09 | D4 / A4 / C3 / R2
M3 estimate | Read/cache/index of owner work; not runtime approval authority. | +| [Progress and work evidence indexing](../../../../state-hub/README.md)
`capability.statehub.progress-log` | REST progress and task evidence references.
U08, U09 | D4 / A4 / C3 / R3
M3 estimate | Not independent security event custody. | + +## tenant-engine + +Source revision `1dabbcf47d87d27d118dcf3147d9e3588a807e0c`. [Owner scope](../../../../tenant-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Tenant lifecycle and guardrail facts](../../../../tenant-engine/SCOPE.md)
`capability.identity.tenant-facts` | Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store.
U03, U04 | D3 / A4 / C1 / R0
M3 estimate | Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate. | + +## the-custodian + +Source revision `3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e`. [Owner scope](../../../../the-custodian/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Generic agent runtime and repository tooling](../../../../the-custodian/runtime/README.md)
`capability.agents.custodian-runtime-tooling` | Agent runtime modules and repository classification tooling.
U09, U11, U14 | D2 / A2 / C1 / R0
M2 estimate | Only generic tooling is reusable; confidential canon and session memory are excluded. | + +## user-engine + +Source revision `85a419d6c5d0b4434d3ca7f33bde3092f5838f79`. [Owner scope](../../../../user-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [User lifecycle and account journeys](../../../../user-engine/SCOPE.md)
`capability.identity.user-engine` | Accounts, identity links, membership, MFA and recovery portal, advisory catalog.
U02, U03, U10 | D4 / A4 / C2 / R0
M3 estimate | Application readback is advisory; applications must enforce their own authorization. | + +## whitehat-security + +Source revision `5587a8f6ac4b129527db819bc72832051c7fcc3b`. [Owner scope](../../../../whitehat-security/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Authorized adversarial evidence harness](../../../../whitehat-security/SCOPE.md)
`capability.security.adversarial-evidence` | Offline ASM and tenancy calibrations and engagement admission.
U03, U08, U10, U14 | D3 / A2 / C1 / R0
M2 estimate | Live probes require a complete engagement; no blanket target authorization. | + +## zone-engine + +Source revision `b5a6f88a82b125ebc82c0484bec1ea541e4f95d0`. [Owner scope](../../../../zone-engine/SCOPE.md). + +| Capability and stable ID | Reuse surface and use cases | Maturity | Limitation | +| --- | --- | --- | --- | +| [Zone membership reference conformance](../../../../zone-engine/SCOPE.md)
`capability.security.zone-reference` | Offline resolution, exception and lineage checks.
U01, U03, U14 | D3 / A2 / C1 / R0
M2 estimate | No live zone engine, PDP or protected side effects. | + +## Inspected nonproviders + +| Repo | Disposition | +| --- | --- | +| [rapp-secrets-engine](../../../../rapp-secrets-engine/README.md) | Retired compatibility stub. Secrets Engine is a CLI/workflow capability; no independent workload is available. No capability was invented to populate this tombstone. | +| [rapp-forgejo](../../../../rapp-forgejo/README.md) | Placeholder with no family declaration. Current Forgejo deployment responsibility remains in the existing Forge/Apps owners. The package family check reports this missing declaration. | + +The existing reuse-surface `capability.infotech.headless-browser` remains an additional discovery card for selecting browser tooling. The reviewed `rapp-playwright` capability describes the concrete managed package/provider. This review preserves the discovery card and does not treat the two IDs as two independent browser implementations. diff --git a/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json b/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json new file mode 100644 index 00000000..6dd61586 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/commit-scan-diagnosis.json @@ -0,0 +1,10 @@ +{ + "initial_commit": "blocked by generic-api-key on inventory JSON", + "diagnosis": "All flagged fields were SHA-256 hashes of source files; each value independently recomputed and matched before changing serialization. No credential contents were collected in these fields.", + "remediation": "Qualify source digest strings with sha256: rather than placing bare hex immediately after API/credential-like filename keys. No scanner exception or rule change.", + "affected_artifacts": [ + "inventory.json", + "full-inventory.json" + ], + "verification": "Normal pre-commit scanner must pass on the revised evidence." +} diff --git a/docs/assessments/netkingdom-2026-10-14/completion-audit.json b/docs/assessments/netkingdom-2026-10-14/completion-audit.json new file mode 100644 index 00000000..aa029d0f --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/completion-audit.json @@ -0,0 +1,42 @@ +{ + "objective_achieved": false, + "requirements": [ + { + "requirement": "All relevant repository and capability inventory", + "status": "complete", + "evidence": "full-inventory.json: 60 providers, 70 capabilities; two nonproviders recorded separately" + }, + { + "requirement": "Supported use cases", + "status": "complete", + "evidence": "14 use cases in review, owner entries and inventory" + }, + { + "requirement": "SWOT", + "status": "complete", + "evidence": "Architecture review SWOT table" + }, + { + "requirement": "Maturity estimate", + "status": "complete", + "evidence": "Operational M1\u2013M5 estimates and separate D/A/C/R per capability with limits" + }, + { + "requirement": "Ranked improvements for architecture efficiency and framework reuse", + "status": "complete", + "evidence": "12 ranked recommendations with owners, dependencies, effort and acceptance measures" + }, + { + "requirement": "Owner capability establishment and local reuse-surface discovery", + "status": "complete", + "evidence": "70/70 local schema, relations, index parity and native federation checks; normal CLI discovery; 60 published source registries" + }, + { + "requirement": "Hosted reuse-surface establishment", + "status": "incomplete", + "evidence": "32/70 hosted; 38 registrations pending caller access; seven also require private-source admission" + } + ], + "goal_status": "active", + "remaining_action": "Owner-approved hub-write access and private-source read/disclosure admission; apply exact plan and verify all 70 hosted IDs and source parity." +} diff --git a/docs/assessments/netkingdom-2026-10-14/federated-local.yaml b/docs/assessments/netkingdom-2026-10-14/federated-local.yaml new file mode 100644 index 00000000..c56445d5 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/federated-local.yaml @@ -0,0 +1,1502 @@ +version: 1 +updated: '2026-10-14' +domain: infotech +collision_policy: warn +sources: +- repo: access-engine + count: 1 + index: /home/worsch/access-engine/registry/indexes/capabilities.yaml +- repo: activity-core + count: 1 + index: /home/worsch/activity-core/registry/indexes/capabilities.yaml +- repo: agentic-resources + count: 1 + index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml +- repo: approval-engine + count: 1 + index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml +- repo: audit-core + count: 1 + index: /home/worsch/audit-core/registry/indexes/capabilities.yaml +- repo: coordination-engine + count: 1 + index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml +- repo: emergent-security + count: 1 + index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml +- repo: fin-hub + count: 1 + index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml +- repo: gate-house + count: 1 + index: /home/worsch/gate-house/registry/indexes/capabilities.yaml +- repo: glas-harness + count: 1 + index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml +- repo: info-tech-canon + count: 1 + index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml +- repo: informed-decision + count: 1 + index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml +- repo: issue-core + count: 1 + index: /home/worsch/issue-core/registry/indexes/capabilities.yaml +- repo: key-cape + count: 1 + index: /home/worsch/key-cape/registry/indexes/capabilities.yaml +- repo: kings-guard + count: 1 + index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml +- repo: maturity-engine + count: 1 + index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml +- repo: net-kingdom + count: 6 + index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- repo: ops-bridge + count: 1 + index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml +- repo: ops-mason + count: 1 + index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml +- repo: ops-warden + count: 3 + index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml +- repo: policy-nexus + count: 1 + index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml +- repo: rail-kubernetes + count: 1 + index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml +- repo: railiance-apps + count: 1 + index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml +- repo: railiance-bootstrap + count: 1 + index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml +- repo: railiance-cluster + count: 1 + index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml +- repo: railiance-enablement + count: 1 + index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml +- repo: railiance-fabric + count: 1 + index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml +- repo: railiance-forge + count: 2 + index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml +- repo: railiance-infra + count: 1 + index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml +- repo: railiance-master + count: 1 + index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml +- repo: railiance-platform + count: 1 + index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml +- repo: railiance-telemetry + count: 1 + index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-openbao + count: 1 + index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml +- repo: rapp-playwright + count: 1 + index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml +- repo: rapp-policy-nexus + count: 1 + index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml +- repo: rapp-postgres + count: 1 + index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml +- repo: rapp-telemetry + count: 1 + index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-tenant-engine + count: 1 + index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml +- repo: rapp-user-engine + count: 1 + index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml +- repo: reef-railiance + count: 1 + index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml +- repo: rein-aharness + count: 1 + index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml +- repo: rein-openweights + count: 1 + index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml +- repo: repo-manager + count: 1 + index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml +- repo: resource-control + count: 1 + index: /home/worsch/resource-control/registry/indexes/capabilities.yaml +- repo: reuse-surface + count: 3 + index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml +- repo: risk-nexus + count: 1 + index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml +- repo: role-engine + count: 1 + index: /home/worsch/role-engine/registry/indexes/capabilities.yaml +- repo: runbook-tutorials + count: 1 + index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml +- repo: sand-boxer + count: 1 + index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml +- repo: sbom-nexus + count: 1 + index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml +- repo: secrets-engine + count: 1 + index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml +- repo: security-canon + count: 1 + index: /home/worsch/security-canon/registry/indexes/capabilities.yaml +- repo: state-hub + count: 2 + index: /home/worsch/state-hub/registry/indexes/capabilities.yaml +- repo: tenant-engine + count: 1 + index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml +- repo: the-custodian + count: 1 + index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml +- repo: user-engine + count: 1 + index: /home/worsch/user-engine/registry/indexes/capabilities.yaml +- repo: whitehat-security + count: 1 + index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml +- repo: zone-engine + count: 1 + index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml +- repo: rail-knative + count: 1 + index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml +- repo: rapp-sbom-nexus + count: 1 + index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml +capabilities: +- id: capability.activity.event-coordinate + name: Durable automation and bounded operations + summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime + sinks. + domain: helix_forge + status: draft + owner: activity-core + tags: + - activity + - coordination + - automation + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.activity.event-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: activity-core + source_index: /home/worsch/activity-core/registry/indexes/capabilities.yaml +- id: capability.agents.custodian-runtime-tooling + name: Generic agent runtime and repository tooling + summary: Agent runtime modules and repository classification tooling. + domain: custodian + status: draft + owner: the-custodian + tags: + - agents + - runtime + - classification + - security + - netkingdom + - framework-reuse + vector: D2 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.custodian-runtime-tooling.md + consumption_modes: + - CLI + - source + source_repo: the-custodian + source_index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml +- id: capability.agents.performance-learning + name: Agent performance learning + summary: Capture sessions, curate patterns, distribute lessons and measure outcomes. + domain: infotech + status: draft + owner: agentic-resources + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.performance-learning.md + consumption_modes: + - CLI + - source + source_repo: agentic-resources + source_index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml +- id: capability.audit.event-retain + name: Independent audit custody + summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation. + domain: infotech + status: draft + owner: audit-core + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C3 / R2 + path: registry/capabilities/capability.audit.event-retain.md + consumption_modes: + - HTTP API + - source + source_repo: audit-core + source_index: /home/worsch/audit-core/registry/indexes/capabilities.yaml +- id: capability.authorization.policy-evaluate + name: Policy evaluation and decision evidence + summary: Check, batch, list-allowed, explain, binding, lifetime and decision records. + domain: helix_forge + status: draft + owner: access-engine + tags: + - authorization + - policy + - flex-auth + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.authorization.policy-evaluate.md + consumption_modes: + - HTTP API + - source + source_repo: access-engine + source_index: /home/worsch/access-engine/registry/indexes/capabilities.yaml +- id: capability.coordination.cross-owner-work + name: Cross-owner coordination lifecycle + summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime. + domain: infotech + status: draft + owner: coordination-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.coordination.cross-owner-work.md + consumption_modes: + - CLI + - source + source_repo: coordination-engine + source_index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml +- id: capability.execution.openweight-rein + name: Bounded open-weight agent execution + summary: Tool loop, path guards, turn/budget limits and verified-commit result. + domain: infotech + status: draft + owner: rein-openweights + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.openweight-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-openweights + source_index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml +- id: capability.execution.profile-harness + name: Profile-bound agent execution lifecycle + summary: Typed execution requests, profile/rein resolution, sandbox and cleanup + orchestration. + domain: infotech + status: draft + owner: glas-harness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.execution.profile-harness.md + consumption_modes: + - library + - CLI + source_repo: glas-harness + source_index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml +- id: capability.execution.sandbox-provision + name: Sandbox establishment and lifecycle + summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry. + domain: infotech + status: draft + owner: sand-boxer + tags: + - sandbox + - isolation + - provision + - e2e + - agentic + - execution + - profile + - security + - netkingdom + - framework-reuse + vector: D5 / A5 / C5 / R0 + path: registry/capabilities/execution.sandbox-provision.md + consumption_modes: + - containerized service + - CLI + source_repo: sand-boxer + source_index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml +- id: capability.execution.scheduled-agent-rein + name: Scheduled agent intake and harness routing + summary: Activity Core lease claim/heartbeat and Glas profile execution. + domain: infotech + status: draft + owner: rein-aharness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.scheduled-agent-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-aharness + source_index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml +- id: capability.finance.security-budget-evidence + name: Budget and cost evidence for security operations + summary: Budget, commitment, spend attribution and planning-evidence consumption. + domain: infotech + status: draft + owner: fin-hub + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.finance.security-budget-evidence.md + consumption_modes: + - HTTP API + - source + source_repo: fin-hub + source_index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml +- id: capability.iam.key-cape + name: OIDC identity and assurance + summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI. + domain: infotech + status: draft + owner: key-cape + tags: + - iam + - oidc + - netkingdom + - security + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.iam.key-cape.md + consumption_modes: + - HTTP API + - source + source_repo: key-cape + source_index: /home/worsch/key-cape/registry/indexes/capabilities.yaml +- id: capability.identity.tenant-facts + name: Tenant lifecycle and guardrail facts + summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store. + domain: infotech + status: draft + owner: tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.identity.tenant-facts.md + consumption_modes: + - HTTP API + - source + source_repo: tenant-engine + source_index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml +- id: capability.identity.user-engine + name: User lifecycle and account journeys + summary: Accounts, identity links, membership, MFA and recovery portal, advisory + catalog. + domain: communication + status: draft + owner: user-engine + tags: + - identity + - user-management + - multi-tenant + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R0 + path: registry/capabilities/capability.identity.user-engine.md + consumption_modes: + - HTTP API + - source + source_repo: user-engine + source_index: /home/worsch/user-engine/registry/indexes/capabilities.yaml +- id: capability.infotech.canon-service + name: Shared semantic contracts and validation + summary: Markdown canon with library, CLI and read-only API. + domain: infotech + status: draft + owner: info-tech-canon + tags: + - canon + - infospace + - service + - security + - netkingdom + - framework-reuse + vector: D2 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.canon-service.md + consumption_modes: + - HTTP API + - source + source_repo: info-tech-canon + source_index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml +- id: capability.infotech.headless-browser + name: Headless Browser Automation + summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright + 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; + managed Railiance admission is pending. Download the Python 3.10+ standalone client + from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py + and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then + `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` + with a fresh output directory. This endpoint was verified locally on 2026-10-13 + and is ephemeral; it installs no browser for the caller. If unreachable, follow + the local container setup in the capability card or adapt its A2 source examples; + this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.' + vector: D3 / A5 / C2 / R2 + domain: infotech + status: reviewed + owner: reuse-surface + path: registry/capabilities/capability.infotech.headless-browser.md + tags: + - headless + - browser + - automation + - playwright + - chromium + - testing + - screenshots + - extraction + - firefox + - webkit + - selenium + - puppeteer + consumption_modes: + - informational + - source adaptation + - JavaScript library + - Python library + - cli + - service API + - container + source_repo: reuse-surface + source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.infotech.issue-tracking + name: External issue tracker connector + summary: CLI and Python adapters for external issue systems. + domain: infotech + status: draft + owner: issue-core + tags: + - issue-tracking + - connector + - work-record + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.infotech.issue-tracking.md + consumption_modes: + - CLI + - source + source_repo: issue-core + source_index: /home/worsch/issue-core/registry/indexes/capabilities.yaml +- id: capability.infotech.runbook-tutorials + name: Guided administrative runbooks + summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence. + domain: infotech + status: draft + owner: runbook-tutorials + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.infotech.runbook-tutorials.md + consumption_modes: + - CLI + - source + source_repo: runbook-tutorials + source_index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml +- id: capability.infotech.sbom-management + name: Dependency provenance and SBOM evidence + summary: Controlled archive ingest, immutable snapshots, freshness and license review. + domain: infotech + status: draft + owner: sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.sbom-management.md + consumption_modes: + - HTTP API + - source + source_repo: sbom-nexus + source_index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.observability.security-signals + name: Security-relevant telemetry contracts and adapters + summary: Signal contract, platform adapters, report exporter and absence/alert rules. + domain: infotech + status: draft + owner: railiance-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.observability.security-signals.md + consumption_modes: + - CLI + - source + source_repo: railiance-telemetry + source_index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml +- id: capability.ops.tunnel-bridge + name: SSH tunnel lifecycle + summary: Named tunnels, reconnect, health and TTL-aware cert_command. + domain: infotech + status: draft + owner: ops-bridge + tags: + - ssh + - tunnel + - ops + - connectivity + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.ops.tunnel-bridge.md + consumption_modes: + - CLI + - source + source_repo: ops-bridge + source_index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml +- id: capability.organization.role-catalog + name: Organizational role definitions + summary: Versioned documentation catalog. + domain: infotech + status: draft + owner: role-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.organization.role-catalog.md + consumption_modes: + - informational + source_repo: role-engine + source_index: /home/worsch/role-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.bootstrap-sequencing + name: Bootstrap sequencing contracts + summary: Bare-VM to estate sequence and handoff contract. + domain: infotech + status: draft + owner: railiance-bootstrap + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.bootstrap-sequencing.md + consumption_modes: + - informational + source_repo: railiance-bootstrap + source_index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml +- id: capability.railiance.browser-verification + name: Managed browser verification pilot + summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts. + domain: infotech + status: draft + owner: rapp-playwright + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.railiance.browser-verification.md + consumption_modes: + - HTTP API + - source + source_repo: rapp-playwright + source_index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml +- id: capability.railiance.ci-enablement + name: Developer delivery and CI templates + summary: Reusable CI workflows, build and deployment patterns. + domain: financials + status: draft + owner: railiance-enablement + tags: + - railiance + - ci-cd + - developer-enablement + - forgejo + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.ci-enablement.md + consumption_modes: + - CLI + - source + source_repo: railiance-enablement + source_index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml +- id: capability.railiance.cluster-bootstrap + name: Kubernetes runtime and cluster controls + summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks. + domain: financials + status: draft + owner: railiance-cluster + tags: + - railiance + - kubernetes + - iac + - bootstrap + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.cluster-bootstrap.md + consumption_modes: + - CLI + - source + source_repo: railiance-cluster + source_index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml +- id: capability.railiance.fabric-graph + name: Infrastructure ownership and dependency graph + summary: Schemas, validation, graph queries and State Hub exports. + domain: financials + status: draft + owner: railiance-fabric + tags: + - railiance + - graph + - ownership + - discovery + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.fabric-graph.md + consumption_modes: + - CLI + - source + source_repo: railiance-fabric + source_index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml +- id: capability.railiance.forge-infrastructure + name: Source forge, registries and runner substrate + summary: Forgejo operation, package registries and runner lifecycle. + domain: financials + status: draft + owner: railiance-forge + tags: + - railiance + - forgejo + - forge + - ci-runner + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.forge-infrastructure.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml +- id: capability.railiance.infra-provisioning + name: Host convergence and security baseline + summary: Ansible inventory, firewall, SSH bootstrap and baseline verification. + domain: financials + status: draft + owner: railiance-infra + tags: + - railiance + - terraform + - ansible + - infrastructure + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.infra-provisioning.md + consumption_modes: + - CLI + - source + source_repo: railiance-infra + source_index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml +- id: capability.railiance.knative-rail + name: Knative workload lifecycle + summary: Derived rail for activation, revisions, traffic, scaling and rollback. + domain: infotech + status: draft + owner: rail-knative + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.knative-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-knative + source_index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml +- id: capability.railiance.kubernetes-rail + name: Generic Kubernetes workload lifecycle + summary: Workload declaration, rollout, observe, promote and rollback surfaces. + domain: infotech + status: draft + owner: rail-kubernetes + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.kubernetes-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-kubernetes + source_index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml +- id: capability.railiance.openbao-package + name: Managed OpenBao deployment package + summary: Helm values, package deploy/status/smoke/rollback and custody boundary. + domain: infotech + status: draft + owner: rapp-openbao + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.openbao-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-openbao + source_index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml +- id: capability.railiance.platform-services + name: Secret custody and platform data services + summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup + contracts. + domain: financials + status: draft + owner: railiance-platform + tags: + - railiance + - platform + - secrets + - postgres + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.platform-services.md + consumption_modes: + - CLI + - source + source_repo: railiance-platform + source_index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml +- id: capability.railiance.policy-publication-package + name: Policy publication runtime package + summary: Immutable image, non-root/read-only runtime and approved TLS exposure. + domain: infotech + status: draft + owner: rapp-policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.policy-publication-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-policy-nexus + source_index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.postgres-isolation-recovery + name: Database isolation and recovery package + summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore + procedures. + domain: infotech + status: draft + owner: rapp-postgres + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md + consumption_modes: + - CLI + - source + source_repo: rapp-postgres + source_index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml +- id: capability.railiance.sbom-runtime-package + name: Private SBOM runtime and dynamic database delivery + summary: Immutable deployment, private network policy, dynamic database leases and + migration/rollback. + domain: infotech + status: draft + owner: rapp-sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.sbom-runtime-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-sbom-nexus + source_index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.security-consumption-contracts + name: Platform security consumption architecture + summary: Rail/rapp/reef boundaries, exposure and security consumption contracts. + domain: infotech + status: draft + owner: railiance-master + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.security-consumption-contracts.md + consumption_modes: + - informational + source_repo: railiance-master + source_index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml +- id: capability.railiance.substrate-bindings + name: Substrate topology and bindings + summary: Grouped home-reef identity, topology and placement declarations. + domain: infotech + status: draft + owner: reef-railiance + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.substrate-bindings.md + consumption_modes: + - informational + source_repo: reef-railiance + source_index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml +- id: capability.railiance.telemetry-package + name: Private monitoring package + summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence. + domain: infotech + status: draft + owner: rapp-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.telemetry-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-telemetry + source_index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml +- id: capability.railiance.tenant-engine-package + name: Tenant Engine runtime package + summary: Package declaration, smoke and rollback. + domain: infotech + status: draft + owner: rapp-tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.tenant-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-tenant-engine + source_index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.user-engine-package + name: User Engine runtime package + summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback. + domain: infotech + status: draft + owner: rapp-user-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.user-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-user-engine + source_index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.workload-deployment-tooling + name: Workload release configuration and guards + summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback. + domain: financials + status: draft + owner: railiance-apps + tags: + - railiance + - kubernetes + - helm + - deployment + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.railiance.workload-deployment-tooling.md + consumption_modes: + - CLI + - source + source_repo: railiance-apps + source_index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml +- id: capability.registry.register + name: Capability registry and federation + summary: Owner Markdown entries, indexes, federation hub and planning queries. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - governance + - meta + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C2 / R3 + path: registry/capabilities/capability.registry.register.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.registry.validate + name: Capability registry validation + summary: Schema, index consistency and relation checks. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - validation + - cli + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R3 + path: registry/capabilities/capability.registry.validate.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.resources.security-capacity + name: Capacity and recovery resource planning + summary: Provider-neutral inventory, procurement evidence and optimization reports. + domain: infotech + status: draft + owner: resource-control + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.resources.security-capacity.md + consumption_modes: + - CLI + - source + source_repo: resource-control + source_index: /home/worsch/resource-control/registry/indexes/capabilities.yaml +- id: capability.security.access-routing + name: Credential routing and contained access + summary: warden route and access catalog; exact lane conduit and secret-exec routing. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.security.access-routing.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.adversarial-evidence + name: Authorized adversarial evidence harness + summary: Offline ASM and tenancy calibrations and engagement admission. + domain: infotech + status: draft + owner: whitehat-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.adversarial-evidence.md + consumption_modes: + - CLI + - source + source_repo: whitehat-security + source_index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml +- id: capability.security.agent-knowledge + name: Verified security orientation for agents + summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed + exports. + domain: infotech + status: draft + owner: emergent-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.agent-knowledge.md + consumption_modes: + - CLI + - source + source_repo: emergent-security + source_index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml +- id: capability.security.approval-lifecycle + name: Bound approval lifecycle + summary: Authenticated issue, claim, revoke, supersede and atomic consume API with + outbox. + domain: infotech + status: draft + owner: approval-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.approval-lifecycle.md + consumption_modes: + - HTTP API + - source + source_repo: approval-engine + source_index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml +- id: capability.security.bootstrap-recovery + name: Guarded bootstrap and recovery preparation + summary: Local identity, bootstrap console, encrypted custody handoff and caller + tools. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.bootstrap-recovery.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-contracts + name: Security case types and instance validation + summary: Versioned types, cases and schema validation. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-contracts.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-follow-through + name: Security case operational follow-through + summary: KnownSecurityCase route, plan and operational receipts. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-follow-through.md + consumption_modes: + - CLI + - source + source_repo: ops-warden + source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.credential-lifecycle + name: Cataloged credential lifecycle + summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, + delivery and revoke. + domain: infotech + status: draft + owner: secrets-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.credential-lifecycle.md + consumption_modes: + - CLI + - source + source_repo: secrets-engine + source_index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml +- id: capability.security.doctrine-review + name: Security doctrine and architecture review + summary: Layer rules, authority context, ASM criteria and interpretations. + domain: infotech + status: draft + owner: gate-house + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.doctrine-review.md + consumption_modes: + - informational + source_repo: gate-house + source_index: /home/worsch/gate-house/registry/indexes/capabilities.yaml +- id: capability.security.emission-profile + name: Security emission cadence validation + summary: Security profile over generic emission contracts and validator. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.emission-profile.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.forge-secret-prevention + name: Independent introduced-history secret prevention + summary: Pinned receive adapter, lifecycle template and fail-closed scan. + domain: infotech + status: draft + owner: railiance-forge + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.forge-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml +- id: capability.security.human-decision-workspace + name: Human security decision presentation and disposition + summary: Headless lifecycle and browser workspace with exact native approval references. + domain: infotech + status: draft + owner: informed-decision + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.human-decision-workspace.md + consumption_modes: + - HTTP API + - source + source_repo: informed-decision + source_index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml +- id: capability.security.iam-tooling-suite + name: NetKingdom security architecture and conformance tooling + summary: Versioned IAM, layer, tenancy and credential contracts plus validators. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - iam + - kubernetes + - conformance + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.security.iam-tooling-suite.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.maturity-claims + name: Evidence-based maturity claims and gap register + summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and + stance inventory. + domain: infotech + status: draft + owner: maturity-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.maturity-claims.md + consumption_modes: + - CLI + - source + source_repo: maturity-engine + source_index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml +- id: capability.security.policy-publication + name: Policy publication with source provenance + summary: Generated immutable publication, source currency and stable policy URLs. + domain: infotech + status: draft + owner: policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.policy-publication.md + consumption_modes: + - CLI + - source + source_repo: policy-nexus + source_index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml +- id: capability.security.posture-assessment + name: Security posture assessment and response proposals + summary: Normalized observation evaluator, cadence checks and secret-use snapshot + adapter. + domain: infotech + status: draft + owner: kings-guard + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-assessment.md + consumption_modes: + - CLI + - source + source_repo: kings-guard + source_index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml +- id: capability.security.posture-feedback + name: Deterministic posture feedback + summary: CLI evaluates evidence age and posture into owner-routed findings. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-feedback.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.practice-canon + name: Security practice and authority vocabulary + summary: Versioned SEC-DSM and Mode of Authority documents. + domain: infotech + status: draft + owner: security-canon + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.practice-canon.md + consumption_modes: + - informational + source_repo: security-canon + source_index: /home/worsch/security-canon/registry/indexes/capabilities.yaml +- id: capability.security.repository-secret-prevention + name: Repository metadata and staged-secret prevention + summary: Repository observation plus pinned staged-blob scanner and hook integration. + domain: infotech + status: draft + owner: repo-manager + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.repository-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: repo-manager + source_index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml +- id: capability.security.risk-register + name: Security risk and exception review register + summary: Markdown findings and Python review, verification and due-work reports. + domain: infotech + status: draft + owner: risk-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.risk-register.md + consumption_modes: + - CLI + - source + source_repo: risk-nexus + source_index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml +- id: capability.security.scenario-compose + name: Deterministic security scenario composition + summary: CLI selects pinned providers and orders trust transitions. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.scenario-compose.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.ssh-certificate-issuance + name: Decision-bound SSH certificates + summary: warden sign with local and OpenBao backends and adm/agt/atm actors. + domain: helix_forge + status: draft + owner: ops-warden + tags: + - ssh + - certificate + - ca + - ops-warden + - openbao + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R2 + path: registry/capabilities/capability.security.ssh-certificate-issuance.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.structure-construction + name: Reviewed security structure construction + summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply. + domain: infotech + status: draft + owner: ops-mason + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.structure-construction.md + consumption_modes: + - CLI + - source + source_repo: ops-mason + source_index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml +- id: capability.security.zone-reference + name: Zone membership reference conformance + summary: Offline resolution, exception and lineage checks. + domain: infotech + status: draft + owner: zone-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.zone-reference.md + consumption_modes: + - CLI + - source + source_repo: zone-engine + source_index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml +- id: capability.statehub.progress-log + name: Progress and work evidence indexing + summary: REST progress and task evidence references. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - progress + - coordination + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R3 + path: registry/capabilities/capability.statehub.progress-log.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: /home/worsch/state-hub/registry/indexes/capabilities.yaml +- id: capability.statehub.workstream-coordinate + name: Cross-repository work tracking + summary: File-derived workplans, tasks, dependencies, decisions and coordination + views. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - coordination + - workplans + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R2 + path: registry/capabilities/capability.statehub.workstream-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: /home/worsch/state-hub/registry/indexes/capabilities.yaml diff --git a/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml b/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml new file mode 100644 index 00000000..e5921301 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/federated-staged.yaml @@ -0,0 +1,1461 @@ +version: 1 +updated: '2026-10-14' +domain: infotech +collision_policy: warn +sources: +- repo: access-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml +- repo: activity-core + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml +- repo: agentic-resources + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml +- repo: approval-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml +- repo: audit-core + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml +- repo: coordination-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml +- repo: emergent-security + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml +- repo: fin-hub + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml +- repo: gate-house + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml +- repo: glas-harness + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml +- repo: info-tech-canon + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml +- repo: informed-decision + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml +- repo: issue-core + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml +- repo: key-cape + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml +- repo: kings-guard + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml +- repo: maturity-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml +- repo: net-kingdom + count: 6 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- repo: ops-bridge + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml +- repo: ops-mason + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml +- repo: ops-warden + count: 3 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml +- repo: policy-nexus + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml +- repo: rail-kubernetes + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml +- repo: railiance-apps + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml +- repo: railiance-bootstrap + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml +- repo: railiance-cluster + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml +- repo: railiance-enablement + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml +- repo: railiance-fabric + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml +- repo: railiance-forge + count: 2 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml +- repo: railiance-infra + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml +- repo: railiance-master + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml +- repo: railiance-platform + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml +- repo: railiance-telemetry + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-openbao + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml +- repo: rapp-playwright + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml +- repo: rapp-policy-nexus + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml +- repo: rapp-postgres + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml +- repo: rapp-telemetry + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-tenant-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml +- repo: rapp-user-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml +- repo: reef-railiance + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml +- repo: rein-aharness + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml +- repo: rein-openweights + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml +- repo: repo-manager + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml +- repo: resource-control + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml +- repo: reuse-surface + count: 3 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml +- repo: risk-nexus + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml +- repo: role-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml +- repo: runbook-tutorials + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml +- repo: sand-boxer + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml +- repo: sbom-nexus + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml +- repo: secrets-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml +- repo: security-canon + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml +- repo: state-hub + count: 2 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml +- repo: tenant-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml +- repo: the-custodian + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml +- repo: user-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml +- repo: whitehat-security + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml +- repo: zone-engine + count: 1 + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml +capabilities: +- id: capability.activity.event-coordinate + name: Durable automation and bounded operations + summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime + sinks. + domain: helix_forge + status: draft + owner: activity-core + tags: + - activity + - coordination + - automation + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.activity.event-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: activity-core + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml +- id: capability.agents.custodian-runtime-tooling + name: Generic agent runtime and repository tooling + summary: Agent runtime modules and repository classification tooling. + domain: custodian + status: draft + owner: the-custodian + tags: + - agents + - runtime + - classification + - security + - netkingdom + - framework-reuse + vector: D2 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.custodian-runtime-tooling.md + consumption_modes: + - CLI + - source + source_repo: the-custodian + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml +- id: capability.agents.performance-learning + name: Agent performance learning + summary: Capture sessions, curate patterns, distribute lessons and measure outcomes. + domain: infotech + status: draft + owner: agentic-resources + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.performance-learning.md + consumption_modes: + - CLI + - source + source_repo: agentic-resources + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml +- id: capability.audit.event-retain + name: Independent audit custody + summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation. + domain: infotech + status: draft + owner: audit-core + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C3 / R2 + path: registry/capabilities/capability.audit.event-retain.md + consumption_modes: + - HTTP API + - source + source_repo: audit-core + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml +- id: capability.authorization.policy-evaluate + name: Policy evaluation and decision evidence + summary: Check, batch, list-allowed, explain, binding, lifetime and decision records. + domain: helix_forge + status: draft + owner: access-engine + tags: + - authorization + - policy + - flex-auth + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.authorization.policy-evaluate.md + consumption_modes: + - HTTP API + - source + source_repo: access-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml +- id: capability.coordination.cross-owner-work + name: Cross-owner coordination lifecycle + summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime. + domain: infotech + status: draft + owner: coordination-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.coordination.cross-owner-work.md + consumption_modes: + - CLI + - source + source_repo: coordination-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml +- id: capability.execution.openweight-rein + name: Bounded open-weight agent execution + summary: Tool loop, path guards, turn/budget limits and verified-commit result. + domain: infotech + status: draft + owner: rein-openweights + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.openweight-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-openweights + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml +- id: capability.execution.profile-harness + name: Profile-bound agent execution lifecycle + summary: Typed execution requests, profile/rein resolution, sandbox and cleanup + orchestration. + domain: infotech + status: draft + owner: glas-harness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.execution.profile-harness.md + consumption_modes: + - library + - CLI + source_repo: glas-harness + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml +- id: capability.execution.sandbox-provision + name: Sandbox establishment and lifecycle + summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry. + domain: infotech + status: draft + owner: sand-boxer + tags: + - sandbox + - isolation + - provision + - e2e + - agentic + - execution + - profile + - security + - netkingdom + - framework-reuse + vector: D5 / A5 / C5 / R0 + path: registry/capabilities/execution.sandbox-provision.md + consumption_modes: + - containerized service + - CLI + source_repo: sand-boxer + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml +- id: capability.execution.scheduled-agent-rein + name: Scheduled agent intake and harness routing + summary: Activity Core lease claim/heartbeat and Glas profile execution. + domain: infotech + status: draft + owner: rein-aharness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.scheduled-agent-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-aharness + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml +- id: capability.finance.security-budget-evidence + name: Budget and cost evidence for security operations + summary: Budget, commitment, spend attribution and planning-evidence consumption. + domain: infotech + status: draft + owner: fin-hub + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.finance.security-budget-evidence.md + consumption_modes: + - HTTP API + - source + source_repo: fin-hub + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml +- id: capability.iam.key-cape + name: OIDC identity and assurance + summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI. + domain: infotech + status: draft + owner: key-cape + tags: + - iam + - oidc + - netkingdom + - security + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.iam.key-cape.md + consumption_modes: + - HTTP API + - source + source_repo: key-cape + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml +- id: capability.identity.tenant-facts + name: Tenant lifecycle and guardrail facts + summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store. + domain: infotech + status: draft + owner: tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.identity.tenant-facts.md + consumption_modes: + - HTTP API + - source + source_repo: tenant-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml +- id: capability.identity.user-engine + name: User lifecycle and account journeys + summary: Accounts, identity links, membership, MFA and recovery portal, advisory + catalog. + domain: communication + status: draft + owner: user-engine + tags: + - identity + - user-management + - multi-tenant + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R0 + path: registry/capabilities/capability.identity.user-engine.md + consumption_modes: + - HTTP API + - source + source_repo: user-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml +- id: capability.infotech.canon-service + name: Shared semantic contracts and validation + summary: Markdown canon with library, CLI and read-only API. + domain: infotech + status: draft + owner: info-tech-canon + tags: + - canon + - infospace + - service + - security + - netkingdom + - framework-reuse + vector: D2 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.canon-service.md + consumption_modes: + - HTTP API + - source + source_repo: info-tech-canon + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml +- id: capability.infotech.headless-browser + name: Headless Browser Automation + summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright + 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; + managed Railiance admission is pending. Download the Python 3.10+ standalone client + from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py + and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then + `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` + with a fresh output directory. This endpoint was verified locally on 2026-10-13 + and is ephemeral; it installs no browser for the caller. If unreachable, follow + the local container setup in the capability card or adapt its A2 source examples; + this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.' + vector: D3 / A5 / C2 / R2 + domain: infotech + status: reviewed + owner: reuse-surface + path: registry/capabilities/capability.infotech.headless-browser.md + tags: + - headless + - browser + - automation + - playwright + - chromium + - testing + - screenshots + - extraction + - firefox + - webkit + - selenium + - puppeteer + consumption_modes: + - informational + - source adaptation + - JavaScript library + - Python library + - cli + - service API + - container + source_repo: reuse-surface + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.infotech.issue-tracking + name: External issue tracker connector + summary: CLI and Python adapters for external issue systems. + domain: infotech + status: draft + owner: issue-core + tags: + - issue-tracking + - connector + - work-record + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.infotech.issue-tracking.md + consumption_modes: + - CLI + - source + source_repo: issue-core + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml +- id: capability.infotech.runbook-tutorials + name: Guided administrative runbooks + summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence. + domain: infotech + status: draft + owner: runbook-tutorials + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.infotech.runbook-tutorials.md + consumption_modes: + - CLI + - source + source_repo: runbook-tutorials + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml +- id: capability.infotech.sbom-management + name: Dependency provenance and SBOM evidence + summary: Controlled archive ingest, immutable snapshots, freshness and license review. + domain: infotech + status: draft + owner: sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.sbom-management.md + consumption_modes: + - HTTP API + - source + source_repo: sbom-nexus + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.observability.security-signals + name: Security-relevant telemetry contracts and adapters + summary: Signal contract, platform adapters, report exporter and absence/alert rules. + domain: infotech + status: draft + owner: railiance-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.observability.security-signals.md + consumption_modes: + - CLI + - source + source_repo: railiance-telemetry + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml +- id: capability.ops.tunnel-bridge + name: SSH tunnel lifecycle + summary: Named tunnels, reconnect, health and TTL-aware cert_command. + domain: infotech + status: draft + owner: ops-bridge + tags: + - ssh + - tunnel + - ops + - connectivity + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.ops.tunnel-bridge.md + consumption_modes: + - CLI + - source + source_repo: ops-bridge + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml +- id: capability.organization.role-catalog + name: Organizational role definitions + summary: Versioned documentation catalog. + domain: infotech + status: draft + owner: role-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.organization.role-catalog.md + consumption_modes: + - informational + source_repo: role-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.bootstrap-sequencing + name: Bootstrap sequencing contracts + summary: Bare-VM to estate sequence and handoff contract. + domain: infotech + status: draft + owner: railiance-bootstrap + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.bootstrap-sequencing.md + consumption_modes: + - informational + source_repo: railiance-bootstrap + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml +- id: capability.railiance.browser-verification + name: Managed browser verification pilot + summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts. + domain: infotech + status: draft + owner: rapp-playwright + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.railiance.browser-verification.md + consumption_modes: + - HTTP API + - source + source_repo: rapp-playwright + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml +- id: capability.railiance.ci-enablement + name: Developer delivery and CI templates + summary: Reusable CI workflows, build and deployment patterns. + domain: financials + status: draft + owner: railiance-enablement + tags: + - railiance + - ci-cd + - developer-enablement + - forgejo + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.ci-enablement.md + consumption_modes: + - CLI + - source + source_repo: railiance-enablement + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml +- id: capability.railiance.cluster-bootstrap + name: Kubernetes runtime and cluster controls + summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks. + domain: financials + status: draft + owner: railiance-cluster + tags: + - railiance + - kubernetes + - iac + - bootstrap + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.cluster-bootstrap.md + consumption_modes: + - CLI + - source + source_repo: railiance-cluster + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml +- id: capability.railiance.fabric-graph + name: Infrastructure ownership and dependency graph + summary: Schemas, validation, graph queries and State Hub exports. + domain: financials + status: draft + owner: railiance-fabric + tags: + - railiance + - graph + - ownership + - discovery + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.fabric-graph.md + consumption_modes: + - CLI + - source + source_repo: railiance-fabric + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml +- id: capability.railiance.forge-infrastructure + name: Source forge, registries and runner substrate + summary: Forgejo operation, package registries and runner lifecycle. + domain: financials + status: draft + owner: railiance-forge + tags: + - railiance + - forgejo + - forge + - ci-runner + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.forge-infrastructure.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml +- id: capability.railiance.infra-provisioning + name: Host convergence and security baseline + summary: Ansible inventory, firewall, SSH bootstrap and baseline verification. + domain: financials + status: draft + owner: railiance-infra + tags: + - railiance + - terraform + - ansible + - infrastructure + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.infra-provisioning.md + consumption_modes: + - CLI + - source + source_repo: railiance-infra + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml +- id: capability.railiance.kubernetes-rail + name: Generic Kubernetes workload lifecycle + summary: Workload declaration, rollout, observe, promote and rollback surfaces. + domain: infotech + status: draft + owner: rail-kubernetes + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.kubernetes-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-kubernetes + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml +- id: capability.railiance.openbao-package + name: Managed OpenBao deployment package + summary: Helm values, package deploy/status/smoke/rollback and custody boundary. + domain: infotech + status: draft + owner: rapp-openbao + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.openbao-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-openbao + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml +- id: capability.railiance.platform-services + name: Secret custody and platform data services + summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup + contracts. + domain: financials + status: draft + owner: railiance-platform + tags: + - railiance + - platform + - secrets + - postgres + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.platform-services.md + consumption_modes: + - CLI + - source + source_repo: railiance-platform + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml +- id: capability.railiance.policy-publication-package + name: Policy publication runtime package + summary: Immutable image, non-root/read-only runtime and approved TLS exposure. + domain: infotech + status: draft + owner: rapp-policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.policy-publication-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-policy-nexus + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.postgres-isolation-recovery + name: Database isolation and recovery package + summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore + procedures. + domain: infotech + status: draft + owner: rapp-postgres + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md + consumption_modes: + - CLI + - source + source_repo: rapp-postgres + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml +- id: capability.railiance.security-consumption-contracts + name: Platform security consumption architecture + summary: Rail/rapp/reef boundaries, exposure and security consumption contracts. + domain: infotech + status: draft + owner: railiance-master + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.security-consumption-contracts.md + consumption_modes: + - informational + source_repo: railiance-master + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml +- id: capability.railiance.substrate-bindings + name: Substrate topology and bindings + summary: Grouped home-reef identity, topology and placement declarations. + domain: infotech + status: draft + owner: reef-railiance + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.substrate-bindings.md + consumption_modes: + - informational + source_repo: reef-railiance + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml +- id: capability.railiance.telemetry-package + name: Private monitoring package + summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence. + domain: infotech + status: draft + owner: rapp-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.telemetry-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-telemetry + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml +- id: capability.railiance.tenant-engine-package + name: Tenant Engine runtime package + summary: Package declaration, smoke and rollback. + domain: infotech + status: draft + owner: rapp-tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.tenant-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-tenant-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.user-engine-package + name: User Engine runtime package + summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback. + domain: infotech + status: draft + owner: rapp-user-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.user-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-user-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.workload-deployment-tooling + name: Workload release configuration and guards + summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback. + domain: financials + status: draft + owner: railiance-apps + tags: + - railiance + - kubernetes + - helm + - deployment + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.railiance.workload-deployment-tooling.md + consumption_modes: + - CLI + - source + source_repo: railiance-apps + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml +- id: capability.registry.register + name: Capability registry and federation + summary: Owner Markdown entries, indexes, federation hub and planning queries. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - governance + - meta + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C2 / R3 + path: registry/capabilities/capability.registry.register.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.registry.validate + name: Capability registry validation + summary: Schema, index consistency and relation checks. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - validation + - cli + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R3 + path: registry/capabilities/capability.registry.validate.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml +- id: capability.resources.security-capacity + name: Capacity and recovery resource planning + summary: Provider-neutral inventory, procurement evidence and optimization reports. + domain: infotech + status: draft + owner: resource-control + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.resources.security-capacity.md + consumption_modes: + - CLI + - source + source_repo: resource-control + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml +- id: capability.security.access-routing + name: Credential routing and contained access + summary: warden route and access catalog; exact lane conduit and secret-exec routing. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.security.access-routing.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.adversarial-evidence + name: Authorized adversarial evidence harness + summary: Offline ASM and tenancy calibrations and engagement admission. + domain: infotech + status: draft + owner: whitehat-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.adversarial-evidence.md + consumption_modes: + - CLI + - source + source_repo: whitehat-security + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml +- id: capability.security.agent-knowledge + name: Verified security orientation for agents + summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed + exports. + domain: infotech + status: draft + owner: emergent-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.agent-knowledge.md + consumption_modes: + - CLI + - source + source_repo: emergent-security + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml +- id: capability.security.approval-lifecycle + name: Bound approval lifecycle + summary: Authenticated issue, claim, revoke, supersede and atomic consume API with + outbox. + domain: infotech + status: draft + owner: approval-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.approval-lifecycle.md + consumption_modes: + - HTTP API + - source + source_repo: approval-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml +- id: capability.security.bootstrap-recovery + name: Guarded bootstrap and recovery preparation + summary: Local identity, bootstrap console, encrypted custody handoff and caller + tools. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.bootstrap-recovery.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-contracts + name: Security case types and instance validation + summary: Versioned types, cases and schema validation. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-contracts.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-follow-through + name: Security case operational follow-through + summary: KnownSecurityCase route, plan and operational receipts. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-follow-through.md + consumption_modes: + - CLI + - source + source_repo: ops-warden + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.credential-lifecycle + name: Cataloged credential lifecycle + summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, + delivery and revoke. + domain: infotech + status: draft + owner: secrets-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.credential-lifecycle.md + consumption_modes: + - CLI + - source + source_repo: secrets-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml +- id: capability.security.doctrine-review + name: Security doctrine and architecture review + summary: Layer rules, authority context, ASM criteria and interpretations. + domain: infotech + status: draft + owner: gate-house + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.doctrine-review.md + consumption_modes: + - informational + source_repo: gate-house + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml +- id: capability.security.emission-profile + name: Security emission cadence validation + summary: Security profile over generic emission contracts and validator. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.emission-profile.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.forge-secret-prevention + name: Independent introduced-history secret prevention + summary: Pinned receive adapter, lifecycle template and fail-closed scan. + domain: infotech + status: draft + owner: railiance-forge + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.forge-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml +- id: capability.security.human-decision-workspace + name: Human security decision presentation and disposition + summary: Headless lifecycle and browser workspace with exact native approval references. + domain: infotech + status: draft + owner: informed-decision + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.human-decision-workspace.md + consumption_modes: + - HTTP API + - source + source_repo: informed-decision + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml +- id: capability.security.iam-tooling-suite + name: NetKingdom security architecture and conformance tooling + summary: Versioned IAM, layer, tenancy and credential contracts plus validators. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - iam + - kubernetes + - conformance + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.security.iam-tooling-suite.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.maturity-claims + name: Evidence-based maturity claims and gap register + summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and + stance inventory. + domain: infotech + status: draft + owner: maturity-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.maturity-claims.md + consumption_modes: + - CLI + - source + source_repo: maturity-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml +- id: capability.security.policy-publication + name: Policy publication with source provenance + summary: Generated immutable publication, source currency and stable policy URLs. + domain: infotech + status: draft + owner: policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.policy-publication.md + consumption_modes: + - CLI + - source + source_repo: policy-nexus + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml +- id: capability.security.posture-assessment + name: Security posture assessment and response proposals + summary: Normalized observation evaluator, cadence checks and secret-use snapshot + adapter. + domain: infotech + status: draft + owner: kings-guard + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-assessment.md + consumption_modes: + - CLI + - source + source_repo: kings-guard + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml +- id: capability.security.posture-feedback + name: Deterministic posture feedback + summary: CLI evaluates evidence age and posture into owner-routed findings. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-feedback.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.practice-canon + name: Security practice and authority vocabulary + summary: Versioned SEC-DSM and Mode of Authority documents. + domain: infotech + status: draft + owner: security-canon + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.practice-canon.md + consumption_modes: + - informational + source_repo: security-canon + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml +- id: capability.security.repository-secret-prevention + name: Repository metadata and staged-secret prevention + summary: Repository observation plus pinned staged-blob scanner and hook integration. + domain: infotech + status: draft + owner: repo-manager + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.repository-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: repo-manager + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml +- id: capability.security.risk-register + name: Security risk and exception review register + summary: Markdown findings and Python review, verification and due-work reports. + domain: infotech + status: draft + owner: risk-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.risk-register.md + consumption_modes: + - CLI + - source + source_repo: risk-nexus + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml +- id: capability.security.scenario-compose + name: Deterministic security scenario composition + summary: CLI selects pinned providers and orders trust transitions. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.scenario-compose.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.ssh-certificate-issuance + name: Decision-bound SSH certificates + summary: warden sign with local and OpenBao backends and adm/agt/atm actors. + domain: helix_forge + status: draft + owner: ops-warden + tags: + - ssh + - certificate + - ca + - ops-warden + - openbao + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R2 + path: registry/capabilities/capability.security.ssh-certificate-issuance.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.structure-construction + name: Reviewed security structure construction + summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply. + domain: infotech + status: draft + owner: ops-mason + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.structure-construction.md + consumption_modes: + - CLI + - source + source_repo: ops-mason + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml +- id: capability.security.zone-reference + name: Zone membership reference conformance + summary: Offline resolution, exception and lineage checks. + domain: infotech + status: draft + owner: zone-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.zone-reference.md + consumption_modes: + - CLI + - source + source_repo: zone-engine + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml +- id: capability.statehub.progress-log + name: Progress and work evidence indexing + summary: REST progress and task evidence references. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - progress + - coordination + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R3 + path: registry/capabilities/capability.statehub.progress-log.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml +- id: capability.statehub.workstream-coordinate + name: Cross-repository work tracking + summary: File-derived workplans, tasks, dependencies, decisions and coordination + views. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - coordination + - workplans + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R2 + path: registry/capabilities/capability.statehub.workstream-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml diff --git a/docs/assessments/netkingdom-2026-10-14/federation-local.yaml b/docs/assessments/netkingdom-2026-10-14/federation-local.yaml new file mode 100644 index 00000000..cf4ee153 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/federation-local.yaml @@ -0,0 +1,244 @@ +version: 1 +domain: infotech +collision_policy: warn +sources: +- repo: access-engine + index: /home/worsch/access-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: activity-core + index: /home/worsch/activity-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: agentic-resources + index: /home/worsch/agentic-resources/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: approval-engine + index: /home/worsch/approval-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: audit-core + index: /home/worsch/audit-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: coordination-engine + index: /home/worsch/coordination-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: emergent-security + index: /home/worsch/emergent-security/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: fin-hub + index: /home/worsch/fin-hub/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: gate-house + index: /home/worsch/gate-house/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: glas-harness + index: /home/worsch/glas-harness/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: info-tech-canon + index: /home/worsch/info-tech-canon/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: informed-decision + index: /home/worsch/informed-decision/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: issue-core + index: /home/worsch/issue-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: key-cape + index: /home/worsch/key-cape/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: kings-guard + index: /home/worsch/kings-guard/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: maturity-engine + index: /home/worsch/maturity-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: net-kingdom + index: /home/worsch/net-kingdom/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-bridge + index: /home/worsch/ops-bridge/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-mason + index: /home/worsch/ops-mason/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-warden + index: /home/worsch/ops-warden/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: policy-nexus + index: /home/worsch/policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rail-kubernetes + index: /home/worsch/rail-kubernetes/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-apps + index: /home/worsch/railiance-apps/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-bootstrap + index: /home/worsch/railiance-bootstrap/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-cluster + index: /home/worsch/railiance-cluster/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-enablement + index: /home/worsch/railiance-enablement/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-fabric + index: /home/worsch/railiance-fabric/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-forge + index: /home/worsch/railiance-forge/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-infra + index: /home/worsch/railiance-infra/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-master + index: /home/worsch/railiance-master/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-platform + index: /home/worsch/railiance-platform/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-telemetry + index: /home/worsch/railiance-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-openbao + index: /home/worsch/rapp-openbao/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-playwright + index: /home/worsch/rapp-playwright/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-policy-nexus + index: /home/worsch/rapp-policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-postgres + index: /home/worsch/rapp-postgres/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-telemetry + index: /home/worsch/rapp-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-tenant-engine + index: /home/worsch/rapp-tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-user-engine + index: /home/worsch/rapp-user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: reef-railiance + index: /home/worsch/reef-railiance/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rein-aharness + index: /home/worsch/rein-aharness/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rein-openweights + index: /home/worsch/rein-openweights/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: repo-manager + index: /home/worsch/repo-manager/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: resource-control + index: /home/worsch/resource-control/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: reuse-surface + index: /home/worsch/reuse-surface/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: risk-nexus + index: /home/worsch/risk-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: role-engine + index: /home/worsch/role-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: runbook-tutorials + index: /home/worsch/runbook-tutorials/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: sand-boxer + index: /home/worsch/sand-boxer/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: sbom-nexus + index: /home/worsch/sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: secrets-engine + index: /home/worsch/secrets-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: security-canon + index: /home/worsch/security-canon/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: state-hub + index: /home/worsch/state-hub/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: tenant-engine + index: /home/worsch/tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: the-custodian + index: /home/worsch/the-custodian/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: user-engine + index: /home/worsch/user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: whitehat-security + index: /home/worsch/whitehat-security/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: zone-engine + index: /home/worsch/zone-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rail-knative + index: /home/worsch/rail-knative/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-sbom-nexus + index: /home/worsch/rapp-sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true diff --git a/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml b/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml new file mode 100644 index 00000000..2a39b43d --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/federation-staged.yaml @@ -0,0 +1,236 @@ +version: 1 +domain: infotech +collision_policy: warn +sources: +- repo: access-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/access-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: activity-core + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/activity-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: agentic-resources + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/agentic-resources/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: approval-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/approval-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: audit-core + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/audit-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: coordination-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/coordination-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: emergent-security + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/emergent-security/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: fin-hub + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/fin-hub/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: gate-house + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/gate-house/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: glas-harness + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/glas-harness/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: info-tech-canon + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/info-tech-canon/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: informed-decision + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/informed-decision/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: issue-core + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/issue-core/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: key-cape + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/key-cape/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: kings-guard + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/kings-guard/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: maturity-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/maturity-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: net-kingdom + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/net-kingdom/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-bridge + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-bridge/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-mason + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-mason/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: ops-warden + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/ops-warden/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: policy-nexus + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rail-kubernetes + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rail-kubernetes/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-apps + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-apps/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-bootstrap + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-bootstrap/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-cluster + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-cluster/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-enablement + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-enablement/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-fabric + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-fabric/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-forge + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-forge/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-infra + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-infra/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-master + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-master/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-platform + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-platform/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: railiance-telemetry + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/railiance-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-openbao + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-openbao/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-playwright + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-playwright/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-policy-nexus + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-postgres + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-postgres/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-telemetry + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-tenant-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rapp-user-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rapp-user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: reef-railiance + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reef-railiance/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rein-aharness + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-aharness/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: rein-openweights + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/rein-openweights/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: repo-manager + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/repo-manager/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: resource-control + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/resource-control/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: reuse-surface + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/reuse-surface/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: risk-nexus + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/risk-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: role-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/role-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: runbook-tutorials + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/runbook-tutorials/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: sand-boxer + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sand-boxer/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: sbom-nexus + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: secrets-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/secrets-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: security-canon + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/security-canon/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: state-hub + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/state-hub/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: tenant-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: the-custodian + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/the-custodian/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: user-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: whitehat-security + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/whitehat-security/registry/indexes/capabilities.yaml + enabled: true + required: true +- repo: zone-engine + index: /home/worsch/the-custodian/docs/assessments/netkingdom-2026-10-14/registry-stage/zone-engine/registry/indexes/capabilities.yaml + enabled: true + required: true diff --git a/docs/assessments/netkingdom-2026-10-14/full-inventory.json b/docs/assessments/netkingdom-2026-10-14/full-inventory.json new file mode 100644 index 00000000..6eca0291 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/full-inventory.json @@ -0,0 +1,2987 @@ +{ + "as_of": "2026-10-14", + "capabilities": [ + { + "repo": "security-canon", + "id": "capability.security.practice-canon", + "name": "Security practice and authority vocabulary", + "availability": "A0", + "operational_estimate": 2, + "surface": "Versioned SEC-DSM and Mode of Authority documents", + "limitation": "Normative practice; no runtime control or certification", + "use_cases": [ + "U01", + "U07", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.practice-canon.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom security architecture and conformance tooling", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned IAM, layer, tenancy and credential contracts plus validators", + "limitation": "Mixed accepted and proposed standards; framework integration remains incomplete", + "use_cases": [ + "U01", + "U02", + "U03", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "SECURITY-COMPANION.md" + ], + "existing_entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "prior_vector": "D3 / A2 / C1 / R1", + "vector": "D3 / A2 / C1 / R1", + "entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.scenario-compose", + "name": "Deterministic security scenario composition", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI selects pinned providers and orders trust transitions", + "limitation": "Plan only; execution.permitted is always false", + "use_cases": [ + "U01", + "U14" + ], + "artifacts": [ + "tools/security-scenario-composer/README.md", + "tools/security-scenario-composer/security_scenario_composer.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.scenario-compose.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.posture-feedback", + "name": "Deterministic posture feedback", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI evaluates evidence age and posture into owner-routed findings", + "limitation": "Proposal only; no policy changes or remediation execution", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "tools/posture-feedback/README.md", + "tools/posture-feedback/posture_feedback.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.posture-feedback.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.case-contracts", + "name": "Security case types and instance validation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned types, cases and schema validation", + "limitation": "Type acknowledgment, case acceptance, structural materialization and native execution are distinct", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "tools/security-case-types/README.md", + "canon/standards/security-case-types_v0.1.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.case-contracts.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.bootstrap-recovery", + "name": "Guarded bootstrap and recovery preparation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Local identity, bootstrap console, encrypted custody handoff and caller tools", + "limitation": "Source repairs and disposable native fixtures do not prove estate root isolation or recovery", + "use_cases": [ + "U10" + ], + "artifacts": [ + "tools/security-bootstrap-console/README.md", + "tools/custody-record/README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.bootstrap-recovery.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.emission-profile", + "name": "Security emission cadence validation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Security profile over generic emission contracts and validator", + "limitation": "Profile adoption and source completeness require owner-native evidence", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "tools/emission-cadence-profile/README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.emission-profile.md" + }, + { + "repo": "key-cape", + "id": "capability.iam.key-cape", + "name": "OIDC identity and assurance", + "availability": "A4", + "operational_estimate": 3, + "surface": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI", + "limitation": "Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates", + "use_cases": [ + "U02", + "U03", + "U04", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.iam.key-cape.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A4 / C2 / R1", + "entry_path": "registry/capabilities/capability.iam.key-cape.md" + }, + { + "repo": "user-engine", + "id": "capability.identity.user-engine", + "name": "User lifecycle and account journeys", + "availability": "A4", + "operational_estimate": 3, + "surface": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog", + "limitation": "Application readback is advisory; applications must enforce their own authorization", + "use_cases": [ + "U02", + "U03", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.identity.user-engine.md", + "prior_vector": "D4 / A1 / C2 / R0", + "vector": "D4 / A4 / C2 / R0", + "entry_path": "registry/capabilities/capability.identity.user-engine.md" + }, + { + "repo": "tenant-engine", + "id": "capability.identity.tenant-facts", + "name": "Tenant lifecycle and guardrail facts", + "availability": "A4", + "operational_estimate": 3, + "surface": "Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store", + "limitation": "Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate", + "use_cases": [ + "U03", + "U04" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.identity.tenant-facts.md" + }, + { + "repo": "zone-engine", + "id": "capability.security.zone-reference", + "name": "Zone membership reference conformance", + "availability": "A2", + "operational_estimate": 2, + "surface": "Offline resolution, exception and lineage checks", + "limitation": "No live zone engine, PDP or protected side effects", + "use_cases": [ + "U01", + "U03", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.zone-reference.md" + }, + { + "repo": "access-engine", + "id": "capability.authorization.policy-evaluate", + "name": "Policy evaluation and decision evidence", + "availability": "A4", + "operational_estimate": 3, + "surface": "Check, batch, list-allowed, explain, binding, lifetime and decision records", + "limitation": "One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct", + "use_cases": [ + "U03", + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A4 / C2 / R1", + "entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md" + }, + { + "repo": "approval-engine", + "id": "capability.security.approval-lifecycle", + "name": "Bound approval lifecycle", + "availability": "A4", + "operational_estimate": 2, + "surface": "Authenticated issue, claim, revoke, supersede and atomic consume API with outbox", + "limitation": "Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open", + "use_cases": [ + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "approval_engine/api.py", + "docs/production-dependencies.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.approval-lifecycle.md" + }, + { + "repo": "secrets-engine", + "id": "capability.security.credential-lifecycle", + "name": "Cataloged credential lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke", + "limitation": "Production protected execution and independently anchored PDP authentication remain incomplete", + "use_cases": [ + "U04", + "U05", + "U07" + ], + "artifacts": [ + "SCOPE.md", + "src/secrets_engine/decision_check.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.credential-lifecycle.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.ssh-certificate-issuance", + "name": "Decision-bound SSH certificates", + "availability": "A3", + "operational_estimate": 3, + "surface": "warden sign with local and OpenBao backends and adm/agt/atm actors", + "limitation": "Direct Tooling contact is a declared gap; certificate reachability is not target authorization", + "use_cases": [ + "U06" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "prior_vector": "D4 / A3 / C3 / R2", + "vector": "D4 / A3 / C3 / R2", + "entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.access-routing", + "name": "Credential routing and contained access", + "availability": "A3", + "operational_estimate": 3, + "surface": "warden route and access catalog; exact lane conduit and secret-exec routing", + "limitation": "Routing grants no authority; interim delegates and attended high-risk lanes persist", + "use_cases": [ + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "wiki/CredentialRouting.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A3 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.access-routing.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.case-follow-through", + "name": "Security case operational follow-through", + "availability": "A2", + "operational_estimate": 2, + "surface": "KnownSecurityCase route, plan and operational receipts", + "limitation": "Execution requires accepted structure and exact owner contracts; case closure is not automatic", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "workplans/WARDEN-WP-0044-security-case-follow-through.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.case-follow-through.md" + }, + { + "repo": "ops-mason", + "id": "capability.security.structure-construction", + "name": "Reviewed security structure construction", + "availability": "A2", + "operational_estimate": 2, + "surface": "Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply", + "limitation": "Founder plan gate is an explicit exception; not full PDP conformance", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "docs/construction-plan-format.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.structure-construction.md" + }, + { + "repo": "ops-bridge", + "id": "capability.ops.tunnel-bridge", + "name": "SSH tunnel lifecycle", + "availability": "A2", + "operational_estimate": 3, + "surface": "Named tunnels, reconnect, health and TTL-aware cert_command", + "limitation": "Private transport does not authenticate applications or decide access", + "use_cases": [ + "U06" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "prior_vector": "D3 / A2 / C2 / R1", + "vector": "D3 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md" + }, + { + "repo": "audit-core", + "id": "capability.audit.event-retain", + "name": "Independent audit custody", + "availability": "A4", + "operational_estimate": 3, + "surface": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation", + "limitation": "Custody after arrival does not prove source completeness; freshness bounds integrity assertions", + "use_cases": [ + "U08", + "U09", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "docs/stream-completeness.md" + ], + "existing_entry_path": "registry/capabilities/capability.audit.event-retain.md", + "prior_vector": "D4 provision / A4 / C3 / R2", + "vector": "D3 / A4 / C3 / R2", + "entry_path": "registry/capabilities/capability.audit.event-retain.md" + }, + { + "repo": "maturity-engine", + "id": "capability.security.maturity-claims", + "name": "Evidence-based maturity claims and gap register", + "availability": "A2", + "operational_estimate": 2, + "surface": "SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory", + "limitation": "No production deployment claimed; levels supply facts and cannot authorize actions", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/claim-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.maturity-claims.md" + }, + { + "repo": "kings-guard", + "id": "capability.security.posture-assessment", + "name": "Security posture assessment and response proposals", + "availability": "A2", + "operational_estimate": 2, + "surface": "Normalized observation evaluator, cadence checks and secret-use snapshot adapter", + "limitation": "Bounded reference pilot; containment proposals only; deployed-stream admission remains open", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "docs/SecretUseSnapshotAdmission.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.posture-assessment.md" + }, + { + "repo": "whitehat-security", + "id": "capability.security.adversarial-evidence", + "name": "Authorized adversarial evidence harness", + "availability": "A2", + "operational_estimate": 2, + "surface": "Offline ASM and tenancy calibrations and engagement admission", + "limitation": "Live probes require a complete engagement; no blanket target authorization", + "use_cases": [ + "U03", + "U08", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.adversarial-evidence.md" + }, + { + "repo": "gate-house", + "id": "capability.security.doctrine-review", + "name": "Security doctrine and architecture review", + "availability": "A0", + "operational_estimate": 3, + "surface": "Layer rules, authority context, ASM criteria and interpretations", + "limitation": "Staff judgment; no runtime PDP, credential issuer or automatic enforcement", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "INTENT.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.doctrine-review.md" + }, + { + "repo": "emergent-security", + "id": "capability.security.agent-knowledge", + "name": "Verified security orientation for agents", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports", + "limitation": "Current start card withheld for source drift; orientation never grants authority", + "use_cases": [ + "U01", + "U11", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "knowledge/cards/start.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.agent-knowledge.md" + }, + { + "repo": "informed-decision", + "id": "capability.security.human-decision-workspace", + "name": "Human security decision presentation and disposition", + "availability": "A4", + "operational_estimate": 3, + "surface": "Headless lifecycle and browser workspace with exact native approval references", + "limitation": "Initial audience is bounded; Approval Engine owns approval state, Access Engine decides", + "use_cases": [ + "U04", + "U05", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.human-decision-workspace.md" + }, + { + "repo": "policy-nexus", + "id": "capability.security.policy-publication", + "name": "Policy publication with source provenance", + "availability": "A2", + "operational_estimate": 3, + "surface": "Generated immutable publication, source currency and stable policy URLs", + "limitation": "Publication does not ratify policy or enforce it", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "README.md", + "docs/publication-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.policy-publication.md" + }, + { + "repo": "risk-nexus", + "id": "capability.security.risk-register", + "name": "Security risk and exception review register", + "availability": "A2", + "operational_estimate": 2, + "surface": "Markdown findings and Python review, verification and due-work reports", + "limitation": "Judgment remains human or agent; no live EUR risk gate or autonomous response", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.risk-register.md" + }, + { + "repo": "role-engine", + "id": "capability.organization.role-catalog", + "name": "Organizational role definitions", + "availability": "A0", + "operational_estimate": 1, + "surface": "Versioned documentation catalog", + "limitation": "Not IAM roles, assignments or runtime authorization", + "use_cases": [ + "U01", + "U11" + ], + "artifacts": [ + "README.md", + "INTENT.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.organization.role-catalog.md" + }, + { + "repo": "glas-harness", + "id": "capability.execution.profile-harness", + "name": "Profile-bound agent execution lifecycle", + "availability": "A3", + "operational_estimate": 2, + "surface": "Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration", + "limitation": "No ready profile asserted by SCOPE; Custodian native isolation remains open", + "use_cases": [ + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A3 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.profile-harness.md" + }, + { + "repo": "sand-boxer", + "id": "capability.execution.sandbox-provision", + "name": "Sandbox establishment and lifecycle", + "availability": "A5", + "operational_estimate": 2, + "surface": "Profiles, extensions, provision, checkpoints, TTL teardown and telemetry", + "limitation": "Backend-specific guarantees; a created sandbox alone proves no credential isolation", + "use_cases": [ + "U11", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/execution.sandbox-provision.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D5 / A5 / C5 / R0", + "entry_path": "registry/capabilities/execution.sandbox-provision.md" + }, + { + "repo": "rein-aharness", + "id": "capability.execution.scheduled-agent-rein", + "name": "Scheduled agent intake and harness routing", + "availability": "A2", + "operational_estimate": 3, + "surface": "Activity Core lease claim/heartbeat and Glas profile execution", + "limitation": "Legacy paths are time-gated; task success is not privileged authority", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.scheduled-agent-rein.md" + }, + { + "repo": "rein-openweights", + "id": "capability.execution.openweight-rein", + "name": "Bounded open-weight agent execution", + "availability": "A2", + "operational_estimate": 2, + "surface": "Tool loop, path guards, turn/budget limits and verified-commit result", + "limitation": "Provider credential acquisition and runtime authority need separate custody controls", + "use_cases": [ + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.openweight-rein.md" + }, + { + "repo": "agentic-resources", + "id": "capability.agents.performance-learning", + "name": "Agent performance learning", + "availability": "A2", + "operational_estimate": 2, + "surface": "Capture sessions, curate patterns, distribute lessons and measure outcomes", + "limitation": "Workforce assignments and broader authority contracts remain proposed", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.agents.performance-learning.md" + }, + { + "repo": "runbook-tutorials", + "id": "capability.infotech.runbook-tutorials", + "name": "Guided administrative runbooks", + "availability": "A2", + "operational_estimate": 2, + "surface": "Pack schema, loader, local UI/CLI, gates, verification and rollback evidence", + "limitation": "Owner supplies procedures; UI progress is not runtime approval", + "use_cases": [ + "U05", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/pack-spec.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md", + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md" + }, + { + "repo": "repo-manager", + "id": "capability.security.repository-secret-prevention", + "name": "Repository metadata and staged-secret prevention", + "availability": "A2", + "operational_estimate": 3, + "surface": "Repository observation plus pinned staged-blob scanner and hook integration", + "limitation": "Local hooks are bypassable; coverage is exact-checkout scoped", + "use_cases": [ + "U07", + "U12" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.repository-secret-prevention.md" + }, + { + "repo": "sbom-nexus", + "id": "capability.infotech.sbom-management", + "name": "Dependency provenance and SBOM evidence", + "availability": "A4", + "operational_estimate": 3, + "surface": "Controlled archive ingest, immutable snapshots, freshness and license review", + "limitation": "SBOM and license evidence do not prove vulnerability exploitability or artifact trust", + "use_cases": [ + "U12", + "U09" + ], + "artifacts": [ + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.sbom-management.md", + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.sbom-management.md" + }, + { + "repo": "activity-core", + "id": "capability.activity.event-coordinate", + "name": "Durable automation and bounded operations", + "availability": "A4", + "operational_estimate": 3, + "surface": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks", + "limitation": "Not a general shell executor; first unassisted security-flow cadence acceptance remains open", + "use_cases": [ + "U09", + "U12" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.activity.event-coordinate.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.activity.event-coordinate.md" + }, + { + "repo": "issue-core", + "id": "capability.infotech.issue-tracking", + "name": "External issue tracker connector", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI and Python adapters for external issue systems", + "limitation": "Internal work originates in owner files; external projection is optional", + "use_cases": [ + "U09" + ], + "artifacts": [ + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.issue-tracking.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.infotech.issue-tracking.md" + }, + { + "repo": "state-hub", + "id": "capability.statehub.workstream-coordinate", + "name": "Cross-repository work tracking", + "availability": "A4", + "operational_estimate": 3, + "surface": "File-derived workplans, tasks, dependencies, decisions and coordination views", + "limitation": "Read/cache/index of owner work; not runtime approval authority", + "use_cases": [ + "U09" + ], + "artifacts": [ + "README.md", + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "prior_vector": "D4 / A4 / C3 / R2", + "vector": "D4 / A4 / C3 / R2", + "entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md" + }, + { + "repo": "state-hub", + "id": "capability.statehub.progress-log", + "name": "Progress and work evidence indexing", + "availability": "A4", + "operational_estimate": 3, + "surface": "REST progress and task evidence references", + "limitation": "Not independent security event custody", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "README.md", + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.statehub.progress-log.md", + "prior_vector": "D4 / A4 / C3 / R3", + "vector": "D4 / A4 / C3 / R3", + "entry_path": "registry/capabilities/capability.statehub.progress-log.md" + }, + { + "repo": "the-custodian", + "id": "capability.agents.custodian-runtime-tooling", + "name": "Generic agent runtime and repository tooling", + "availability": "A2", + "operational_estimate": 2, + "surface": "Agent runtime modules and repository classification tooling", + "limitation": "Only generic tooling is reusable; confidential canon and session memory are excluded", + "use_cases": [ + "U09", + "U11", + "U14" + ], + "artifacts": [ + "runtime/README.md" + ], + "existing_entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "prior_vector": "D2 / A1 / C1 / R0", + "vector": "D2 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md" + }, + { + "repo": "coordination-engine", + "id": "capability.coordination.cross-owner-work", + "name": "Cross-owner coordination lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime", + "limitation": "Coordinates owners without replacing their execution or security authority", + "use_cases": [ + "U09" + ], + "artifacts": [ + "SCOPE.md", + "spec/cross-owner-wait-mode-v0.1.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.coordination.cross-owner-work.md" + }, + { + "repo": "reuse-surface", + "id": "capability.registry.register", + "name": "Capability registry and federation", + "availability": "A3", + "operational_estimate": 3, + "surface": "Owner Markdown entries, indexes, federation hub and planning queries", + "limitation": "Discovery is not readiness; empty and stale entries need evidence-led maintenance", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "docs/RegistryFederation.md", + "specs/CapabilityMaturityStandard.md" + ], + "existing_entry_path": "registry/capabilities/capability.registry.register.md", + "prior_vector": "D3 / A4 / C2 / R3", + "vector": "D3 / A3 / C2 / R3", + "entry_path": "registry/capabilities/capability.registry.register.md" + }, + { + "repo": "reuse-surface", + "id": "capability.registry.validate", + "name": "Capability registry validation", + "availability": "A3", + "operational_estimate": 3, + "surface": "Schema, index consistency and relation checks", + "limitation": "Schema validity alone proves neither capability behavior nor hosted freshness", + "use_cases": [ + "U01", + "U14" + ], + "artifacts": [ + "docs/RegistryFederation.md", + "schemas/capability.schema.yaml" + ], + "existing_entry_path": "registry/capabilities/capability.registry.validate.md", + "prior_vector": "D4 / A3 / C3 / R3", + "vector": "D4 / A3 / C3 / R3", + "entry_path": "registry/capabilities/capability.registry.validate.md" + }, + { + "repo": "info-tech-canon", + "id": "capability.infotech.canon-service", + "name": "Shared semantic contracts and validation", + "availability": "A4", + "operational_estimate": 2, + "surface": "Markdown canon with library, CLI and read-only API", + "limitation": "Mixed seed/candidate maturity; validation is not owner runtime conformance", + "use_cases": [ + "U01", + "U08", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.canon-service.md", + "prior_vector": "D2 / A2 / C1 / R0", + "vector": "D2 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.canon-service.md" + }, + { + "repo": "railiance-master", + "id": "capability.railiance.security-consumption-contracts", + "name": "Platform security consumption architecture", + "availability": "A0", + "operational_estimate": 2, + "surface": "Rail/rapp/reef boundaries, exposure and security consumption contracts", + "limitation": "Architecture declarations do not prove implementation or production admission", + "use_cases": [ + "U01", + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/netkingdom-security-consumption-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.security-consumption-contracts.md" + }, + { + "repo": "railiance-platform", + "id": "capability.railiance.platform-services", + "name": "Secret custody and platform data services", + "availability": "A2", + "operational_estimate": 3, + "surface": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts", + "limitation": "Package ownership is split to rapp repos; caches and object services are demand-led", + "use_cases": [ + "U04", + "U05", + "U07", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md", + "docs/openbao.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.platform-services.md", + "prior_vector": "D3 / A2 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.platform-services.md" + }, + { + "repo": "railiance-infra", + "id": "capability.railiance.infra-provisioning", + "name": "Host convergence and security baseline", + "availability": "A2", + "operational_estimate": 3, + "surface": "Ansible inventory, firewall, SSH bootstrap and baseline verification", + "limitation": "Current hosts differ from the retained Hetzner provisioning path", + "use_cases": [ + "U06", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md" + }, + { + "repo": "railiance-cluster", + "id": "capability.railiance.cluster-bootstrap", + "name": "Kubernetes runtime and cluster controls", + "availability": "A2", + "operational_estimate": 3, + "surface": "k3s, ingress, CNI, operators and kubeconfig/runtime checks", + "limitation": "Single-node runtime and workload recovery are distinct from bootstrap success", + "use_cases": [ + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "prior_vector": "D3 / A2 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md" + }, + { + "repo": "railiance-enablement", + "id": "capability.railiance.ci-enablement", + "name": "Developer delivery and CI templates", + "availability": "A2", + "operational_estimate": 2, + "surface": "Reusable CI workflows, build and deployment patterns", + "limitation": "Templates do not prove mandatory checks or runner isolation", + "use_cases": [ + "U12", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.ci-enablement.md", + "prior_vector": "D3 / A2 / C2 / R1", + "vector": "D3 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.railiance.ci-enablement.md" + }, + { + "repo": "railiance-forge", + "id": "capability.railiance.forge-infrastructure", + "name": "Source forge, registries and runner substrate", + "availability": "A2", + "operational_estimate": 3, + "surface": "Forgejo operation, package registries and runner lifecycle", + "limitation": "Runner workload authority and independent verification coverage remain open", + "use_cases": [ + "U12" + ], + "artifacts": [ + "SCOPE.md", + "workplans/FORGE-WP-0006-independent-secret-detection.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md" + }, + { + "repo": "railiance-forge", + "id": "capability.security.forge-secret-prevention", + "name": "Independent introduced-history secret prevention", + "availability": "A2", + "operational_estimate": 3, + "surface": "Pinned receive adapter, lifecycle template and fail-closed scan", + "limitation": "Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate", + "use_cases": [ + "U07", + "U12" + ], + "artifacts": [ + "workplans/FORGE-WP-0006-independent-secret-detection.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.forge-secret-prevention.md" + }, + { + "repo": "railiance-apps", + "id": "capability.railiance.workload-deployment-tooling", + "name": "Workload release configuration and guards", + "availability": "A2", + "operational_estimate": 3, + "surface": "Helm/manifests, exact image pins, application runbooks and rollout/rollback", + "limitation": "Release settings depend on underlying platform and workload owners", + "use_cases": [ + "U12", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "prior_vector": "D3 / A2 / C1 / R1", + "vector": "D3 / A2 / C1 / R1", + "entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md" + }, + { + "repo": "railiance-bootstrap", + "id": "capability.railiance.bootstrap-sequencing", + "name": "Bootstrap sequencing contracts", + "availability": "A0", + "operational_estimate": 1, + "surface": "Bare-VM to estate sequence and handoff contract", + "limitation": "End-to-end unattended rebuild is not established", + "use_cases": [ + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.bootstrap-sequencing.md" + }, + { + "repo": "rail-kubernetes", + "id": "capability.railiance.kubernetes-rail", + "name": "Generic Kubernetes workload lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "Workload declaration, rollout, observe, promote and rollback surfaces", + "limitation": "Compatibility extraction remains; not cluster or application-domain ownership", + "use_cases": [ + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.kubernetes-rail.md" + }, + { + "repo": "reef-railiance", + "id": "capability.railiance.substrate-bindings", + "name": "Substrate topology and bindings", + "availability": "A0", + "operational_estimate": 2, + "surface": "Grouped home-reef identity, topology and placement declarations", + "limitation": "Declarations are not automatic placement or authorization", + "use_cases": [ + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.substrate-bindings.md" + }, + { + "repo": "railiance-fabric", + "id": "capability.railiance.fabric-graph", + "name": "Infrastructure ownership and dependency graph", + "availability": "A2", + "operational_estimate": 2, + "surface": "Schemas, validation, graph queries and State Hub exports", + "limitation": "Graph assertions need current owner evidence; not an enforcement registry", + "use_cases": [ + "U09", + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.fabric-graph.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.fabric-graph.md" + }, + { + "repo": "rapp-openbao", + "id": "capability.railiance.openbao-package", + "name": "Managed OpenBao deployment package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Helm values, package deploy/status/smoke/rollback and custody boundary", + "limitation": "Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit", + "use_cases": [ + "U04", + "U10", + "U13" + ], + "artifacts": [ + "README.md", + "docs/retained-s3-handoff.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.openbao-package.md" + }, + { + "repo": "rapp-postgres", + "id": "capability.railiance.postgres-isolation-recovery", + "name": "Database isolation and recovery package", + "availability": "A2", + "operational_estimate": 3, + "surface": "CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures", + "limitation": "Host-loss proof and consumer schemas stay with their owners", + "use_cases": [ + "U03", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.postgres-isolation-recovery.md" + }, + { + "repo": "rapp-user-engine", + "id": "capability.railiance.user-engine-package", + "name": "User Engine runtime package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Pinned deployment, dedicated CNPG, ExternalSecret references and rollback", + "limitation": "Domain, identity, PDP and custody authority are separate", + "use_cases": [ + "U02", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.user-engine-package.md" + }, + { + "repo": "rapp-tenant-engine", + "id": "capability.railiance.tenant-engine-package", + "name": "Tenant Engine runtime package", + "availability": "A2", + "operational_estimate": 2, + "surface": "Package declaration, smoke and rollback", + "limitation": "No tenant-domain ownership or credential values", + "use_cases": [ + "U03", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.tenant-engine-package.md" + }, + { + "repo": "rapp-policy-nexus", + "id": "capability.railiance.policy-publication-package", + "name": "Policy publication runtime package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Immutable image, non-root/read-only runtime and approved TLS exposure", + "limitation": "No policy authoring or DNS/issuer administration", + "use_cases": [ + "U01", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.policy-publication-package.md" + }, + { + "repo": "rapp-playwright", + "id": "capability.railiance.browser-verification", + "name": "Managed browser verification pilot", + "availability": "A4", + "operational_estimate": 2, + "surface": "Bounded jobs, cancellation, artifacts, origin checks and restart receipts", + "limitation": "Pilot deployed; human/agent authentication and per-caller self-service connectivity pending", + "use_cases": [ + "U02", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.browser-verification.md" + }, + { + "repo": "railiance-telemetry", + "id": "capability.observability.security-signals", + "name": "Security-relevant telemetry contracts and adapters", + "availability": "A2", + "operational_estimate": 2, + "surface": "Signal contract, platform adapters, report exporter and absence/alert rules", + "limitation": "Reference receiver is not a second production plane; end-to-end delivery acceptance pending", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.observability.security-signals.md" + }, + { + "repo": "rapp-telemetry", + "id": "capability.railiance.telemetry-package", + "name": "Private monitoring package", + "availability": "A2", + "operational_estimate": 2, + "surface": "Prometheus, Alertmanager and Grafana package with isolated restore evidence", + "limitation": "Private installation only; recurring recovery capture and audited confirmation pending", + "use_cases": [ + "U08", + "U09", + "U10" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.telemetry-package.md" + }, + { + "repo": "resource-control", + "id": "capability.resources.security-capacity", + "name": "Capacity and recovery resource planning", + "availability": "A2", + "operational_estimate": 2, + "surface": "Provider-neutral inventory, procurement evidence and optimization reports", + "limitation": "No payment authority or irreversible procurement; metrics do not prove usable runtime capacity", + "use_cases": [ + "U09", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.resources.security-capacity.md" + }, + { + "repo": "fin-hub", + "id": "capability.finance.security-budget-evidence", + "name": "Budget and cost evidence for security operations", + "availability": "A4", + "operational_estimate": 2, + "surface": "Budget, commitment, spend attribution and planning-evidence consumption", + "limitation": "No verified concurrent runtime EUR risk/cost enforcement for agents", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.finance.security-budget-evidence.md" + }, + { + "repo": "rail-knative", + "id": "capability.railiance.knative-rail", + "name": "Knative workload lifecycle", + "availability": "A2", + "operational_estimate": 3, + "surface": "Derived rail for activation, revisions, traffic, scaling and rollback", + "limitation": "Inherits Kubernetes common contract; verified readiness is not production approval", + "use_cases": [ + "U09", + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md", + "declarations/rail.yaml" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.knative-rail.md" + }, + { + "repo": "rapp-sbom-nexus", + "id": "capability.railiance.sbom-runtime-package", + "name": "Private SBOM runtime and dynamic database delivery", + "availability": "A2", + "operational_estimate": 3, + "surface": "Immutable deployment, private network policy, dynamic database leases and migration/rollback", + "limitation": "Product owns schema and ingestion; database and backup authority remain with platform owners", + "use_cases": [ + "U07", + "U12", + "U13" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.sbom-runtime-package.md" + } + ], + "repositories": { + "access-engine": { + "head": "16ca97b2776789f730cc7049a2d6533612faaccd", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:f6c14f5f824fb86ac06368fb9c52e60d627ee42810817a45723d34a6a9a178a5", + "README.md": "sha256:7ed086b4d153ff067f4f8d3665891b65006a4a74cec8e6fb596e7e1dbd097b38", + "SCOPE.md": "sha256:dd1484a32a313135e69f16dbc833d768467491438bbb1d9127c2b098061edb60" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.authorization.policy-evaluate", + "name": "Authorization Policy Evaluation", + "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "flex-auth", + "path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "tags": [ + "authorization", + "policy", + "flex-auth" + ], + "consumption_modes": [ + "source module" + ] + } + ] + } + }, + "activity-core": { + "head": "83e6446807c4b36f3aa5023a5c16d4c7df8bd3df", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:8aec524060edb9309af679ef38bc5549aa3650752634d23977c7ae57c45bbefa", + "README.md": "sha256:549e7878b27bbf7edc9e958c7afbacd3eba773b082151d226b5f0a14af654f9b", + "SCOPE.md": "sha256:820aafbff2f7d1c314c0c270d745468172a0500d106ab276216e0eeb702ca7bd" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.activity.event-coordinate", + "name": "Organizational Event Coordination", + "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "activity-core", + "path": "registry/capabilities/capability.activity.event-coordinate.md", + "tags": [ + "activity", + "coordination", + "automation" + ], + "consumption_modes": [ + "informational" + ] + } + ] + } + }, + "agentic-resources": { + "head": "65b3a5cb6bf3eb214b492b95a38f2eb729f89709", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:81dc51facb26c36ab6b7bc85a22802bbf89c88558c7cb3e749e0c205a0ba24d4", + "README.md": "sha256:4e890352ff6088a2e018a11738a1959971b07b584a4ca3b8fb2aed88b9ea26f1", + "SCOPE.md": "sha256:ba38e80cf2a374063eb6b6b60211a02e32bca5d3b260aea5f8a70978f67a5627" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "approval-engine": { + "head": "e1649617e8ad321f79632d5fd33e973ae5d5ae51", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:06dbab07ed14fa43d0fc6b54eaacc2b3f7b4a9196050e3f73c9c4e58086636c5", + "README.md": "sha256:4d095613decf7d64012e19d4e76823296bdbeedc82cae17c9b5cf752671b45c9", + "SCOPE.md": "sha256:1425d4ae5942cf09197719b1f66989c4d5e8d2d5627c7fa79dc6151908b03990", + "approval_engine/api.py": "sha256:4c686aa3b4d645c4ad2a84a5f299db9b013b59a5c747853837adbe3a3a05be63", + "docs/production-dependencies.md": "sha256:c2244e4a72dc174d0f5e9fc7da6b56fac2596d4b553a11c738976404cef05fa8" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "audit-core": { + "head": "f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:cffd7a3730ea54dab4e745329005813011bb821d9922d9a6aff3977ec46162c7", + "README.md": "sha256:c7ab22ae28d07afc746d7cb10e168291dfbc3207be60cd32ec416ff0f27f51f1", + "SCOPE.md": "sha256:358ecab2cf8e32567f2220c5cd3d9b3f7ce9349faaa8d89bc464d5f82f09e80e", + "docs/stream-completeness.md": "sha256:e3c4b1e0ff5bdd648077ae0b6473a0094ccb4a65e8ce398df11aa43faf0d65cf" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-08-16", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.audit.event-retain", + "name": "Audit Event Retention", + "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.", + "joins": "operations.audit", + "provision": "data/capability/audit-core-operational.json", + "vector": "D4 provision / A4 / C3 / R2", + "domain": "infotech", + "status": "production", + "owner": "audit-core", + "path": "registry/capabilities/capability.audit.event-retain.md", + "tags": [ + "audit", + "retention", + "compliance" + ], + "consumption_modes": [ + "http ingest", + "source module" + ] + } + ] + } + }, + "coordination-engine": { + "head": "c401067842072b75717f76480dd6e7db1836059c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7236c8dc284fcbe81c47eedde25e197d5a911a73267bfd448f8930140d2f6fd9", + "README.md": "sha256:fa6812b74956387a85cf07ccf3ef05f79aa07ca937e6f5d073edd318238e768d", + "SCOPE.md": "sha256:e207efd8bf40ede4ad6c2705121cefc809467dab72746054850c62f2e2e3a12e", + "spec/cross-owner-wait-mode-v0.1.md": "sha256:42f51f8dd1523a1243797fc3fc21a0d6d756c4e9d9d77142296735c1ef6de915" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "emergent-security": { + "head": "4c6fda38298fa50665ead41526b893adf069d335", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:64daea4874c8d8822a52437b15ffc8f9d5e30491dd0b61d0958bd186d1dc7269", + "README.md": "sha256:40e23e0233f5b33949fc25047cea13b827af3d44bd73e00b3c4eb8b1feb338cc", + "SCOPE.md": "sha256:b90916cef962e5999c8fee886f5d0b68f55707a38f428a20d0390d2bf2c0d603", + "knowledge/cards/start.md": "sha256:698a18f4a8f97a43da75ed0767aa0425c970e17c04a9cbea75cfab719564cc5d" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "fin-hub": { + "head": "8f527c6705bbf5d7ffed43559411ca748bec8fe4", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7697ddd29c8324197c925378c55eadcbf89899903af4321d0325f26e52ca3d19", + "README.md": "sha256:f35fb3d21f6264f8fab0ab204b79c81f82e6f9764ebc06aa0735d330ad854470", + "SCOPE.md": "sha256:2ef38e5d1a36dedfa7785f128a35b0058ae7e123bba834efa41dcc809d18a631" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "gate-house": { + "head": "bc890c4d050a2e726ce8988a8260ab9caea133e3", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:013692bbb52ce85dc1ad8dc95292c64d4e7c2c58714549a1e23331eae5d556e7", + "README.md": "sha256:e2c7b7c94884260f4e3e33d963544299a6076bd63729baa0e03e0bb34c423002", + "SCOPE.md": "sha256:5c7b9bc38fa7887f2188c34cb1110e37f47f2b9ebc4f33e85ef96ef80a1c9a79" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "glas-harness": { + "head": "7b1557ba14f483569b90ebfdc2d0136fa69602fe", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:d9c256243816e372757a256b0c2b87f5a0333fb1d65f0488b66600f985553cf2", + "README.md": "sha256:23179d6a1760e442fa025ac73aed050ee0141e985e87979c0a05781fdc2ca350", + "SCOPE.md": "sha256:5a2b96f8a3aa7218ad43dbd72abc89319a44c329298e973589f49c4ec354b0c6" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "info-tech-canon": { + "head": "3d206a56f4ece439f6ee87f9ee4d1800ab82166e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:aa739b333929bc5d36a0654ef5afea1b9dedabad38da0c335f3d8b0f17a38bad", + "README.md": "sha256:55f21ebac58356dabdd032d4396a6eb0e3af4c5d13c900667fb79827879b58b1", + "SCOPE.md": "sha256:342ee894c1d6d64da76ff521eeb3c21279c55c6e7b7f0892b34f54c2d89e91b3" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.canon-service", + "name": "InfoTechCanon Service Surface", + "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.", + "vector": "D2 / A2 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "info-tech-canon", + "path": "registry/capabilities/capability.infotech.canon-service.md", + "tags": [ + "canon", + "infospace", + "service" + ], + "consumption_modes": [ + "cli", + "library import", + "http api (read-only, local)" + ] + } + ] + } + }, + "informed-decision": { + "head": "ee6a65b80a0fea1a914dfa31434b903669656c09", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:b543c2d80b97182393e2d080ae8fd3759f2e956a89306c2c568c0010e7425eeb", + "README.md": "sha256:7d2bcb581348c4cae55b59550eb7a9ef34abaa928375acae28ec41878c5abb7b", + "SCOPE.md": "sha256:ab352aa1a88ca53106517b14eafc62a3cb6504519638835227e6f852b3cdf68b" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "issue-core": { + "head": "de368271f6ffc06353ec409998a0d6d0ec0bf25e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:fb6e1f77fed6b5ae110fdcfb92dd96263050c1907702a1f380895930a8ad0dd9", + "README.md": "sha256:00281e7af8fc9c8f9c41a46a71a959faea4c6db1c08c6c4b5b3fe3a5808b271a", + "SCOPE.md": "sha256:c43d8c15cf0b85dd8558bc0031a0662d668de9c0394eb2045a7735d044d7ed0e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-07", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.issue-tracking", + "name": "Universal Issue Tracking Coordination", + "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "issue-core", + "path": "registry/capabilities/capability.infotech.issue-tracking.md", + "tags": [ + "issue-tracking", + "coordination", + "multi-platform" + ], + "consumption_modes": [ + "cli", + "library import" + ] + } + ] + } + }, + "key-cape": { + "head": "1344fc80e56315c5c99f58993f9ee02ce79e8a76", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md", + " M src/internal/server/oidc/authorize.go", + " M workplans/KEY-WP-0039-openbao-negative-probe-tokens.md" + ], + "source_sha256": { + "INTENT.md": "sha256:b22cb440691bb399b064ee10ab1a03e1e07838da1051bf6235fbfe2cf820eb10", + "README.md": "sha256:953586cca96d01e9240448186b922c9b8ea03827a7f314731e9a9ead4f19d0d3", + "SCOPE.md": "sha256:20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.iam.key-cape", + "name": "KeyCape Lightweight IAM (NetKingdom Profile)", + "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "key-cape", + "path": "registry/capabilities/capability.iam.key-cape.md", + "tags": [ + "iam", + "oidc", + "netkingdom", + "security" + ], + "consumption_modes": [ + "service (self-hosted deployment)" + ] + } + ] + } + }, + "kings-guard": { + "head": "af02e2547598d6ec0e83f482d9ea3ef943ea67b7", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:923fd2ce1a22c29d486f562071a0a251c16b64fbb5d73490cac4d373daa0c83d", + "README.md": "sha256:57983baf2275d9afbd5109782cfe1f3559145f4ee906ea97345c6d517a5e4fc7", + "SCOPE.md": "sha256:8e77e587c67aa419df35d4f642468bb57bc30df65e1ea6a922fdca282ea9ed63", + "docs/SecretUseSnapshotAdmission.md": "sha256:7fd32df4c8203d83aa14334ccaed0700682730679539a5c657d93f5efbf5d31c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "maturity-engine": { + "head": "2f1de542cc8f24a79452f906d99f95be39d8b6a9", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:d17b9169ad82b60450244988dafa3ab4a515790ee08903a7fcee9df5fd8eae0c", + "README.md": "sha256:66333483d63f45c2dd744661610d062440569955bb150927ebd9d21d72b85daa", + "SCOPE.md": "sha256:653f47b0d370dfdb45c723b361f6fee53be7e384732c201443d7238c04d155bc", + "docs/claim-contract.md": "sha256:082490f3651db8f771dfd72c42f5c5df4c3317361c9dec1ec0f0dc9814f80a2a" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "net-kingdom": { + "head": "1a36e857cc5aae6fe738f794417126c46dd94627", + "branch": "main", + "dirty_paths": [ + "M WORK-RECORDS.md", + "?? intakes/NET-IN-0005-single-use-setup-link-mail-handoff.md" + ], + "source_sha256": { + "INTENT.md": "sha256:fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54", + "README.md": "sha256:25172bafe09fd3a26467d44a74ca90e8f123bc81bfa2784a483837c0e9efe9fe", + "SCOPE.md": "sha256:0f896db98d03aa7460d88999b738ea00be87dd34fe0b250f11bf0b6f170b0172", + "SECURITY-COMPANION.md": "sha256:06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643", + "canon/standards/security-case-types_v0.1.md": "sha256:a4fda906d5138d2594a1f8d047c7c28e1cdf96b1eae051f543b9a5e5852bcb5e", + "tools/custody-record/README.md": "sha256:ec653a17b4f35e56d37824c1db15f1ea6b1761c564863fca4ea168a3ed625000", + "tools/emission-cadence-profile/README.md": "sha256:a4adadb43b0d55f7d705d89166ef63ce01aceeff742b260039263dda92ce85b8", + "tools/posture-feedback/README.md": "sha256:83b8de1da01de77318e950c9266e5f2755091dbd0e5a318d75bc5cc8f556ef18", + "tools/posture-feedback/posture_feedback.py": "sha256:629779308e4965be3aabbb76f105fd9c8b532c64987915d2ccab5b543273bfe4", + "tools/security-bootstrap-console/README.md": "sha256:bc1af3598d667346370a476d0765bff1f0c3ebb57f751c4da6e61a4add29f30d", + "tools/security-case-types/README.md": "sha256:03e1c503bc60990214d5b1a7cec8878cf47fc892d82c82d682f3490e33dc71f5", + "tools/security-scenario-composer/README.md": "sha256:447554e04816c0bc815f57d9138430d354790c9f3813e48bbd38fee034f98015", + "tools/security-scenario-composer/security_scenario_composer.py": "sha256:9f0cc69930aa8ee2cc3fb92236e6a99728df17b8c0fe36e1250241c38fc01c4f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-08-23", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom Security/IAM Tooling Suite", + "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.", + "vector": "D3 / A2 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "tags": [ + "security", + "iam", + "kubernetes", + "conformance" + ], + "consumption_modes": [ + "cli", + "local web ui" + ] + } + ] + } + }, + "ops-bridge": { + "head": "190ef1e188e12c606f1359325fd9fdd1dbef29e2", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:2134f693649803414d7ab2f9839416f1fe06169aa86732e64c9dd962c35f412b", + "SCOPE.md": "sha256:63cd52d1cdf38e72af0285c25aa2292f959080c6befe565a1d2690747a813975" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.ops.tunnel-bridge", + "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)", + "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.", + "vector": "D3 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "ops-bridge", + "path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "tags": [ + "ssh", + "tunnel", + "ops", + "connectivity" + ], + "consumption_modes": [ + "cli" + ] + } + ] + } + }, + "ops-mason": { + "head": "d86ad141befb6800468f5132d4c7c9ce2f852bb5", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:482269782f4fd337f83674b4e2c36a5cd9f8eb694918e55709e9a7e78a003c71", + "README.md": "sha256:9e0c9b5c76c3a2d4aeeaf032579e96d8da9056662ac4655b8885b16ed7f3bca5", + "SCOPE.md": "sha256:7da4c8c660b1c8d15675768a5f6040303fe3ca3b4f05b1bba4633be3cc6e0c77", + "docs/construction-plan-format.md": "sha256:468678089885193b8fefe3993cd6878bbdbeaaa64aa088b18b90047b696ce564" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "ops-warden": { + "head": "6d2f1be9691b19e826898a2166ae4451e4802ae2", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:3e9382fefa52ee0970dfac133cc799656e5034760b26dccc1bf9bab65fc538d9", + "README.md": "sha256:1f11071d7fd651806da180272cc4aa4e3ae19d7bad0e321aa97c7dcaea7f2857", + "SCOPE.md": "sha256:47b47468746617c84f8411ac671bb488ab740b4c3133401f5d7b55d3d024345f", + "wiki/CredentialRouting.md": "sha256:544530cc13052e33d2135fa3b0583e620010abb0af86079be6d8e09c36844646", + "workplans/WARDEN-WP-0044-security-case-follow-through.md": "sha256:c0029545bd2d8c015ae0cac87f6d53a2e5ee935b7bf5d5e1b81bf1ff5dbdc4f8" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-17", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.security.ssh-certificate-issuance", + "name": "SSH Certificate Issuance", + "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.", + "vector": "D4 / A3 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "ops-warden", + "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "tags": [ + "ssh", + "certificate", + "ca", + "ops-warden", + "openbao", + "security" + ], + "consumption_modes": [ + "CLI", + "cert_command subprocess" + ] + } + ] + } + }, + "policy-nexus": { + "head": "f784f017b0822f34c785f0b34c7c55fcf39c9d99", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:58b95e4e158da6b978b9bd3a2ecbaf7f279553098906a8e8ed404afd3d582494", + "README.md": "sha256:cc3a825974a8cea0c737a16cc8b06d3fec56e10f593c6ed7169bc54786df5a81", + "docs/publication-contract.md": "sha256:65a9a233201ba966db0f2c5465ff3b0684147af3075f43180b8eefb3e059abb4" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rail-kubernetes": { + "head": "35159e49c1340b7a0e30c49188975c8839d346f6", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:72a64030f25f0474e4f3837860d3eba60e3d5a1c2b31e8f6d062e15da8f209c4", + "README.md": "sha256:89c6c0155f3d9829c7d0ff33f27883ed2fdd8f6d857eae013656136467296cd2", + "SCOPE.md": "sha256:00fce3ee7cb4bbbd7eff210adb2a03c533f2b43870f7327cfc35f28354bb549a" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "railiance-apps": { + "head": "706461b845086ee2df8ce9acae3dae7feebfffda", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:31060dc1738aa4540f78735019359a276ece39dad8afbf1be740713bebbe65e5", + "SCOPE.md": "sha256:8243098d979d4258c9e7f9e39b5de24ce78b521cd82a7e199028df30bc130b14" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.workload-deployment-tooling", + "name": "Railiance Application Workload Deployment Tooling", + "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.", + "vector": "D3 / A2 / C1 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-apps", + "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "tags": [ + "railiance", + "kubernetes", + "helm", + "deployment" + ], + "consumption_modes": [ + "cli (shell scripts)", + "helm/kubernetes deployment" + ] + } + ] + } + }, + "railiance-bootstrap": { + "head": "ae00b2652737aaf18358431e66f59eeb7c01e16b", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:c1840c7df1cb87d72a22a7b1bc95417687a0a9d9355b6ffb50392d8bf6ae241f", + "README.md": "sha256:3acd2adcf4bf3c3801be99c95d96da8ac7638f5a21c03d6f987505402a00afa6", + "SCOPE.md": "sha256:4efdd7f7817e39c01d6024e2f8bcbd70c2b10b90baf9f92855bb3967cd629831" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "railiance-cluster": { + "head": "12d1e881ff2086566712fbc591db293b38ea2bcf", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:a00fe12563c77734e19b538ca8307d44fcfae9f040bec284c705146f99bb3490", + "README.md": "sha256:5c82b7c31adb126e1f95ccd5057156888fff73a05828abd5e8ab3e013c7fe59f", + "SCOPE.md": "sha256:e4f6a8dd3d72a1f04f0d94721d57ca2a4c7e98790a8373876a5005b87ec5d8a6" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.cluster-bootstrap", + "name": "Railiance Cluster Runtime Bootstrap", + "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-cluster", + "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "tags": [ + "railiance", + "kubernetes", + "iac", + "bootstrap" + ], + "consumption_modes": [ + "cli", + "ansible playbook" + ] + } + ] + } + }, + "railiance-enablement": { + "head": "51a7c4cee68b48ed7a236e661b39c1d3cca92063", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:5a562d3f019156969948315e8072ce925c81e21d027a47096e21c8535473a588", + "SCOPE.md": "sha256:2a554aef6d6803f1a176ea3bdb3bcc0f077f03d131b0a897a5ec56bd6df85f88" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.ci-enablement", + "name": "Railiance Developer Enablement And CI/CD Templates", + "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.", + "vector": "D3 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-enablement", + "path": "registry/capabilities/capability.railiance.ci-enablement.md", + "tags": [ + "railiance", + "ci-cd", + "developer-enablement", + "forgejo" + ], + "consumption_modes": [ + "ci workflow template (copy/reference)", + "cli (promote-repo-to-forgejo.sh)" + ] + } + ] + } + }, + "railiance-fabric": { + "head": "96d19127125e85bdab7ff0ff79fc3ecf7d19045e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:1cdca96e57849709aef333c88ace903f9573eeb2894f52246e473928c7e3846c", + "README.md": "sha256:8705fec071bfe75d3bdfcc5677ac8801f5d66b5ee3a49043cc8d019443a1fb8c", + "SCOPE.md": "sha256:b80d4a8b39c2920818ba4069318f888e56736a0f0e8d40f3a72568b0472fb36d" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.fabric-graph", + "name": "Railiance Fabric Ecosystem Graph", + "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-fabric", + "path": "registry/capabilities/capability.railiance.fabric-graph.md", + "tags": [ + "railiance", + "graph", + "ownership", + "discovery" + ], + "consumption_modes": [ + "library import", + "cli (validation)" + ] + } + ] + } + }, + "railiance-forge": { + "head": "a15fac8e938c11b041eb39386f05b63d46ae566a", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:310d6ad12a1f621c05396a3d6aab19ff8a6bacc4f67814e64d07f09da124ea54", + "README.md": "sha256:e10a07e1b8935a444699ee456f6d3f98e02109d7e453db41823a31261d181b2a", + "SCOPE.md": "sha256:dc4c179e33898e32fae7b2e8e30e88a66d9efc3ad2f488651ccedf600274c1b8", + "workplans/FORGE-WP-0006-independent-secret-detection.md": "sha256:fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.forge-infrastructure", + "name": "Railiance Forge And Artifact Infrastructure", + "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-forge", + "path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "tags": [ + "railiance", + "forgejo", + "forge", + "ci-runner" + ], + "consumption_modes": [ + "cli (operator tooling)", + "documentation/runbooks" + ] + } + ] + } + }, + "railiance-infra": { + "head": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:00d05aeeedd6e11527fdacd35070a37c0b67ff16914ed6ce0f634baaded5f1ae", + "README.md": "sha256:dcea6117a34fa466e75c7943fb43dcfc42eb8f6f6c9c5207458eb7621e694ced", + "SCOPE.md": "sha256:18cdf933d658eeddcb68528bb9c222ceb0866d8c5f0ec4bb3ea955de762c3c33" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.infra-provisioning", + "name": "RailianceHosts Infrastructure Provisioning", + "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.", + "vector": "D4 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-infra", + "path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "tags": [ + "railiance", + "terraform", + "ansible", + "infrastructure" + ], + "consumption_modes": [ + "cli (terraform/ansible)", + "gitops" + ] + } + ] + } + }, + "railiance-master": { + "head": "865c3bed86b3992244b29d6f1d6b8ebbe8db78c7", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:dacbc59b7d42412e3e65d3d16ce058d0bde486e16435112c7abf83b696572eda", + "README.md": "sha256:4a706ec49c177ef13343ea3e56e61bf5a7bd6c601562b301a87189690ee800ff", + "SCOPE.md": "sha256:63ebaef0397795257650521e6f3be6b46cca1142f53b1865d9df9ed0c0530fc8", + "docs/netkingdom-security-consumption-contract.md": "sha256:be50d016b7cd14ac27127a2c641c4a9a0c8d1605495ba62ba5cf30ef0f65bab7" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "railiance-platform": { + "head": "d303c99e3be993ffa989bc9ba3d7b471903858ce", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:12c6540735af591f7a4a9fe85ff10d3cd00eec55b5b6b1ddf148abf2d3ac9a9c", + "SCOPE.md": "sha256:bb18dc91f3be50337d7ebc81d269f1234f65919f7014eef990b09c3df54a5347", + "docs/openbao.md": "sha256:9c92b0e30c81351b258da44df46720f4cdd2941488a7ca2f8687b8937da8099b" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.platform-services", + "name": "Railiance Platform Services", + "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-platform", + "path": "registry/capabilities/capability.railiance.platform-services.md", + "tags": [ + "railiance", + "platform", + "secrets", + "postgres" + ], + "consumption_modes": [ + "cli (shell/python scripts)" + ] + } + ] + } + }, + "railiance-telemetry": { + "head": "81d905971c38de9aaf11088ba605e112152d8268", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:de793b403514f8c7984ba7c20608ecca9d1fea422d3fcc20ec186a0d7c2f2f47", + "README.md": "sha256:4fdb18006ab2e5a0c4d72127324a88c7abacb55a30b80de6a95e55ce46c56468", + "SCOPE.md": "sha256:206279dabc14fe1a44ba6df8ad2b664cc91d3460379b732951d3e29bb6a814da" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-openbao": { + "head": "13ab9144bbb1d88fe760362df91a83c8b34e4e66", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:28b74eec385f6cef4f8c846992f10b6067ce436cb9d52de19338dd57c111f90e", + "README.md": "sha256:9964de809b5b645c24871774621747f9d6ce2f069443d507b9ef9616ee255d85", + "SCOPE.md": "sha256:cdcf80122c8c55dfe697312d6cd67b76861f322cae9816b85123aefe2345c674", + "docs/retained-s3-handoff.md": "sha256:d1b2f27f740176ab16f6b4b589b0c25dab41c923d6f377d84059ec8369c0a3b6" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-playwright": { + "head": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:b719684974f35812708e562cd8c0b4573662ae22fd12f4252bd4abaca627882b", + "README.md": "sha256:e64daa81de97b3d2c6afe4028f9a2d4aca6e9892ac36a798316a8d8e8fa80ce8", + "SCOPE.md": "sha256:c1489a7b75a87a3a8b00edb9b9497d256b0e5ec72d5fe5236cc038745215dc91" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-policy-nexus": { + "head": "d3fee97d32ad47e3a7e3201a9c5b7209b4333fda", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:a3ae592c56822697ad24bd64851578b5b17f1a9bd8622a247e3e425a5de594c7", + "README.md": "sha256:41c1bfeaa90d11f4778d22a3e58a97cb9653d153712657ff2e3aecc45dda240f", + "SCOPE.md": "sha256:dfb85b48d6ff68a9945178a5fc1b85f1d342f765d046a58285e7edc52f517438" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-postgres": { + "head": "03744030c9258e920f6403a9ce184a26d7b75268", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:2a9ce4f5eb8fbbffbaeb8532a677c855b97973a6028536520018ccd1796a4735", + "README.md": "sha256:298079470d931ab78d79a0a44274f207606d6a877740d79a8925d9c37f8ff15a", + "SCOPE.md": "sha256:5919caed210fc8c6977845b3469ebe419b0216f6aafa69e01a40b9d12d6050bc" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-telemetry": { + "head": "17053dbc47f7c22efd67fd90d06d108d154835fa", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:fc3ac98e40f67384f3ff94ecf223d89f0713c031ba5ca6093320278b269e4276", + "README.md": "sha256:fd797950ffaa67123773da7cdfa6e45984f367f820caba7c10e0fd300f96d630", + "SCOPE.md": "sha256:3776b5924bd90f8114e77f7bbbcacc7f3713cd56ca26440a3e4bce792ce8b142" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-tenant-engine": { + "head": "c160be23577ab4d99ee2cd008deb455b07f0597d", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:5eb0a651c1fd20a7d60a3a30060431925d2fb3ed64cf6ae22293dcc5546c7251", + "README.md": "sha256:05596b39a47fa22cc4e966714c4c755220894ca54c7759cdd3088e78b31c00e6", + "SCOPE.md": "sha256:fc0c5a80f37c410c10eb29a7541ca37088668e5f76d64ece4e889c7f0145a13d" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-user-engine": { + "head": "15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:891150bf022c2456d62c234db10172a16cb2e1a9c9aa5284aafd5d89755a82fb", + "README.md": "sha256:f1d89f8f1c1cc67f2b79bd2bd3dd94b9a895fcaf308c44b5d8d23fc7b9f1bb7a", + "SCOPE.md": "sha256:732fd68b194d034e81faf170d5a69e1d61cfab5385457b93a5f5689a63a2f184" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "reef-railiance": { + "head": "ffb9e272ce1489cc37cc6388873558d8ba56c239", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:deb16216816dfcc1c42c2d826b6fcd496d9c0e6789169c0312e0bc9d0fa88781", + "README.md": "sha256:31480d89ba5a8f868c28c2b09f62a51d662aad6a0ec93a56340fed39a789c395", + "SCOPE.md": "sha256:a273078d5dc7ceb72bbdf5473b5146cd624411b08bdc6b1e7d78113c4e675cc8" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rein-aharness": { + "head": "398949a3d34b6c9faae0fa1d0ff0aa039565aa42", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:f9a35aa6f9c4803a1d978aeb487ba475830505670871c564a5fecacb77b11ec4", + "README.md": "sha256:da0f62f0eda7bac0018151b73ffa2bcf9cab9dbd796adb285c738c435853afc3", + "SCOPE.md": "sha256:d9979b35ec0909f76e6c34a0f40de2e5cbc700d1bb5c7b5f73c6e2b20e3cbc48" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rein-openweights": { + "head": "e1fccb39b738a5381a9de6e1d799f124797798ce", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:e1284da2b06a44d93e050638d34ab8abf15173bed77f82788ddcc32939359cd6", + "README.md": "sha256:0eb6e6225727770985c4b6442acdb17e8a0d5e707c25aaeb561e47b921f6aa74", + "SCOPE.md": "sha256:f7791a1f858cd7225e217b9b53213066e44ddd7ac4a1e748383a2c8756d3aa3c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "repo-manager": { + "head": "7677b00f69cd6362ac16a1021dc180ec6df4ebfa", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:62afa83ecb1fd733abce07489d48d0d7c7e14ccf9def9f561c118cf8ec5409b2", + "README.md": "sha256:9330836f65bde7466f7a1414f4a6df28682acde710aca0ea3e45be429622c75c", + "SCOPE.md": "sha256:bca5806e11f04e4550ce5c147d4d98e6c0014fed1f17fa3f134e5b193adec43c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "resource-control": { + "head": "3604d468f86ede7d320f4d22dd4aea775306b53f", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:f81326a4f18e284d8f7ca73f71dbe9502b7a75b1d567074e9bec48ebdd968309", + "SCOPE.md": "sha256:2daf0899d730bb6da30bd471f364061b86428cb5e38573df9d5551aff9dd5e29" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "reuse-surface": { + "head": "a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:511d1029a7aefc67b68a6363ed3ce8f803f2516c00062ff805263dffe26c771b", + "README.md": "sha256:6e4dc8d382612320cc2c8558ad583b0564ff594a7032b33137cb7a61887621cc", + "SCOPE.md": "sha256:2c30972ceb2a643147ce61c04c6919b16797b6754c2a407df998c81ce76c9c30", + "docs/RegistryFederation.md": "sha256:bfc80be5eac1250189ac2ba726a6188c03928ccf1e9992ec58cf59e58009f289", + "schemas/capability.schema.yaml": "sha256:3b0172baa4e6d54f400e911af6adb0d86b4576b86d7aea6d8f18c3fce3b8ae3f", + "specs/CapabilityMaturityStandard.md": "sha256:3eb3c7e1dd51b85e993c9936b2a176f6b3998e6198666695bdbb5b7ba7d8b17c" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-10-13", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.headless-browser", + "name": "Headless Browser Automation", + "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.", + "vector": "D3 / A5 / C2 / R2", + "domain": "infotech", + "status": "reviewed", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.infotech.headless-browser.md", + "tags": [ + "headless", + "browser", + "automation", + "playwright", + "chromium", + "testing", + "screenshots", + "extraction", + "firefox", + "webkit", + "selenium", + "puppeteer" + ], + "consumption_modes": [ + "informational", + "source adaptation", + "JavaScript library", + "Python library", + "cli", + "service API", + "container" + ] + }, + { + "id": "capability.registry.register", + "name": "Capability Registration", + "summary": "Register a new capability so it becomes visible for planning and implementation reuse.", + "vector": "D3 / A4 / C2 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.register.md", + "tags": [ + "registry", + "governance", + "meta" + ], + "consumption_modes": [ + "informational", + "markdown authoring", + "cli", + "service API" + ] + }, + { + "id": "capability.registry.validate", + "name": "Registry Entry Validation", + "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.", + "vector": "D4 / A3 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.validate.md", + "tags": [ + "registry", + "validation", + "cli" + ], + "consumption_modes": [ + "cli" + ] + } + ] + } + }, + "risk-nexus": { + "head": "b877231d66e1289dc32fda07ed2c61dcb3e970dc", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:38783193bce6e05a502463a0965341fe7940cc98d72c800c7d70a36e9defae83", + "README.md": "sha256:05dd751b2569801f5bc0971b3ebeeb263b3488a880cb334c3b4f076ed15d6ceb", + "SCOPE.md": "sha256:82e5f7476f5ebe327bc720691f858f3dbac3990da6860ac8114f83c3b287394c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "role-engine": { + "head": "d231241dbfeeb541b34243f4022883aa6417a1eb", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:06678fc42521c91514ef9684674479c70ae47ee829e7a1e5e6c5d7ae54c0d7a2", + "README.md": "sha256:a98b021f59566bce52d02b7f7e2c9f2d3f637f9357037c54d752c69a13cb15bf" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "runbook-tutorials": { + "head": "df97fadf5decfcdb5c3c6ab90211226335ffdf8e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:6a96bddd785357c6084d3137c66c188b9266f9e69cd1ad6e2c2562106a296b63", + "README.md": "sha256:747bd15db6182f5f473a4a774ade282d14341f63ee427c0cd862cbd3a6c0a6d0", + "SCOPE.md": "sha256:5da9ba54026809314e6c0d97894642ca705793cb752c8a9cb535551cef9aee5c", + "docs/pack-spec.md": "sha256:075a67476ba9226e79bc955caa039c9c1bad6ead96a7e61fb8e68b8ea56d2a0d" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-09-29", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.infotech.runbook-tutorials", + "name": "Runbook-tutorial engine", + "summary": "Engine, local UI and CLI for guided, parameterized operator runbooks; packs live in the repos that own the procedure.", + "domain": "infotech", + "status": "active", + "owner": "runbook-tutorials", + "path": "registry/capabilities/capability.infotech.runbook-tutorials.md", + "tags": [ + "runbook", + "tutorial", + "operator", + "guided" + ], + "consumption_modes": [ + "git clone", + "cli" + ] + } + ] + } + }, + "sand-boxer": { + "head": "b06d94f02b037764ff41c73c8ab43f4c8f5d309d", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:a87d81568311ae5bee941183f10eb23fbe60541dc41d2c5a7fbfbac52a89dd37", + "README.md": "sha256:d5038e80f041429f8f8f8e2fc9b2b45a223a5478731ab7c75592378a174e0d2a", + "SCOPE.md": "sha256:68f4623825cc54ebbbe777b0abd78a358cb3232bf2f6577980c6fc945a80ed7a" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-22", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.execution.sandbox-provision", + "name": "Sandbox Provisioning", + "summary": "Isolated execution environments for agentic development, e2e testing, and bounded automations \u2014 profile-based provision, TTL teardown, and State Hub lifecycle registration.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "sand-boxer", + "path": "registry/capabilities/execution.sandbox-provision.md", + "tags": [ + "sandbox", + "isolation", + "provision", + "e2e", + "agentic", + "execution", + "profile" + ], + "consumption_modes": [ + "CLI", + "core library" + ] + } + ] + } + }, + "sbom-nexus": { + "head": "07e998d9abfd4e4fcc74db9e292ed22c6f407522", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:0e3eed8bc510109f615d0739502cf15c2aa5a025e74db01a6cedfb316f2d9e58", + "README.md": "sha256:8cc888ebf6370cabb1cfe1539b11e372e3f432dda2aa303c8470a5fc32f70844", + "SCOPE.md": "sha256:32f6e853b366c5097b3ab1a3d05413a0091ec48585de4def7adcbacd57da02ba" + }, + "missing_review_artifacts": [], + "existing_index": { + "schema": "reuse-surface.capability-index.v1", + "repo": "sbom-nexus", + "capabilities": [ + { + "id": "capability.infotech.sbom-management", + "path": "registry/capabilities/capability.infotech.sbom-management.md", + "status": "emerging" + } + ] + } + }, + "secrets-engine": { + "head": "d379a3dfba73c42cd97f4d9cba3a02d705155e4d", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:188dc6d99ca9a441e7389a3715ba48275ab6e8745deaff686bd27d2aac34d678", + "README.md": "sha256:6c85cc0e1f57fcc06ef00368d0b7ea1a02657a8a1358bebc38be446be20deeed", + "SCOPE.md": "sha256:d77af9b9bab0383928120b80ed4a70f471cf244e22718ee6feb6039a70aedf6f", + "src/secrets_engine/decision_check.py": "sha256:a8c9a45320b752871bf6b8238cc25074e8f08ed29fee131e99030606fc091e6e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-24", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.infotech.repo-template", + "name": "Coulomb Repository Template", + "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.", + "vector": "D3 / A3 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "repo-seed", + "path": "registry/capabilities/capability.infotech.repo-template.md", + "tags": [ + "template", + "bootstrap", + "state-hub", + "onboarding" + ], + "consumption_modes": [ + "git clone", + "informational" + ] + } + ] + } + }, + "security-canon": { + "head": "1664a6def20be2759a1e575024563efd27c9f36f", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:d2e8ebdbc9500b613162c45145f50fd88471beeca3e96ebe6c2df5d85d07539c", + "README.md": "sha256:0ab66ab06438b14b86cc67ad0084ef88126618a283a37baed663176709ef1236", + "SCOPE.md": "sha256:74ebe3d738fa554be113866e82cd2b049c49b4c7a302c61f21ffadf31c297ce8", + "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md": "sha256:f79a6dfe1067028810677426cb7e8c5be16735074121437f3cc97849d08fb72b" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "state-hub": { + "head": "8ca9201f6a1445c66fe1d1b0ba0c8d044c131647", + "branch": "main", + "dirty_paths": [ + "M api/main.py", + " M api/models/__init__.py", + " M api/models/agent_message.py", + " M api/routers/messages.py", + " M docs/inbox-change-feed-contract.md", + " M workplans/STATE-WP-0094-routed-gates-and-owner-returns.md", + "?? api/routers/message_feed.py", + "?? api/schemas/inbox_feed.py", + "?? docs/evidence/legacy-meter-weekly-review-20261014.json", + "?? migrations/versions/c4d5e6f7a8b9_inbox_feed_revision.py", + "?? tests/test_message_feed.py" + ], + "source_sha256": { + "INTENT.md": "sha256:4888ffa0a126a26bef3ba94658c76c3a23dbdc1399f4686c94e325b9d934e85f", + "README.md": "sha256:af3dde630cbc54664aab3681190e3095f04facd4e9b3fbc9cac7c279df05fc2d", + "SCOPE.md": "sha256:cfdd20b8718d92db1413c9bfcccdb1ae1e7fdee638aadcedf6508cee9f7c713f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.statehub.progress-log", + "name": "Work Progress Logging", + "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.", + "vector": "D4 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.progress-log.md", + "tags": [ + "state-hub", + "progress", + "coordination" + ], + "consumption_modes": [ + "service API" + ] + }, + { + "id": "capability.statehub.workstream-coordinate", + "name": "Workstream And Task Coordination", + "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.", + "vector": "D4 / A4 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "tags": [ + "state-hub", + "coordination", + "workplans" + ], + "consumption_modes": [ + "service API", + "HTTP REST" + ] + } + ] + } + }, + "tenant-engine": { + "head": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:c2deaef01f7492ca1b39f52e36bf703f6a55b04158b2888b7befae73452ce285", + "README.md": "sha256:4beddb32ea5dae1f67e0b489b63f13f7ba9bbc4d3c7f27b80957a199bcf144e0", + "SCOPE.md": "sha256:63f86c1bc39110db862fe60e273703463415e6e0365e4c058ab6c65be399d62e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-23", + "domain": "infotech", + "capabilities": [] + } + }, + "the-custodian": { + "head": "3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e", + "branch": "main", + "dirty_paths": [ + "M WORK-RECORDS.md", + "?? docs/assessments/netkingdom-2026-10-14/", + "?? workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md" + ], + "source_sha256": { + "INTENT.md": "sha256:6ccb4f1f2c8a87f27d59dcfcafaa654d68ff90ba09b94c863d5d444b2a35052c", + "README.md": "sha256:238b643e0c94446cf04bc8ac5d69e4c57d0f681825b5c45b9d444e6198f83f1a", + "SCOPE.md": "sha256:6d64208332890f24f04ae8d6f9067bcd8ed3b541e245fb2649ea3435f401b459", + "runtime/README.md": "sha256:c9bcfe727705b1503447d863f6fed4a84e97eb18a84b335c9073dac6dbb756e4" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.agents.custodian-runtime-tooling", + "name": "Custodian Runtime And Repo-Classification Tooling", + "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.", + "vector": "D2 / A1 / C1 / R0", + "domain": "custodian", + "status": "draft", + "owner": "the-custodian", + "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "tags": [ + "agents", + "runtime", + "classification" + ], + "consumption_modes": [ + "library import (runtime/)", + "cli (tools/ scripts)" + ] + } + ] + } + }, + "user-engine": { + "head": "85a419d6c5d0b4434d3ca7f33bde3092f5838f79", + "branch": "main", + "dirty_paths": [ + "M workplans/USER-WP-0035-onboarding-handoff-findings.md", + "?? .claude/settings.local.json.", + "?? docs/evidence/2026-10-11-setup-link-owner-handoff/" + ], + "source_sha256": { + "INTENT.md": "sha256:8aa0f276e0879d3545338727188a1fd5af973c43acbfa986a135b20979ec7ba4", + "README.md": "sha256:74f788850117b3a1d6a1e06f68a26cbf699f8da9a27ed58d68d552a6e40dec3d", + "SCOPE.md": "sha256:0e863e1cc93e2aac373f566db4a4445348a930029a1c0968cf8e30c456b003e8" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.identity.user-engine", + "name": "Headless Multi-Tenant User Engine", + "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.", + "vector": "D4 / A1 / C2 / R0", + "domain": "communication", + "status": "draft", + "owner": "user-engine", + "path": "registry/capabilities/capability.identity.user-engine.md", + "tags": [ + "identity", + "user-management", + "multi-tenant" + ], + "consumption_modes": [ + "library import" + ] + } + ] + } + }, + "whitehat-security": { + "head": "5587a8f6ac4b129527db819bc72832051c7fcc3b", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:acef2293815fb9bded28a60ee1bc47c196bb38541a28265d895d69ae773731ba", + "README.md": "sha256:3ddf3898b71ffaffec497e4e821f2a048d3cec1ae4269872b203db3422e14aca", + "SCOPE.md": "sha256:394dc1d432d4dd3eec735289ef83a8beedeb3afce667f5a8c3a052902a1e26ba" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "zone-engine": { + "head": "b5a6f88a82b125ebc82c0484bec1ea541e4f95d0", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7684ce5960c2623fe4a295e17f777326daad88d6d7c274002a71cf6046537c51", + "README.md": "sha256:194caa3a00b9ff041511a7e7a7c550f8e2b2906d1e71f2a9b05aef3220039806", + "SCOPE.md": "sha256:953dbf718481adae00fa53258ede0632df65bdc7f6a1cb3e1dd3344357dba80d" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rail-knative": { + "head": "cd38dba3653e7fc85d3b2d3a074811b9a7216f25", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:8df1e3a222f32462b682d7a2e655913051d289303e899e71eb2f43fa1ef1aa7c", + "README.md": "sha256:6e8384a5753332735e9947884e7a52721d4145bb91a1061ca8c4ac63fb7ac4ec", + "SCOPE.md": "sha256:d5c9f0433a25825ce2b77f6caef8bc20dba303b07596233904975226e33e3d87", + "declarations/rail.yaml": "sha256:4a33c43a098657acbd7d43f1790473e22363be744b19c2d3fb035da205d204db" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-sbom-nexus": { + "head": "1566bcf69fc0757db5efc67f78b14af10d944c1b", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:15cb4502390da82fab13acdfd75b393b0fceb76183811080f097c768e0c2a417", + "README.md": "sha256:1fd7e5f69efdba122b57508e17dc001f623fb80a3f5ac0de093fbbea8ad07a76", + "SCOPE.md": "sha256:a20b2c4492a6ff54986e79d40836e7633a4b6ae578330fb87c06eb41aaf81f4d" + }, + "missing_review_artifacts": [], + "existing_index": {} + } + }, + "inspected_nonproviders": { + "rapp-secrets-engine": { + "status": "retired compatibility stub", + "source": "/home/worsch/rapp-secrets-engine/README.md", + "capabilities": [] + }, + "rapp-forgejo": { + "status": "placeholder; missing declarations/rapp.yaml", + "source": "/home/worsch/rapp-forgejo/README.md", + "capabilities": [] + } + } +} diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json b/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json new file mode 100644 index 00000000..b2a23c7c --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-after-publication.json @@ -0,0 +1,2154 @@ +{ + "version": 1, + "updated": "2026-10-14", + "domain": "helix_forge", + "collision_policy": "warn", + "sources": [ + { + "repo": "access-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/access-engine.yaml" + }, + { + "repo": "activity-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/activity-core.yaml" + }, + { + "repo": "agentic-resources", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/agentic-resources.yaml" + }, + { + "repo": "artifact-store", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/artifact-store.yaml" + }, + { + "repo": "audit-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/audit-core.yaml" + }, + { + "repo": "can-you-assist", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/can-you-assist.yaml" + }, + { + "repo": "citation-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-engine.yaml" + }, + { + "repo": "citation-evidence", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-evidence.yaml" + }, + { + "repo": "citation-work", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-work.yaml" + }, + { + "repo": "commerce-canon", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/commerce-canon.yaml" + }, + { + "repo": "config-atlas", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/config-atlas.yaml" + }, + { + "repo": "coordination-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/coordination-engine.yaml" + }, + { + "repo": "core-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/core-hub.yaml" + }, + { + "repo": "domain-tree", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/domain-tree.yaml" + }, + { + "repo": "email-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/email-connect.yaml" + }, + { + "repo": "evidence-anchor", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-anchor.yaml" + }, + { + "repo": "evidence-binder", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-binder.yaml" + }, + { + "repo": "evidence-source", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-source.yaml" + }, + { + "repo": "feature-control", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/feature-control.yaml" + }, + { + "repo": "guide-board", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/guide-board.yaml" + }, + { + "repo": "helix-forge", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/helix-forge.yaml" + }, + { + "repo": "hub-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/hub-core.yaml" + }, + { + "repo": "human-resources", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/human-resources.yaml" + }, + { + "repo": "ihp-railiance-probe", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ihp-railiance-probe.yaml" + }, + { + "repo": "info-tech-canon", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/info-tech-canon.yaml" + }, + { + "repo": "infospace-bench", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/infospace-bench.yaml" + }, + { + "repo": "issue-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/issue-core.yaml" + }, + { + "repo": "kaizen-agentic", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kaizen-agentic.yaml" + }, + { + "repo": "key-cape", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/key-cape.yaml" + }, + { + "repo": "kontextual-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kontextual-engine.yaml" + }, + { + "repo": "llm-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/llm-connect.yaml" + }, + { + "repo": "markitect-filter", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-filter.yaml" + }, + { + "repo": "markitect-main", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-main.yaml" + }, + { + "repo": "markitect-quarkdown", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-quarkdown.yaml" + }, + { + "repo": "markitect-tool", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-tool.yaml" + }, + { + "repo": "net-kingdom", + "count": 6, + "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/net-kingdom.yaml" + }, + { + "repo": "open-cmis-tck", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-cmis-tck.yaml" + }, + { + "repo": "open-reuse", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-reuse.yaml" + }, + { + "repo": "ops-bridge", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-bridge.yaml" + }, + { + "repo": "ops-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-hub.yaml" + }, + { + "repo": "ops-warden", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-warden.yaml" + }, + { + "repo": "phase-memory", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/phase-memory.yaml" + }, + { + "repo": "railiance-apps", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-apps.yaml" + }, + { + "repo": "railiance-cluster", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-cluster.yaml" + }, + { + "repo": "railiance-enablement", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-enablement.yaml" + }, + { + "repo": "railiance-fabric", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-fabric.yaml" + }, + { + "repo": "railiance-forge", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-forge.yaml" + }, + { + "repo": "railiance-infra", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-infra.yaml" + }, + { + "repo": "railiance-platform", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-platform.yaml" + }, + { + "repo": "repo-scoping", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-scoping.yaml" + }, + { + "repo": "repo-seed", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-seed.yaml" + }, + { + "repo": "reuse-surface", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/reuse-surface.yaml" + }, + { + "repo": "shard-wiki", + "count": 8, + "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/shard-wiki.yaml" + }, + { + "repo": "state-hub", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/state-hub.yaml" + }, + { + "repo": "tegwick-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/tegwick-control.yaml" + }, + { + "repo": "the-custodian", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/the-custodian.yaml" + }, + { + "repo": "user-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/user-engine.yaml" + }, + { + "repo": "vantage-point", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vantage-point.yaml" + }, + { + "repo": "vergabe-teilnahme", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "repo": "whynot-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-control.yaml" + }, + { + "repo": "whynot-design", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-design.yaml" + } + ], + "capabilities": [ + { + "id": "capability.activity.event-coordinate", + "name": "Durable automation and bounded operations", + "summary": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks.", + "domain": "helix_forge", + "status": "draft", + "owner": "activity-core", + "tags": [ + "activity", + "coordination", + "automation", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A4 / C1 / R0", + "path": "registry/capabilities/capability.activity.event-coordinate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "activity-core", + "source_url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/activity-core.yaml" + }, + { + "id": "capability.agents.cli-assistant", + "name": "Console-Native LLM Assistant (cya)", + "summary": "Console-native, backend-agnostic assistant CLI that expresses user intent in natural language and returns safe, explainable, context-aware help.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "can-you-assist", + "path": "registry/capabilities/capability.agents.cli-assistant.md", + "tags": [ + "cli", + "assistant", + "llm", + "safety" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "can-you-assist", + "source_url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/can-you-assist.yaml" + }, + { + "id": "capability.agents.custodian-runtime-tooling", + "name": "Generic agent runtime and repository tooling", + "summary": "Agent runtime modules and repository classification tooling.", + "domain": "custodian", + "status": "draft", + "owner": "the-custodian", + "tags": [ + "agents", + "runtime", + "classification", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D2 / A2 / C1 / R0", + "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "the-custodian", + "source_url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/the-custodian.yaml" + }, + { + "id": "capability.agents.kaizen-framework", + "name": "Kaizen Agentic Framework", + "summary": "AI agency framework providing 20 deployable agent instruction sets, project memory, metrics, role and engagement contracts, and scheduled preparation for governed execution.", + "vector": "D3 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "kaizen-agentic", + "path": "registry/capabilities/capability.agents.kaizen-framework.md", + "tags": [ + "agents", + "memory", + "coordination", + "metrics", + "scheduling", + "engagements" + ], + "consumption_modes": [ + "cli", + "library import", + "file contracts" + ], + "source_repo": "kaizen-agentic", + "source_url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kaizen-agentic.yaml" + }, + { + "id": "capability.agents.llm-connector", + "name": "Pluggable LLM Adapter Library (llm-connect)", + "summary": "Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract interface for adding new providers.", + "vector": "D3 / A2 / C2 / R1", + "domain": "agents", + "status": "draft", + "owner": "llm-connect", + "path": "registry/capabilities/capability.agents.llm-connector.md", + "tags": [ + "llm", + "adapter", + "provider-neutral" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "llm-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/llm-connect.yaml" + }, + { + "id": "capability.agents.performance-learning", + "name": "Agent performance learning", + "summary": "Capture sessions, curate patterns, distribute lessons and measure outcomes.", + "domain": "infotech", + "status": "draft", + "owner": "agentic-resources", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.agents.performance-learning.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "agentic-resources", + "source_url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/agentic-resources.yaml" + }, + { + "id": "capability.agents.repo-scoping-service", + "name": "Repository Scoping Service", + "summary": "Maps repositories from usefulness to implementation (Ability -> Capability -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP API, and curator UI.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "repo-scoping", + "path": "registry/capabilities/capability.agents.repo-scoping-service.md", + "tags": [ + "classification", + "scoping", + "registry" + ], + "consumption_modes": [ + "http api", + "library import", + "ui" + ], + "source_repo": "repo-scoping", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-scoping.yaml" + }, + { + "id": "capability.audit.event-retain", + "name": "Independent audit custody", + "summary": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation.", + "domain": "infotech", + "status": "draft", + "owner": "audit-core", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A4 / C3 / R2", + "path": "registry/capabilities/capability.audit.event-retain.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "audit-core", + "source_url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/audit-core.yaml" + }, + { + "id": "capability.authorization.policy-evaluate", + "name": "Policy evaluation and decision evidence", + "summary": "Check, batch, list-allowed, explain, binding, lifetime and decision records.", + "domain": "helix_forge", + "status": "draft", + "owner": "access-engine", + "tags": [ + "authorization", + "policy", + "flex-auth", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R1", + "path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "access-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/access-engine.yaml" + }, + { + "id": "capability.cmis.tck", + "name": "OpenCMIS Conformance-Preparation Extension", + "summary": "CMIS conformance-preparation extension for guide-board, keeping CMIS-specific runner code, profiles, capability mappings, and workplans outside the generic compliance framework.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "open-cmis-tck", + "path": "registry/capabilities/capability.cmis.tck.md", + "tags": [ + "cmis", + "compliance", + "guide-board-extension" + ], + "consumption_modes": [ + "library import (guide-board extension)" + ], + "source_repo": "open-cmis-tck", + "source_url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-cmis-tck.yaml" + }, + { + "id": "capability.communication.compliance-evidence-framework", + "name": "Certification And Compliance Evidence Framework", + "summary": "Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture.", + "vector": "D2 / A2 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "guide-board", + "path": "registry/capabilities/capability.communication.compliance-evidence-framework.md", + "tags": [ + "compliance", + "certification", + "evidence", + "extensions" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "guide-board", + "source_url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/guide-board.yaml" + }, + { + "id": "capability.communication.context-engine", + "name": "Kontextual Engine (Knowledge Operations Runtime)", + "summary": "Headless knowledge-operations engine turning heterogeneous information assets into persistent, contextual, governed, retrievable, transformable, and agent-operable knowledge.", + "vector": "D4 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "kontextual-engine", + "path": "registry/capabilities/capability.communication.context-engine.md", + "tags": [ + "knowledge", + "context", + "runtime" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "kontextual-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kontextual-engine.yaml" + }, + { + "id": "capability.communication.infospace-workspace", + "name": "Infospace Workspace And Evaluation Bench", + "summary": "Workspace and service for creating, developing, evaluating, and inspecting structured knowledge spaces (infospaces); application-layer successor to the infospace work begun in markitect-main.", + "vector": "D3 / A1 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "infospace-bench", + "path": "registry/capabilities/capability.communication.infospace-workspace.md", + "tags": [ + "infospace", + "knowledge", + "evaluation" + ], + "consumption_modes": [ + "cli", + "library import (consumed by info-tech-canon)" + ], + "source_repo": "infospace-bench", + "source_url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/infospace-bench.yaml" + }, + { + "id": "capability.communication.markitect-legacy-platform", + "name": "MarkiTect Legacy Platform", + "summary": "Intelligent markdown engine and information-management platform treating documents as structured, queryable information spaces with schema validation, transclusion, and LLM-driven evaluation; the legacy umbrella now being split into markitect-tool, infospace-bench, and kontextual-engine.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-main", + "path": "registry/capabilities/capability.communication.markitect-legacy-platform.md", + "tags": [ + "markitect", + "markdown", + "legacy" + ], + "consumption_modes": [ + "application (legacy, not recommended for new integration)" + ], + "source_repo": "markitect-main", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-main.yaml" + }, + { + "id": "capability.communication.markitect-quarkdown-adapter", + "name": "Markitect Quarkdown Render Adapter", + "summary": "Concrete Quarkdown render/export adapter for Markitect, mapping Markitect profiles to Quarkdown profiles and running controlled Quarkdown CLI execution plans without forking or reimplementing Quarkdown.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-quarkdown", + "path": "registry/capabilities/capability.communication.markitect-quarkdown-adapter.md", + "tags": [ + "markitect", + "quarkdown", + "adapter" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-quarkdown", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-quarkdown.yaml" + }, + { + "id": "capability.communication.markitect-source-adapters", + "name": "Markitect Source-Format Adapters", + "summary": "Concrete source-format adapters (EPUB3, PDF) converting external document formats into canonical Markitect Markdown, implementing the markitect-tool source adapter contract.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-filter", + "path": "registry/capabilities/capability.communication.markitect-source-adapters.md", + "tags": [ + "markitect", + "adapter", + "document-conversion" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-filter", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-filter.yaml" + }, + { + "id": "capability.communication.markitect-toolkit", + "name": "Markitect Markdown Toolkit And CLI", + "summary": "Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown into structured, queryable, reusable knowledge artifacts; syntax-layer successor to markitect-main.", + "vector": "D4 / A2 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "markitect-tool", + "path": "registry/capabilities/capability.communication.markitect-toolkit.md", + "tags": [ + "markitect", + "markdown", + "cli", + "toolkit" + ], + "consumption_modes": [ + "cli", + "library import" + ], + "source_repo": "markitect-tool", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-tool.yaml" + }, + { + "id": "capability.coordination.cross-owner-work", + "name": "Cross-owner coordination lifecycle", + "summary": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime.", + "domain": "infotech", + "status": "draft", + "owner": "coordination-engine", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.coordination.cross-owner-work.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "coordination-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/coordination-engine.yaml" + }, + { + "id": "capability.design.whynot-system", + "name": "Whynot Design System", + "summary": "Framework-agnostic visual language for whynot prototype/market-signal artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain HTML, and Django template adapters.", + "vector": "D3 / A2 / C2 / R1", + "domain": "consumer", + "status": "draft", + "owner": "whynot-design", + "path": "registry/capabilities/capability.design.whynot-system.md", + "tags": [ + "design-system", + "web-components", + "frontend" + ], + "consumption_modes": [ + "library import (npm)", + "cli", + "django template adapter" + ], + "source_repo": "whynot-design", + "source_url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/whynot-design.yaml" + }, + { + "id": "capability.evidence.binding", + "name": "Evidence-to-Target Binding", + "summary": "Links evidence items to structured targets with relation, status, and confidence metadata, bidirectional queries, active-state coordination, and canonical engine events.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.binding.md", + "tags": [ + "evidence", + "binding", + "evidence-link", + "form-field", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React provider" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.evidence.rect-registry", + "name": "Visual-Guide Rect Registry", + "summary": "Coordinates field, evidence-card, and highlight rectangles from independent renderers so an SVG overlay can draw the active visual guide without polling.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.rect-registry.md", + "tags": [ + "rect-registry", + "visual-guide", + "overlay", + "active-state", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React component" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.feature-control.evaluate", + "name": "Feature Availability Evaluation", + "summary": "Evaluate whether a feature is active, hidden, disabled, or unavailable for a subject in context.", + "vector": "D5 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.evaluate.md", + "tags": [ + "feature-control", + "evaluation", + "sdk" + ], + "consumption_modes": [ + "SDK", + "service API" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.rollout", + "name": "Feature Rollout Control", + "summary": "Gradually expose features to subjects across tenants, domains, groups, or cohorts using rollout rules.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.rollout.md", + "tags": [ + "feature-control", + "rollout", + "planning" + ], + "consumption_modes": [ + "source module", + "SDK" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.visibility", + "name": "Feature Visibility Control", + "summary": "Control whether features are visible or hidden for subjects without changing entitlement or authorization.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.visibility.md", + "tags": [ + "feature-control", + "visibility" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.graph.nbgm-spec", + "name": "Network-Based Graph Model (NBGM) Specification", + "summary": "Generic system and versioned protocol specification for exploring dependency structures as network-based graph models (NBGM), unifying entity/relationship inspection and reasoning across arbitrary domains.", + "vector": "D2 / A0 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "vantage-point", + "path": "registry/capabilities/capability.graph.nbgm-spec.md", + "tags": [ + "graph", + "nbgm", + "specification" + ], + "consumption_modes": [ + "informational (specification only)" + ], + "source_repo": "vantage-point", + "source_url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vantage-point.yaml" + }, + { + "id": "capability.hr.workflow-catalog", + "name": "HR Workflow Catalog", + "summary": "Markdown-first registry of HR planning workflows with an iterative assessment loop tied to INTENT phases.", + "vector": "D3 / A1 / C1 / R0", + "domain": "consumer", + "status": "draft", + "owner": "human-resources", + "path": "registry/capabilities/capability.hr.workflow-catalog.md", + "tags": [ + "hr", + "workflows", + "assessment", + "planning" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "human-resources", + "source_url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/human-resources.yaml" + }, + { + "id": "capability.iam.key-cape", + "name": "OIDC identity and assurance", + "summary": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI.", + "domain": "infotech", + "status": "draft", + "owner": "key-cape", + "tags": [ + "iam", + "oidc", + "netkingdom", + "security", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R1", + "path": "registry/capabilities/capability.iam.key-cape.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "key-cape", + "source_url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/key-cape.yaml" + }, + { + "id": "capability.identity.subject-resolution", + "name": "Identity Subject Resolution", + "summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.", + "vector": "D3 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.subject-resolution.md", + "tags": [ + "identity", + "subject", + "architecture" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.identity.user-engine", + "name": "User lifecycle and account journeys", + "summary": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog.", + "domain": "communication", + "status": "draft", + "owner": "user-engine", + "tags": [ + "identity", + "user-management", + "multi-tenant", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C2 / R0", + "path": "registry/capabilities/capability.identity.user-engine.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "user-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/user-engine.yaml" + }, + { + "id": "capability.identity.vocabulary-canonicalize", + "name": "Identity Vocabulary Canonicalization", + "summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.", + "vector": "D4 / A0 / C2 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md", + "tags": [ + "identity", + "terminology", + "research" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.infotech.artifact-store", + "name": "Artifact Registry And Storage Gateway", + "summary": "Generic artifact registry and storage gateway for generated outputs, evidence packages, reports, logs, snapshots, exports, and release artifacts.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "artifact-store", + "path": "registry/capabilities/capability.infotech.artifact-store.md", + "tags": [ + "artifact", + "storage", + "provenance", + "registry" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "artifact-store", + "source_url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/artifact-store.yaml" + }, + { + "id": "capability.infotech.canon-service", + "name": "Shared semantic contracts and validation", + "summary": "Markdown canon with library, CLI and read-only API.", + "domain": "infotech", + "status": "draft", + "owner": "info-tech-canon", + "tags": [ + "canon", + "infospace", + "service", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D2 / A4 / C1 / R0", + "path": "registry/capabilities/capability.infotech.canon-service.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "info-tech-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/info-tech-canon.yaml" + }, + { + "id": "capability.infotech.citation-engine", + "name": "Citation Evidence Domain Engine", + "summary": "Core domain model and engine services for the citation-evidence ecosystem \u2014 shared vocabulary, in-memory repositories, orchestration services, event bus, and citation card renderers.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-engine", + "path": "registry/capabilities/capability.infotech.citation-engine.md", + "tags": [ + "citation", + "evidence", + "domain-model" + ], + "consumption_modes": [ + "library import (workspace link)" + ], + "source_repo": "citation-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-engine.yaml" + }, + { + "id": "capability.infotech.citation-evidence-workspace", + "name": "Citation Evidence Workspace", + "summary": "Document-centered evidence workspace for capturing, managing, presenting, and re-opening citations \u2014 the umbrella application over the citation-evidence six-package design.", + "vector": "D4 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-evidence", + "path": "registry/capabilities/capability.infotech.citation-evidence-workspace.md", + "tags": [ + "citation", + "evidence", + "workspace" + ], + "consumption_modes": [ + "application (local dev server)" + ], + "source_repo": "citation-evidence", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-evidence.yaml" + }, + { + "id": "capability.infotech.config-surface-atlas", + "name": "Configuration Surface Atlas", + "summary": "Read-first, cross-kind map and evidence layer for configuration surfaces \u2014 what configures a system, who owns it, its scope, and where the source of truth lives.", + "vector": "D5 / A0 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "config-atlas", + "path": "registry/capabilities/capability.infotech.config-surface-atlas.md", + "tags": [ + "configuration", + "registry", + "control-plane", + "effective-config", + "evidence" + ], + "consumption_modes": [ + "informational", + "source module" + ], + "source_repo": "config-atlas", + "source_url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/config-atlas.yaml" + }, + { + "id": "capability.infotech.core-hub", + "name": "Core Hub Production Interaction Framework", + "summary": "Contract-first framework for cross-domain state, agent coordination, evidence, registries, workplans, and operator interaction surfaces.", + "vector": "D3 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "core-hub", + "path": "registry/capabilities/capability.infotech.core-hub.md", + "tags": [ + "interaction-framework", + "state-hub", + "inter-hub-successor", + "agent-coordination", + "registry", + "api" + ], + "consumption_modes": [ + "informational", + "planning", + "cli" + ], + "source_repo": "core-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/core-hub.yaml" + }, + { + "id": "capability.infotech.email-connector", + "name": "Mailbox Evidence Scanner (email-connect)", + "summary": "Headless, provider-neutral email communication and evidence service; first slice scans a mailbox or fixture directory and produces timestamped CSV evidence reports.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "email-connect", + "path": "registry/capabilities/capability.infotech.email-connector.md", + "tags": [ + "email", + "evidence", + "coordination" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "email-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/email-connect.yaml" + }, + { + "id": "capability.infotech.headless-browser", + "name": "Headless Browser Automation", + "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.", + "vector": "D3 / A5 / C2 / R2", + "domain": "infotech", + "status": "reviewed", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.infotech.headless-browser.md", + "tags": [ + "headless", + "browser", + "automation", + "playwright", + "chromium", + "testing", + "screenshots", + "extraction", + "firefox", + "webkit", + "selenium", + "puppeteer" + ], + "consumption_modes": [ + "informational", + "source adaptation", + "JavaScript library", + "Python library", + "cli", + "service API", + "container" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.infotech.hub-core-library", + "name": "Reusable FOS Hub Core Primitives", + "summary": "Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State Hub for use by other FOS (Federation of Services) hubs.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "hub-core", + "path": "registry/capabilities/capability.infotech.hub-core-library.md", + "tags": [ + "hub", + "fastapi", + "sqlalchemy", + "mcp" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "hub-core", + "source_url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/hub-core.yaml" + }, + { + "id": "capability.infotech.issue-tracking", + "name": "External issue tracker connector", + "summary": "CLI and Python adapters for external issue systems.", + "domain": "infotech", + "status": "draft", + "owner": "issue-core", + "tags": [ + "issue-tracking", + "connector", + "work-record", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A2 / C2 / R1", + "path": "registry/capabilities/capability.infotech.issue-tracking.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "issue-core", + "source_url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/issue-core.yaml" + }, + { + "id": "capability.infotech.oss-integration-continuity", + "name": "Managed Continuity For OSS Integrations", + "summary": "Turns proven open-source integrations into structured, maintainable, continuously managed assets with clear boundaries and update loops, so they remain robust and transparent as upstream evolves.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "open-reuse", + "path": "registry/capabilities/capability.infotech.oss-integration-continuity.md", + "tags": [ + "oss", + "integration", + "maintenance" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "open-reuse", + "source_url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-reuse.yaml" + }, + { + "id": "capability.infotech.pdf-evidence-ingest", + "name": "Headless PDF Evidence Ingest", + "summary": "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "evidence-source", + "path": "registry/capabilities/capability.infotech.pdf-evidence-ingest.md", + "tags": [ + "pdf", + "ingest", + "fingerprint", + "canonical-text", + "evidence" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "evidence-source", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-source.yaml" + }, + { + "id": "capability.infotech.repo-template", + "name": "Coulomb Repository Template", + "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.", + "vector": "D3 / A3 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "repo-seed", + "path": "registry/capabilities/capability.infotech.repo-template.md", + "tags": [ + "template", + "bootstrap", + "state-hub", + "onboarding" + ], + "consumption_modes": [ + "git clone", + "informational" + ], + "source_repo": "repo-seed", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-seed.yaml" + }, + { + "id": "capability.memory.phase-planning", + "name": "Profile-Driven Memory Phase Planning (phase-memory)", + "summary": "Interprets Markitect memory profiles as runtime plans, modeling memory phases and producing deterministic dry-run actions for retention, refresh, compaction, stabilization, and activation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "phase-memory", + "path": "registry/capabilities/capability.memory.phase-planning.md", + "tags": [ + "memory", + "agentic", + "planning" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "phase-memory", + "source_url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/phase-memory.yaml" + }, + { + "id": "capability.operations.ops-hub", + "name": "Operations Hub Extension Contract", + "summary": "Versioned hub-extension package and bootstrap client for operational truth, service-catalog records, readiness evidence, and migration gates.", + "vector": "D3 / A1 / C1 / R1", + "domain": "operations", + "status": "reviewed", + "owner": "ops-hub", + "path": "registry/capabilities/capability.operations.ops-hub.md", + "tags": [ + "operations", + "service-catalog", + "readiness", + "hub-extension" + ], + "consumption_modes": [ + "contract package", + "command-line bootstrap" + ], + "source_repo": "ops-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-hub.yaml" + }, + { + "id": "capability.ops.tunnel-bridge", + "name": "SSH tunnel lifecycle", + "summary": "Named tunnels, reconnect, health and TTL-aware cert_command.", + "domain": "infotech", + "status": "draft", + "owner": "ops-bridge", + "tags": [ + "ssh", + "tunnel", + "ops", + "connectivity", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C2 / R1", + "path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "ops-bridge", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-bridge.yaml" + }, + { + "id": "capability.procurement.vergabe-teilnahme", + "name": "Vergabe Teilnahme (Public Procurement Participation) Application", + "summary": "Django application (with a Vite/Tailwind frontend) for managing German public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und Teilnahme-Management-System.", + "vector": "D3 / A1 / C1 / R1", + "domain": "communication", + "status": "draft", + "owner": "vergabe-teilnahme", + "path": "registry/capabilities/capability.procurement.vergabe-teilnahme.md", + "tags": [ + "procurement", + "django", + "vergabe" + ], + "consumption_modes": [ + "application (Django + Vite, local dev via docker-compose)" + ], + "source_repo": "vergabe-teilnahme", + "source_url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "id": "capability.railiance.ci-enablement", + "name": "Developer delivery and CI templates", + "summary": "Reusable CI workflows, build and deployment patterns.", + "domain": "financials", + "status": "draft", + "owner": "railiance-enablement", + "tags": [ + "railiance", + "ci-cd", + "developer-enablement", + "forgejo", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C2 / R1", + "path": "registry/capabilities/capability.railiance.ci-enablement.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-enablement", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-enablement.yaml" + }, + { + "id": "capability.railiance.cluster-bootstrap", + "name": "Kubernetes runtime and cluster controls", + "summary": "k3s, ingress, CNI, operators and kubeconfig/runtime checks.", + "domain": "financials", + "status": "draft", + "owner": "railiance-cluster", + "tags": [ + "railiance", + "kubernetes", + "iac", + "bootstrap", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-cluster", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-cluster.yaml" + }, + { + "id": "capability.railiance.fabric-graph", + "name": "Infrastructure ownership and dependency graph", + "summary": "Schemas, validation, graph queries and State Hub exports.", + "domain": "financials", + "status": "draft", + "owner": "railiance-fabric", + "tags": [ + "railiance", + "graph", + "ownership", + "discovery", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.fabric-graph.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-fabric", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-fabric.yaml" + }, + { + "id": "capability.railiance.forge-infrastructure", + "name": "Source forge, registries and runner substrate", + "summary": "Forgejo operation, package registries and runner lifecycle.", + "domain": "financials", + "status": "draft", + "owner": "railiance-forge", + "tags": [ + "railiance", + "forgejo", + "forge", + "ci-runner", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-forge", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-forge.yaml" + }, + { + "id": "capability.railiance.infra-provisioning", + "name": "Host convergence and security baseline", + "summary": "Ansible inventory, firewall, SSH bootstrap and baseline verification.", + "domain": "financials", + "status": "draft", + "owner": "railiance-infra", + "tags": [ + "railiance", + "terraform", + "ansible", + "infrastructure", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A2 / C2 / R1", + "path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-infra", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-infra.yaml" + }, + { + "id": "capability.railiance.platform-services", + "name": "Secret custody and platform data services", + "summary": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts.", + "domain": "financials", + "status": "draft", + "owner": "railiance-platform", + "tags": [ + "railiance", + "platform", + "secrets", + "postgres", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.railiance.platform-services.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-platform", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-platform.yaml" + }, + { + "id": "capability.railiance.workload-deployment-tooling", + "name": "Workload release configuration and guards", + "summary": "Helm/manifests, exact image pins, application runbooks and rollout/rollback.", + "domain": "financials", + "status": "draft", + "owner": "railiance-apps", + "tags": [ + "railiance", + "kubernetes", + "helm", + "deployment", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R1", + "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-apps", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-apps.yaml" + }, + { + "id": "capability.registry.register", + "name": "Capability registry and federation", + "summary": "Owner Markdown entries, indexes, federation hub and planning queries.", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "tags": [ + "registry", + "governance", + "meta", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A3 / C2 / R3", + "path": "registry/capabilities/capability.registry.register.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.registry.validate", + "name": "Capability registry validation", + "summary": "Schema, index consistency and relation checks.", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "tags": [ + "registry", + "validation", + "cli", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A3 / C3 / R3", + "path": "registry/capabilities/capability.registry.validate.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.security.access-routing", + "name": "Credential routing and contained access", + "summary": "warden route and access catalog; exact lane conduit and secret-exec routing.", + "domain": "infotech", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A3 / C1 / R0", + "path": "registry/capabilities/capability.security.access-routing.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.security.bootstrap-recovery", + "name": "Guarded bootstrap and recovery preparation", + "summary": "Local identity, bootstrap console, encrypted custody handoff and caller tools.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.bootstrap-recovery.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.case-contracts", + "name": "Security case types and instance validation", + "summary": "Versioned types, cases and schema validation.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.case-contracts.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.case-follow-through", + "name": "Security case operational follow-through", + "summary": "KnownSecurityCase route, plan and operational receipts.", + "domain": "infotech", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.case-follow-through.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.security.emission-profile", + "name": "Security emission cadence validation", + "summary": "Security profile over generic emission contracts and validator.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.emission-profile.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.forge-secret-prevention", + "name": "Independent introduced-history secret prevention", + "summary": "Pinned receive adapter, lifecycle template and fail-closed scan.", + "domain": "infotech", + "status": "draft", + "owner": "railiance-forge", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.forge-secret-prevention.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "railiance-forge", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-forge.yaml" + }, + { + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom security architecture and conformance tooling", + "summary": "Versioned IAM, layer, tenancy and credential contracts plus validators.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "iam", + "kubernetes", + "conformance", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R1", + "path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.posture-feedback", + "name": "Deterministic posture feedback", + "summary": "CLI evaluates evidence age and posture into owner-routed findings.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.posture-feedback.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.scenario-compose", + "name": "Deterministic security scenario composition", + "summary": "CLI selects pinned providers and orders trust transitions.", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "tags": [ + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D3 / A2 / C1 / R0", + "path": "registry/capabilities/capability.security.scenario-compose.md", + "consumption_modes": [ + "CLI", + "source" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.ssh-certificate-issuance", + "name": "Decision-bound SSH certificates", + "summary": "warden sign with local and OpenBao backends and adm/agt/atm actors.", + "domain": "helix_forge", + "status": "draft", + "owner": "ops-warden", + "tags": [ + "ssh", + "certificate", + "ca", + "ops-warden", + "openbao", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A3 / C3 / R2", + "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "consumption_modes": [ + "library", + "CLI" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.statehub.progress-log", + "name": "Progress and work evidence indexing", + "summary": "REST progress and task evidence references.", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "tags": [ + "state-hub", + "progress", + "coordination", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C3 / R3", + "path": "registry/capabilities/capability.statehub.progress-log.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.statehub.workstream-coordinate", + "name": "Cross-repository work tracking", + "summary": "File-derived workplans, tasks, dependencies, decisions and coordination views.", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "tags": [ + "state-hub", + "coordination", + "workplans", + "security", + "netkingdom", + "framework-reuse" + ], + "vector": "D4 / A4 / C3 / R2", + "path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "consumption_modes": [ + "HTTP API", + "source" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.wiki.adapter-contract", + "name": "Capability-Aware Shard Adapter Contract", + "summary": "A versioned backend interface where each binding declares a verified capability profile, so federation ops degrade by capability.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.adapter-contract.md", + "tags": [ + "wiki", + "adapter", + "capability", + "contract", + "conformance", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.coordination-journal", + "name": "Event-Sourced Coordination Journal", + "summary": "An append-only, totally-ordered-per-space decision log whose current state is a derived fold; git-addressable history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.coordination-journal.md", + "tags": [ + "wiki", + "event-sourcing", + "coordination", + "git", + "journal", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.derived-views", + "name": "Wiki Derived Views", + "summary": "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges, AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.derived-views.md", + "tags": [ + "wiki", + "derived-views", + "backlinks", + "recentchanges", + "search", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.engine-typed-extensions", + "name": "Wiki Engine with Typed Extensions", + "summary": "A small-core wiki engine realizing a typed-extension framework that addresses all wiki use cases and lets each shard activate only the features it needs.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.engine-typed-extensions.md", + "tags": [ + "wiki", + "engine", + "typed-extensions", + "feature-activation", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.federation-models", + "name": "Selectable Federation-Model Taxonomy", + "summary": "Federation as a plural, composable coordination axis (fork+journal, VCS-replication, query-join, feed, activity-streams, engine-mirror) selected per space.", + "vector": "D4 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.federation-models.md", + "tags": [ + "wiki", + "federation", + "taxonomy", + "composable", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.overlay", + "name": "Overlay-Before-Mutation Write Path", + "summary": "Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only or limited backends be edited safely without silent remote mutation.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.overlay.md", + "tags": [ + "wiki", + "overlay", + "patch", + "write-path", + "conflict", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.page-model", + "name": "Backend-Neutral Wiki Page Model", + "summary": "A Markdown-first but stretchable page model with stable identity separate from placement and layered provenance.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.page-model.md", + "tags": [ + "wiki", + "page-model", + "identity", + "provenance", + "markdown", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.shard-orchestration", + "name": "Wiki Shard Orchestration", + "summary": "Present a union of pages across heterogeneous wiki-shaped shards while preserving each shard's provenance, capabilities, and history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.shard-orchestration.md", + "tags": [ + "wiki", + "federation", + "orchestration", + "union", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + } + ], + "composed_at": "2026-10-14T04:48:46+00:00", + "stale": false +} diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json b/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json new file mode 100644 index 00000000..bbe29695 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-before-federated.json @@ -0,0 +1,1872 @@ +{ + "version": 1, + "updated": "2026-10-14", + "domain": "helix_forge", + "collision_policy": "warn", + "sources": [ + { + "repo": "access-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/access-engine.yaml" + }, + { + "repo": "activity-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/activity-core.yaml" + }, + { + "repo": "agentic-resources", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/agentic-resources.yaml" + }, + { + "repo": "artifact-store", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/artifact-store.yaml" + }, + { + "repo": "audit-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/audit-core.yaml" + }, + { + "repo": "can-you-assist", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/can-you-assist.yaml" + }, + { + "repo": "citation-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-engine.yaml" + }, + { + "repo": "citation-evidence", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-evidence.yaml" + }, + { + "repo": "citation-work", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/citation-work.yaml" + }, + { + "repo": "commerce-canon", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/commerce-canon.yaml" + }, + { + "repo": "config-atlas", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/config-atlas.yaml" + }, + { + "repo": "coordination-engine", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/coordination-engine.yaml" + }, + { + "repo": "core-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/core-hub.yaml" + }, + { + "repo": "domain-tree", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/domain-tree.yaml" + }, + { + "repo": "email-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/email-connect.yaml" + }, + { + "repo": "evidence-anchor", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-anchor.yaml" + }, + { + "repo": "evidence-binder", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-binder.yaml" + }, + { + "repo": "evidence-source", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/evidence-source.yaml" + }, + { + "repo": "feature-control", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/feature-control.yaml" + }, + { + "repo": "guide-board", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/guide-board.yaml" + }, + { + "repo": "helix-forge", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/helix-forge.yaml" + }, + { + "repo": "hub-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/hub-core.yaml" + }, + { + "repo": "human-resources", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/human-resources.yaml" + }, + { + "repo": "ihp-railiance-probe", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ihp-railiance-probe.yaml" + }, + { + "repo": "info-tech-canon", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/info-tech-canon.yaml" + }, + { + "repo": "infospace-bench", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/infospace-bench.yaml" + }, + { + "repo": "issue-core", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/issue-core.yaml" + }, + { + "repo": "kaizen-agentic", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kaizen-agentic.yaml" + }, + { + "repo": "key-cape", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/key-cape.yaml" + }, + { + "repo": "kontextual-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/kontextual-engine.yaml" + }, + { + "repo": "llm-connect", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/llm-connect.yaml" + }, + { + "repo": "markitect-filter", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-filter.yaml" + }, + { + "repo": "markitect-main", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-main.yaml" + }, + { + "repo": "markitect-quarkdown", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-quarkdown.yaml" + }, + { + "repo": "markitect-tool", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/markitect-tool.yaml" + }, + { + "repo": "net-kingdom", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/net-kingdom.yaml" + }, + { + "repo": "open-cmis-tck", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-cmis-tck.yaml" + }, + { + "repo": "open-reuse", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/open-reuse.yaml" + }, + { + "repo": "ops-bridge", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-bridge.yaml" + }, + { + "repo": "ops-hub", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-hub.yaml" + }, + { + "repo": "ops-warden", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/ops-warden.yaml" + }, + { + "repo": "phase-memory", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/phase-memory.yaml" + }, + { + "repo": "railiance-apps", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-apps.yaml" + }, + { + "repo": "railiance-cluster", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-cluster.yaml" + }, + { + "repo": "railiance-enablement", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-enablement.yaml" + }, + { + "repo": "railiance-fabric", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-fabric.yaml" + }, + { + "repo": "railiance-forge", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-forge.yaml" + }, + { + "repo": "railiance-infra", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-infra.yaml" + }, + { + "repo": "railiance-platform", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/railiance-platform.yaml" + }, + { + "repo": "repo-scoping", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-scoping.yaml" + }, + { + "repo": "repo-seed", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/repo-seed.yaml" + }, + { + "repo": "reuse-surface", + "count": 3, + "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/reuse-surface.yaml" + }, + { + "repo": "shard-wiki", + "count": 8, + "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/shard-wiki.yaml" + }, + { + "repo": "state-hub", + "count": 2, + "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/state-hub.yaml" + }, + { + "repo": "tegwick-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/tegwick-control.yaml" + }, + { + "repo": "the-custodian", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/the-custodian.yaml" + }, + { + "repo": "user-engine", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/user-engine.yaml" + }, + { + "repo": "vantage-point", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vantage-point.yaml" + }, + { + "repo": "vergabe-teilnahme", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "repo": "whynot-control", + "count": 0, + "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-control.yaml" + }, + { + "repo": "whynot-design", + "count": 1, + "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "cache": "/data/cache/whynot-design.yaml" + } + ], + "capabilities": [ + { + "id": "capability.activity.event-coordinate", + "name": "Organizational Event Coordination", + "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "activity-core", + "path": "registry/capabilities/capability.activity.event-coordinate.md", + "tags": [ + "activity", + "coordination", + "automation" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "activity-core", + "source_url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/activity-core.yaml" + }, + { + "id": "capability.agents.cli-assistant", + "name": "Console-Native LLM Assistant (cya)", + "summary": "Console-native, backend-agnostic assistant CLI that expresses user intent in natural language and returns safe, explainable, context-aware help.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "can-you-assist", + "path": "registry/capabilities/capability.agents.cli-assistant.md", + "tags": [ + "cli", + "assistant", + "llm", + "safety" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "can-you-assist", + "source_url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/can-you-assist.yaml" + }, + { + "id": "capability.agents.custodian-runtime-tooling", + "name": "Custodian Runtime And Repo-Classification Tooling", + "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.", + "vector": "D2 / A1 / C1 / R0", + "domain": "custodian", + "status": "draft", + "owner": "the-custodian", + "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "tags": [ + "agents", + "runtime", + "classification" + ], + "consumption_modes": [ + "library import (runtime/)", + "cli (tools/ scripts)" + ], + "source_repo": "the-custodian", + "source_url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/the-custodian.yaml" + }, + { + "id": "capability.agents.kaizen-framework", + "name": "Kaizen Agentic Framework", + "summary": "AI agency framework providing 20 deployable agent instruction sets, project memory, metrics, role and engagement contracts, and scheduled preparation for governed execution.", + "vector": "D3 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "kaizen-agentic", + "path": "registry/capabilities/capability.agents.kaizen-framework.md", + "tags": [ + "agents", + "memory", + "coordination", + "metrics", + "scheduling", + "engagements" + ], + "consumption_modes": [ + "cli", + "library import", + "file contracts" + ], + "source_repo": "kaizen-agentic", + "source_url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kaizen-agentic.yaml" + }, + { + "id": "capability.agents.llm-connector", + "name": "Pluggable LLM Adapter Library (llm-connect)", + "summary": "Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract interface for adding new providers.", + "vector": "D3 / A2 / C2 / R1", + "domain": "agents", + "status": "draft", + "owner": "llm-connect", + "path": "registry/capabilities/capability.agents.llm-connector.md", + "tags": [ + "llm", + "adapter", + "provider-neutral" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "llm-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/llm-connect.yaml" + }, + { + "id": "capability.agents.repo-scoping-service", + "name": "Repository Scoping Service", + "summary": "Maps repositories from usefulness to implementation (Ability -> Capability -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP API, and curator UI.", + "vector": "D2 / A2 / C1 / R0", + "domain": "agents", + "status": "draft", + "owner": "repo-scoping", + "path": "registry/capabilities/capability.agents.repo-scoping-service.md", + "tags": [ + "classification", + "scoping", + "registry" + ], + "consumption_modes": [ + "http api", + "library import", + "ui" + ], + "source_repo": "repo-scoping", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-scoping.yaml" + }, + { + "id": "capability.audit.event-retain", + "name": "Audit Event Retention", + "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.", + "joins": "operations.audit", + "provision": "data/capability/audit-core-operational.json", + "vector": "D4 provision / A4 / C3 / R2", + "domain": "infotech", + "status": "production", + "owner": "audit-core", + "path": "registry/capabilities/capability.audit.event-retain.md", + "tags": [ + "audit", + "retention", + "compliance" + ], + "consumption_modes": [ + "http ingest", + "source module" + ], + "source_repo": "audit-core", + "source_url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/audit-core.yaml" + }, + { + "id": "capability.authorization.policy-evaluate", + "name": "Authorization Policy Evaluation", + "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "flex-auth", + "path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "tags": [ + "authorization", + "policy", + "flex-auth" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "access-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/access-engine.yaml" + }, + { + "id": "capability.cmis.tck", + "name": "OpenCMIS Conformance-Preparation Extension", + "summary": "CMIS conformance-preparation extension for guide-board, keeping CMIS-specific runner code, profiles, capability mappings, and workplans outside the generic compliance framework.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "open-cmis-tck", + "path": "registry/capabilities/capability.cmis.tck.md", + "tags": [ + "cmis", + "compliance", + "guide-board-extension" + ], + "consumption_modes": [ + "library import (guide-board extension)" + ], + "source_repo": "open-cmis-tck", + "source_url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-cmis-tck.yaml" + }, + { + "id": "capability.communication.compliance-evidence-framework", + "name": "Certification And Compliance Evidence Framework", + "summary": "Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture.", + "vector": "D2 / A2 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "guide-board", + "path": "registry/capabilities/capability.communication.compliance-evidence-framework.md", + "tags": [ + "compliance", + "certification", + "evidence", + "extensions" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "guide-board", + "source_url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/guide-board.yaml" + }, + { + "id": "capability.communication.context-engine", + "name": "Kontextual Engine (Knowledge Operations Runtime)", + "summary": "Headless knowledge-operations engine turning heterogeneous information assets into persistent, contextual, governed, retrievable, transformable, and agent-operable knowledge.", + "vector": "D4 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "kontextual-engine", + "path": "registry/capabilities/capability.communication.context-engine.md", + "tags": [ + "knowledge", + "context", + "runtime" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "kontextual-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/kontextual-engine.yaml" + }, + { + "id": "capability.communication.infospace-workspace", + "name": "Infospace Workspace And Evaluation Bench", + "summary": "Workspace and service for creating, developing, evaluating, and inspecting structured knowledge spaces (infospaces); application-layer successor to the infospace work begun in markitect-main.", + "vector": "D3 / A1 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "infospace-bench", + "path": "registry/capabilities/capability.communication.infospace-workspace.md", + "tags": [ + "infospace", + "knowledge", + "evaluation" + ], + "consumption_modes": [ + "cli", + "library import (consumed by info-tech-canon)" + ], + "source_repo": "infospace-bench", + "source_url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/infospace-bench.yaml" + }, + { + "id": "capability.communication.markitect-legacy-platform", + "name": "MarkiTect Legacy Platform", + "summary": "Intelligent markdown engine and information-management platform treating documents as structured, queryable information spaces with schema validation, transclusion, and LLM-driven evaluation; the legacy umbrella now being split into markitect-tool, infospace-bench, and kontextual-engine.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-main", + "path": "registry/capabilities/capability.communication.markitect-legacy-platform.md", + "tags": [ + "markitect", + "markdown", + "legacy" + ], + "consumption_modes": [ + "application (legacy, not recommended for new integration)" + ], + "source_repo": "markitect-main", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-main.yaml" + }, + { + "id": "capability.communication.markitect-quarkdown-adapter", + "name": "Markitect Quarkdown Render Adapter", + "summary": "Concrete Quarkdown render/export adapter for Markitect, mapping Markitect profiles to Quarkdown profiles and running controlled Quarkdown CLI execution plans without forking or reimplementing Quarkdown.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-quarkdown", + "path": "registry/capabilities/capability.communication.markitect-quarkdown-adapter.md", + "tags": [ + "markitect", + "quarkdown", + "adapter" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-quarkdown", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-quarkdown.yaml" + }, + { + "id": "capability.communication.markitect-source-adapters", + "name": "Markitect Source-Format Adapters", + "summary": "Concrete source-format adapters (EPUB3, PDF) converting external document formats into canonical Markitect Markdown, implementing the markitect-tool source adapter contract.", + "vector": "D2 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "markitect-filter", + "path": "registry/capabilities/capability.communication.markitect-source-adapters.md", + "tags": [ + "markitect", + "adapter", + "document-conversion" + ], + "consumption_modes": [ + "library import (plugin/entry-point)" + ], + "source_repo": "markitect-filter", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-filter.yaml" + }, + { + "id": "capability.communication.markitect-toolkit", + "name": "Markitect Markdown Toolkit And CLI", + "summary": "Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown into structured, queryable, reusable knowledge artifacts; syntax-layer successor to markitect-main.", + "vector": "D4 / A2 / C2 / R1", + "domain": "communication", + "status": "draft", + "owner": "markitect-tool", + "path": "registry/capabilities/capability.communication.markitect-toolkit.md", + "tags": [ + "markitect", + "markdown", + "cli", + "toolkit" + ], + "consumption_modes": [ + "cli", + "library import" + ], + "source_repo": "markitect-tool", + "source_url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/markitect-tool.yaml" + }, + { + "id": "capability.design.whynot-system", + "name": "Whynot Design System", + "summary": "Framework-agnostic visual language for whynot prototype/market-signal artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain HTML, and Django template adapters.", + "vector": "D3 / A2 / C2 / R1", + "domain": "consumer", + "status": "draft", + "owner": "whynot-design", + "path": "registry/capabilities/capability.design.whynot-system.md", + "tags": [ + "design-system", + "web-components", + "frontend" + ], + "consumption_modes": [ + "library import (npm)", + "cli", + "django template adapter" + ], + "source_repo": "whynot-design", + "source_url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/whynot-design.yaml" + }, + { + "id": "capability.evidence.binding", + "name": "Evidence-to-Target Binding", + "summary": "Links evidence items to structured targets with relation, status, and confidence metadata, bidirectional queries, active-state coordination, and canonical engine events.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.binding.md", + "tags": [ + "evidence", + "binding", + "evidence-link", + "form-field", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React provider" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.evidence.rect-registry", + "name": "Visual-Guide Rect Registry", + "summary": "Coordinates field, evidence-card, and highlight rectangles from independent renderers so an SVG overlay can draw the active visual guide without polling.", + "vector": "D3 / A2 / C3 / R3", + "domain": "infotech", + "status": "draft", + "owner": "evidence-binder", + "path": "registry/capabilities/capability.evidence.rect-registry.md", + "tags": [ + "rect-registry", + "visual-guide", + "overlay", + "active-state", + "citation-evidence" + ], + "consumption_modes": [ + "source module", + "React component" + ], + "source_repo": "evidence-binder", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-binder.yaml" + }, + { + "id": "capability.feature-control.evaluate", + "name": "Feature Availability Evaluation", + "summary": "Evaluate whether a feature is active, hidden, disabled, or unavailable for a subject in context.", + "vector": "D5 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.evaluate.md", + "tags": [ + "feature-control", + "evaluation", + "sdk" + ], + "consumption_modes": [ + "SDK", + "service API" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.rollout", + "name": "Feature Rollout Control", + "summary": "Gradually expose features to subjects across tenants, domains, groups, or cohorts using rollout rules.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.rollout.md", + "tags": [ + "feature-control", + "rollout", + "planning" + ], + "consumption_modes": [ + "source module", + "SDK" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.feature-control.visibility", + "name": "Feature Visibility Control", + "summary": "Control whether features are visible or hidden for subjects without changing entitlement or authorization.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "feature-control", + "path": "registry/capabilities/capability.feature-control.visibility.md", + "tags": [ + "feature-control", + "visibility" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "feature-control", + "source_url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/feature-control.yaml" + }, + { + "id": "capability.graph.nbgm-spec", + "name": "Network-Based Graph Model (NBGM) Specification", + "summary": "Generic system and versioned protocol specification for exploring dependency structures as network-based graph models (NBGM), unifying entity/relationship inspection and reasoning across arbitrary domains.", + "vector": "D2 / A0 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "vantage-point", + "path": "registry/capabilities/capability.graph.nbgm-spec.md", + "tags": [ + "graph", + "nbgm", + "specification" + ], + "consumption_modes": [ + "informational (specification only)" + ], + "source_repo": "vantage-point", + "source_url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vantage-point.yaml" + }, + { + "id": "capability.hr.workflow-catalog", + "name": "HR Workflow Catalog", + "summary": "Markdown-first registry of HR planning workflows with an iterative assessment loop tied to INTENT phases.", + "vector": "D3 / A1 / C1 / R0", + "domain": "consumer", + "status": "draft", + "owner": "human-resources", + "path": "registry/capabilities/capability.hr.workflow-catalog.md", + "tags": [ + "hr", + "workflows", + "assessment", + "planning" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "human-resources", + "source_url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/human-resources.yaml" + }, + { + "id": "capability.iam.key-cape", + "name": "KeyCape Lightweight IAM (NetKingdom Profile)", + "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "key-cape", + "path": "registry/capabilities/capability.iam.key-cape.md", + "tags": [ + "iam", + "oidc", + "netkingdom", + "security" + ], + "consumption_modes": [ + "service (self-hosted deployment)" + ], + "source_repo": "key-cape", + "source_url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/key-cape.yaml" + }, + { + "id": "capability.identity.subject-resolution", + "name": "Identity Subject Resolution", + "summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.", + "vector": "D3 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.subject-resolution.md", + "tags": [ + "identity", + "subject", + "architecture" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.identity.user-engine", + "name": "Headless Multi-Tenant User Engine", + "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.", + "vector": "D4 / A1 / C2 / R0", + "domain": "communication", + "status": "draft", + "owner": "user-engine", + "path": "registry/capabilities/capability.identity.user-engine.md", + "tags": [ + "identity", + "user-management", + "multi-tenant" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "user-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/user-engine.yaml" + }, + { + "id": "capability.identity.vocabulary-canonicalize", + "name": "Identity Vocabulary Canonicalization", + "summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.", + "vector": "D4 / A0 / C2 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "commerce-canon", + "path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md", + "tags": [ + "identity", + "terminology", + "research" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "commerce-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/commerce-canon.yaml" + }, + { + "id": "capability.infotech.artifact-store", + "name": "Artifact Registry And Storage Gateway", + "summary": "Generic artifact registry and storage gateway for generated outputs, evidence packages, reports, logs, snapshots, exports, and release artifacts.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "artifact-store", + "path": "registry/capabilities/capability.infotech.artifact-store.md", + "tags": [ + "artifact", + "storage", + "provenance", + "registry" + ], + "consumption_modes": [ + "library import", + "cli" + ], + "source_repo": "artifact-store", + "source_url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/artifact-store.yaml" + }, + { + "id": "capability.infotech.canon-service", + "name": "InfoTechCanon Service Surface", + "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.", + "vector": "D2 / A2 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "info-tech-canon", + "path": "registry/capabilities/capability.infotech.canon-service.md", + "tags": [ + "canon", + "infospace", + "service" + ], + "consumption_modes": [ + "cli", + "library import", + "http api (read-only, local)" + ], + "source_repo": "info-tech-canon", + "source_url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/info-tech-canon.yaml" + }, + { + "id": "capability.infotech.citation-engine", + "name": "Citation Evidence Domain Engine", + "summary": "Core domain model and engine services for the citation-evidence ecosystem \u2014 shared vocabulary, in-memory repositories, orchestration services, event bus, and citation card renderers.", + "vector": "D3 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-engine", + "path": "registry/capabilities/capability.infotech.citation-engine.md", + "tags": [ + "citation", + "evidence", + "domain-model" + ], + "consumption_modes": [ + "library import (workspace link)" + ], + "source_repo": "citation-engine", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-engine.yaml" + }, + { + "id": "capability.infotech.citation-evidence-workspace", + "name": "Citation Evidence Workspace", + "summary": "Document-centered evidence workspace for capturing, managing, presenting, and re-opening citations \u2014 the umbrella application over the citation-evidence six-package design.", + "vector": "D4 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "citation-evidence", + "path": "registry/capabilities/capability.infotech.citation-evidence-workspace.md", + "tags": [ + "citation", + "evidence", + "workspace" + ], + "consumption_modes": [ + "application (local dev server)" + ], + "source_repo": "citation-evidence", + "source_url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/citation-evidence.yaml" + }, + { + "id": "capability.infotech.config-surface-atlas", + "name": "Configuration Surface Atlas", + "summary": "Read-first, cross-kind map and evidence layer for configuration surfaces \u2014 what configures a system, who owns it, its scope, and where the source of truth lives.", + "vector": "D5 / A0 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "config-atlas", + "path": "registry/capabilities/capability.infotech.config-surface-atlas.md", + "tags": [ + "configuration", + "registry", + "control-plane", + "effective-config", + "evidence" + ], + "consumption_modes": [ + "informational", + "source module" + ], + "source_repo": "config-atlas", + "source_url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/config-atlas.yaml" + }, + { + "id": "capability.infotech.core-hub", + "name": "Core Hub Production Interaction Framework", + "summary": "Contract-first framework for cross-domain state, agent coordination, evidence, registries, workplans, and operator interaction surfaces.", + "vector": "D3 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "core-hub", + "path": "registry/capabilities/capability.infotech.core-hub.md", + "tags": [ + "interaction-framework", + "state-hub", + "inter-hub-successor", + "agent-coordination", + "registry", + "api" + ], + "consumption_modes": [ + "informational", + "planning", + "cli" + ], + "source_repo": "core-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/core-hub.yaml" + }, + { + "id": "capability.infotech.email-connector", + "name": "Mailbox Evidence Scanner (email-connect)", + "summary": "Headless, provider-neutral email communication and evidence service; first slice scans a mailbox or fixture directory and produces timestamped CSV evidence reports.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "email-connect", + "path": "registry/capabilities/capability.infotech.email-connector.md", + "tags": [ + "email", + "evidence", + "coordination" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "email-connect", + "source_url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/email-connect.yaml" + }, + { + "id": "capability.infotech.headless-browser", + "name": "Headless Browser Automation", + "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.", + "vector": "D3 / A5 / C2 / R2", + "domain": "infotech", + "status": "reviewed", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.infotech.headless-browser.md", + "tags": [ + "headless", + "browser", + "automation", + "playwright", + "chromium", + "testing", + "screenshots", + "extraction", + "firefox", + "webkit", + "selenium", + "puppeteer" + ], + "consumption_modes": [ + "informational", + "source adaptation", + "JavaScript library", + "Python library", + "cli", + "service API", + "container" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.infotech.hub-core-library", + "name": "Reusable FOS Hub Core Primitives", + "summary": "Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State Hub for use by other FOS (Federation of Services) hubs.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "hub-core", + "path": "registry/capabilities/capability.infotech.hub-core-library.md", + "tags": [ + "hub", + "fastapi", + "sqlalchemy", + "mcp" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "hub-core", + "source_url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/hub-core.yaml" + }, + { + "id": "capability.infotech.issue-tracking", + "name": "Universal Issue Tracking Coordination", + "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "issue-core", + "path": "registry/capabilities/capability.infotech.issue-tracking.md", + "tags": [ + "issue-tracking", + "coordination", + "multi-platform" + ], + "consumption_modes": [ + "cli", + "library import" + ], + "source_repo": "issue-core", + "source_url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/issue-core.yaml" + }, + { + "id": "capability.infotech.oss-integration-continuity", + "name": "Managed Continuity For OSS Integrations", + "summary": "Turns proven open-source integrations into structured, maintainable, continuously managed assets with clear boundaries and update loops, so they remain robust and transparent as upstream evolves.", + "vector": "D2 / A1 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "open-reuse", + "path": "registry/capabilities/capability.infotech.oss-integration-continuity.md", + "tags": [ + "oss", + "integration", + "maintenance" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "open-reuse", + "source_url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/open-reuse.yaml" + }, + { + "id": "capability.infotech.pdf-evidence-ingest", + "name": "Headless PDF Evidence Ingest", + "summary": "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling.", + "vector": "D2 / A1 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "evidence-source", + "path": "registry/capabilities/capability.infotech.pdf-evidence-ingest.md", + "tags": [ + "pdf", + "ingest", + "fingerprint", + "canonical-text", + "evidence" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "evidence-source", + "source_url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/evidence-source.yaml" + }, + { + "id": "capability.infotech.repo-template", + "name": "Coulomb Repository Template", + "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.", + "vector": "D3 / A3 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "repo-seed", + "path": "registry/capabilities/capability.infotech.repo-template.md", + "tags": [ + "template", + "bootstrap", + "state-hub", + "onboarding" + ], + "consumption_modes": [ + "git clone", + "informational" + ], + "source_repo": "repo-seed", + "source_url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/repo-seed.yaml" + }, + { + "id": "capability.memory.phase-planning", + "name": "Profile-Driven Memory Phase Planning (phase-memory)", + "summary": "Interprets Markitect memory profiles as runtime plans, modeling memory phases and producing deterministic dry-run actions for retention, refresh, compaction, stabilization, and activation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "communication", + "status": "draft", + "owner": "phase-memory", + "path": "registry/capabilities/capability.memory.phase-planning.md", + "tags": [ + "memory", + "agentic", + "planning" + ], + "consumption_modes": [ + "library import" + ], + "source_repo": "phase-memory", + "source_url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/phase-memory.yaml" + }, + { + "id": "capability.operations.ops-hub", + "name": "Operations Hub Extension Contract", + "summary": "Versioned hub-extension package and bootstrap client for operational truth, service-catalog records, readiness evidence, and migration gates.", + "vector": "D3 / A1 / C1 / R1", + "domain": "operations", + "status": "reviewed", + "owner": "ops-hub", + "path": "registry/capabilities/capability.operations.ops-hub.md", + "tags": [ + "operations", + "service-catalog", + "readiness", + "hub-extension" + ], + "consumption_modes": [ + "contract package", + "command-line bootstrap" + ], + "source_repo": "ops-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-hub.yaml" + }, + { + "id": "capability.ops.tunnel-bridge", + "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)", + "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.", + "vector": "D3 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "ops-bridge", + "path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "tags": [ + "ssh", + "tunnel", + "ops", + "connectivity" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "ops-bridge", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-bridge.yaml" + }, + { + "id": "capability.procurement.vergabe-teilnahme", + "name": "Vergabe Teilnahme (Public Procurement Participation) Application", + "summary": "Django application (with a Vite/Tailwind frontend) for managing German public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und Teilnahme-Management-System.", + "vector": "D3 / A1 / C1 / R1", + "domain": "communication", + "status": "draft", + "owner": "vergabe-teilnahme", + "path": "registry/capabilities/capability.procurement.vergabe-teilnahme.md", + "tags": [ + "procurement", + "django", + "vergabe" + ], + "consumption_modes": [ + "application (Django + Vite, local dev via docker-compose)" + ], + "source_repo": "vergabe-teilnahme", + "source_url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/vergabe-teilnahme.yaml" + }, + { + "id": "capability.railiance.ci-enablement", + "name": "Railiance Developer Enablement And CI/CD Templates", + "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.", + "vector": "D3 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-enablement", + "path": "registry/capabilities/capability.railiance.ci-enablement.md", + "tags": [ + "railiance", + "ci-cd", + "developer-enablement", + "forgejo" + ], + "consumption_modes": [ + "ci workflow template (copy/reference)", + "cli (promote-repo-to-forgejo.sh)" + ], + "source_repo": "railiance-enablement", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-enablement.yaml" + }, + { + "id": "capability.railiance.cluster-bootstrap", + "name": "Railiance Cluster Runtime Bootstrap", + "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-cluster", + "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "tags": [ + "railiance", + "kubernetes", + "iac", + "bootstrap" + ], + "consumption_modes": [ + "cli", + "ansible playbook" + ], + "source_repo": "railiance-cluster", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-cluster.yaml" + }, + { + "id": "capability.railiance.fabric-graph", + "name": "Railiance Fabric Ecosystem Graph", + "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-fabric", + "path": "registry/capabilities/capability.railiance.fabric-graph.md", + "tags": [ + "railiance", + "graph", + "ownership", + "discovery" + ], + "consumption_modes": [ + "library import", + "cli (validation)" + ], + "source_repo": "railiance-fabric", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-fabric.yaml" + }, + { + "id": "capability.railiance.forge-infrastructure", + "name": "Railiance Forge And Artifact Infrastructure", + "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-forge", + "path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "tags": [ + "railiance", + "forgejo", + "forge", + "ci-runner" + ], + "consumption_modes": [ + "cli (operator tooling)", + "documentation/runbooks" + ], + "source_repo": "railiance-forge", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-forge.yaml" + }, + { + "id": "capability.railiance.infra-provisioning", + "name": "RailianceHosts Infrastructure Provisioning", + "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.", + "vector": "D4 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-infra", + "path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "tags": [ + "railiance", + "terraform", + "ansible", + "infrastructure" + ], + "consumption_modes": [ + "cli (terraform/ansible)", + "gitops" + ], + "source_repo": "railiance-infra", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-infra.yaml" + }, + { + "id": "capability.railiance.platform-services", + "name": "Railiance Platform Services", + "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-platform", + "path": "registry/capabilities/capability.railiance.platform-services.md", + "tags": [ + "railiance", + "platform", + "secrets", + "postgres" + ], + "consumption_modes": [ + "cli (shell/python scripts)" + ], + "source_repo": "railiance-platform", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-platform.yaml" + }, + { + "id": "capability.railiance.workload-deployment-tooling", + "name": "Railiance Application Workload Deployment Tooling", + "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.", + "vector": "D3 / A2 / C1 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-apps", + "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "tags": [ + "railiance", + "kubernetes", + "helm", + "deployment" + ], + "consumption_modes": [ + "cli (shell scripts)", + "helm/kubernetes deployment" + ], + "source_repo": "railiance-apps", + "source_url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/railiance-apps.yaml" + }, + { + "id": "capability.registry.register", + "name": "Capability Registration", + "summary": "Register a new capability so it becomes visible for planning and implementation reuse.", + "vector": "D3 / A4 / C2 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.register.md", + "tags": [ + "registry", + "governance", + "meta" + ], + "consumption_modes": [ + "informational", + "markdown authoring", + "cli", + "service API" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.registry.validate", + "name": "Registry Entry Validation", + "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.", + "vector": "D4 / A3 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.validate.md", + "tags": [ + "registry", + "validation", + "cli" + ], + "consumption_modes": [ + "cli" + ], + "source_repo": "reuse-surface", + "source_url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/reuse-surface.yaml" + }, + { + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom Security/IAM Tooling Suite", + "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.", + "vector": "D3 / A2 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "tags": [ + "security", + "iam", + "kubernetes", + "conformance" + ], + "consumption_modes": [ + "cli", + "local web ui" + ], + "source_repo": "net-kingdom", + "source_url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/net-kingdom.yaml" + }, + { + "id": "capability.security.ssh-certificate-issuance", + "name": "SSH Certificate Issuance", + "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.", + "vector": "D4 / A3 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "ops-warden", + "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "tags": [ + "ssh", + "certificate", + "ca", + "ops-warden", + "openbao", + "security" + ], + "consumption_modes": [ + "CLI", + "cert_command subprocess" + ], + "source_repo": "ops-warden", + "source_url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/ops-warden.yaml" + }, + { + "id": "capability.statehub.progress-log", + "name": "Work Progress Logging", + "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.", + "vector": "D4 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.progress-log.md", + "tags": [ + "state-hub", + "progress", + "coordination" + ], + "consumption_modes": [ + "service API" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.statehub.workstream-coordinate", + "name": "Workstream And Task Coordination", + "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.", + "vector": "D4 / A4 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "tags": [ + "state-hub", + "coordination", + "workplans" + ], + "consumption_modes": [ + "service API", + "HTTP REST" + ], + "source_repo": "state-hub", + "source_url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/state-hub.yaml" + }, + { + "id": "capability.wiki.adapter-contract", + "name": "Capability-Aware Shard Adapter Contract", + "summary": "A versioned backend interface where each binding declares a verified capability profile, so federation ops degrade by capability.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.adapter-contract.md", + "tags": [ + "wiki", + "adapter", + "capability", + "contract", + "conformance", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.coordination-journal", + "name": "Event-Sourced Coordination Journal", + "summary": "An append-only, totally-ordered-per-space decision log whose current state is a derived fold; git-addressable history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.coordination-journal.md", + "tags": [ + "wiki", + "event-sourcing", + "coordination", + "git", + "journal", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.derived-views", + "name": "Wiki Derived Views", + "summary": "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges, AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.derived-views.md", + "tags": [ + "wiki", + "derived-views", + "backlinks", + "recentchanges", + "search", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.engine-typed-extensions", + "name": "Wiki Engine with Typed Extensions", + "summary": "A small-core wiki engine realizing a typed-extension framework that addresses all wiki use cases and lets each shard activate only the features it needs.", + "vector": "D3 / A0 / C0 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.engine-typed-extensions.md", + "tags": [ + "wiki", + "engine", + "typed-extensions", + "feature-activation", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.federation-models", + "name": "Selectable Federation-Model Taxonomy", + "summary": "Federation as a plural, composable coordination axis (fork+journal, VCS-replication, query-join, feed, activity-streams, engine-mirror) selected per space.", + "vector": "D4 / A0 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.federation-models.md", + "tags": [ + "wiki", + "federation", + "taxonomy", + "composable", + "shard-wiki" + ], + "consumption_modes": [ + "informational" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.overlay", + "name": "Overlay-Before-Mutation Write Path", + "summary": "Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only or limited backends be edited safely without silent remote mutation.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.overlay.md", + "tags": [ + "wiki", + "overlay", + "patch", + "write-path", + "conflict", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.page-model", + "name": "Backend-Neutral Wiki Page Model", + "summary": "A Markdown-first but stretchable page model with stable identity separate from placement and layered provenance.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.page-model.md", + "tags": [ + "wiki", + "page-model", + "identity", + "provenance", + "markdown", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + }, + { + "id": "capability.wiki.shard-orchestration", + "name": "Wiki Shard Orchestration", + "summary": "Present a union of pages across heterogeneous wiki-shaped shards while preserving each shard's provenance, capabilities, and history.", + "vector": "D5 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "shard-wiki", + "path": "registry/capabilities/capability.wiki.shard-orchestration.md", + "tags": [ + "wiki", + "federation", + "orchestration", + "union", + "shard-wiki" + ], + "consumption_modes": [ + "source module" + ], + "source_repo": "shard-wiki", + "source_url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "source_index": "/data/cache/shard-wiki.yaml" + } + ], + "composed_at": "2026-10-14T00:17:44+00:00", + "stale": false +} diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json b/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json new file mode 100644 index 00000000..a4d97f31 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-before-repos.json @@ -0,0 +1,714 @@ +{ + "count": 64, + "repos": [ + { + "repo": "access-engine", + "url": "https://forgejo.coulomb.social/coulomb/access-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-09-30T18:31:15+00:00", + "updated_at": "2026-09-30T18:31:15+00:00" + }, + { + "repo": "activity-core", + "url": "https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:46:54+00:00", + "updated_at": "2026-08-21T14:26:03+00:00", + "description": "" + }, + { + "repo": "agentic-resources", + "url": "https://forgejo.coulomb.social/coulomb/agentic-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:10+00:00", + "updated_at": "2026-08-20T21:44:26+00:00" + }, + { + "repo": "artifact-store", + "url": "https://forgejo.coulomb.social/coulomb/artifact-store/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:15+00:00", + "updated_at": "2026-08-20T21:44:27+00:00" + }, + { + "repo": "audit-core", + "url": "https://forgejo.coulomb.social/coulomb/audit-core/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:46:57+00:00", + "updated_at": "2026-08-20T21:44:27+00:00" + }, + { + "repo": "can-you-assist", + "url": "https://forgejo.coulomb.social/coulomb/can-you-assist/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:20+00:00", + "updated_at": "2026-08-20T21:44:27+00:00" + }, + { + "repo": "citation-engine", + "url": "https://forgejo.coulomb.social/coulomb/citation-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:25+00:00", + "updated_at": "2026-08-20T21:44:28+00:00" + }, + { + "repo": "citation-evidence", + "url": "https://forgejo.coulomb.social/coulomb/citation-evidence/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:30+00:00", + "updated_at": "2026-08-20T21:44:28+00:00" + }, + { + "repo": "citation-work", + "url": "https://forgejo.coulomb.social/coulomb/citation-work/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:33+00:00", + "updated_at": "2026-08-20T21:44:29+00:00" + }, + { + "repo": "commerce-canon", + "url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "description": "Canonical source after CFED-WP-0001-T03/T09; stable capability.identity identifiers retained.", + "registered_at": "2026-09-05T23:22:01+00:00", + "updated_at": "2026-09-05T23:22:01+00:00" + }, + { + "repo": "config-atlas", + "url": "https://forgejo.coulomb.social/coulomb/config-atlas/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "infotech", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-07-06T22:41:01+00:00", + "updated_at": "2026-08-20T21:44:29+00:00" + }, + { + "repo": "coordination-engine", + "url": "https://forgejo.coulomb.social/coulomb/coordination-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:37+00:00", + "updated_at": "2026-08-20T21:44:30+00:00" + }, + { + "repo": "core-hub", + "url": "https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-07-07T10:23:58+00:00", + "updated_at": "2026-07-07T10:23:58+00:00" + }, + { + "repo": "domain-tree", + "url": "https://forgejo.coulomb.social/coulomb/domain-tree/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:50:41+00:00", + "updated_at": "2026-08-20T21:44:30+00:00" + }, + { + "repo": "email-connect", + "url": "https://forgejo.coulomb.social/coulomb/email-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:20+00:00", + "updated_at": "2026-08-20T21:44:30+00:00" + }, + { + "repo": "evidence-anchor", + "url": "https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:25+00:00", + "updated_at": "2026-08-20T21:44:31+00:00" + }, + { + "repo": "evidence-binder", + "url": "https://forgejo.coulomb.social/coulomb/evidence-binder/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:29+00:00", + "updated_at": "2026-08-21T08:31:50+00:00" + }, + { + "repo": "evidence-source", + "url": "https://forgejo.coulomb.social/coulomb/evidence-source/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:34+00:00", + "updated_at": "2026-08-20T21:44:32+00:00" + }, + { + "repo": "feature-control", + "url": "https://forgejo.coulomb.social/coulomb/feature-control/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:35:01+00:00", + "updated_at": "2026-08-20T21:44:32+00:00" + }, + { + "repo": "flex-auth", + "url": "https://forgejo.coulomb.social/coulomb/flex-auth/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": false, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:47:00+00:00", + "updated_at": "2026-09-30T18:31:16+00:00", + "description": "Superseded by access-engine (repo rename, FLEX-WP-0020). Kept disabled for audit." + }, + { + "repo": "guide-board", + "url": "https://forgejo.coulomb.social/coulomb/guide-board/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:39+00:00", + "updated_at": "2026-08-20T21:44:33+00:00" + }, + { + "repo": "helix-forge", + "url": "https://forgejo.coulomb.social/coulomb/helix-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:43+00:00", + "updated_at": "2026-08-20T21:44:33+00:00" + }, + { + "repo": "hub-core", + "url": "https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:04:51+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "human-resources", + "url": "https://forgejo.coulomb.social/coulomb/human-resources/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:52:48+00:00", + "updated_at": "2026-08-20T21:44:34+00:00" + }, + { + "repo": "identity-canon", + "url": "https://forgejo.coulomb.social/coulomb/identity-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": false, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:35:02+00:00", + "updated_at": "2026-09-05T23:22:01+00:00", + "description": "Retired source registration after repository rename; replaced by commerce-canon under CFED-WP-0001-T09. Kept for history." + }, + { + "repo": "ihp-railiance-probe", + "url": "https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:53:42+00:00", + "updated_at": "2026-08-20T21:44:34+00:00" + }, + { + "repo": "info-tech-canon", + "url": "https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:53:45+00:00", + "updated_at": "2026-08-20T21:44:35+00:00" + }, + { + "repo": "infospace-bench", + "url": "https://forgejo.coulomb.social/coulomb/infospace-bench/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:53:49+00:00", + "updated_at": "2026-08-20T21:44:35+00:00" + }, + { + "repo": "inter-hub", + "url": "https://gitea.coulomb.social/coulomb/inter-hub/raw/main/registry/indexes/capabilities.yaml", + "enabled": false, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:18+00:00", + "updated_at": "2026-07-07T10:26:41+00:00" + }, + { + "repo": "issue-core", + "url": "https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:53:54+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "kaizen-agentic", + "url": "https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:53:57+00:00", + "updated_at": "2026-08-20T21:44:36+00:00" + }, + { + "repo": "key-cape", + "url": "https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:00+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "kontextual-engine", + "url": "https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:04+00:00", + "updated_at": "2026-08-20T21:44:36+00:00" + }, + { + "repo": "llm-connect", + "url": "https://forgejo.coulomb.social/coulomb/llm-connect/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:07+00:00", + "updated_at": "2026-08-20T21:44:37+00:00" + }, + { + "repo": "markitect-filter", + "url": "https://forgejo.coulomb.social/coulomb/markitect-filter/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:09+00:00", + "updated_at": "2026-08-20T21:44:37+00:00" + }, + { + "repo": "markitect-main", + "url": "https://forgejo.coulomb.social/coulomb/markitect-main/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:54:13+00:00", + "updated_at": "2026-08-20T21:44:37+00:00" + }, + { + "repo": "markitect-quarkdown", + "url": "https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:36+00:00", + "updated_at": "2026-08-20T21:44:38+00:00" + }, + { + "repo": "markitect-tool", + "url": "https://forgejo.coulomb.social/coulomb/markitect-tool/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:42+00:00", + "updated_at": "2026-08-20T21:44:38+00:00" + }, + { + "repo": "net-kingdom", + "url": "https://forgejo.coulomb.social/coulomb/net-kingdom/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:46+00:00", + "updated_at": "2026-08-20T21:44:39+00:00" + }, + { + "repo": "open-cmis-tck", + "url": "https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:51+00:00", + "updated_at": "2026-08-20T21:44:39+00:00" + }, + { + "repo": "open-reuse", + "url": "https://forgejo.coulomb.social/coulomb/open-reuse/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:56+00:00", + "updated_at": "2026-08-20T21:44:39+00:00" + }, + { + "repo": "ops-bridge", + "url": "https://forgejo.coulomb.social/coulomb/ops-bridge/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:55:59+00:00", + "updated_at": "2026-08-20T21:44:40+00:00" + }, + { + "repo": "ops-hub", + "url": "https://forgejo.coulomb.social/coulomb/ops-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:56:04+00:00", + "updated_at": "2026-08-20T21:44:40+00:00" + }, + { + "repo": "ops-warden", + "url": "https://forgejo.coulomb.social/coulomb/ops-warden/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:56:09+00:00", + "updated_at": "2026-08-20T21:44:41+00:00" + }, + { + "repo": "phase-memory", + "url": "https://forgejo.coulomb.social/coulomb/phase-memory/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:56:13+00:00", + "updated_at": "2026-08-20T21:44:41+00:00" + }, + { + "repo": "railiance-apps", + "url": "https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:56:16+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "railiance-cluster", + "url": "https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:57:59+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "railiance-enablement", + "url": "https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:58:03+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "railiance-fabric", + "url": "https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:59:30+00:00", + "updated_at": "2026-08-20T21:44:42+00:00" + }, + { + "repo": "railiance-forge", + "url": "https://forgejo.coulomb.social/coulomb/railiance-forge/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:58:06+00:00", + "updated_at": "2026-08-20T21:44:42+00:00" + }, + { + "repo": "railiance-infra", + "url": "https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:59:09+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "railiance-platform", + "url": "https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:58:46+00:00", + "updated_at": "2026-07-07T12:42:19+00:00" + }, + { + "repo": "repo-scoping", + "url": "https://forgejo.coulomb.social/coulomb/repo-scoping/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:58:52+00:00", + "updated_at": "2026-08-20T21:44:42+00:00" + }, + { + "repo": "repo-seed", + "url": "https://forgejo.coulomb.social/coulomb/repo-seed/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:58:57+00:00", + "updated_at": "2026-08-20T21:44:43+00:00" + }, + { + "repo": "reuse-surface", + "url": "https://forgejo.coulomb.social/coulomb/reuse-surface/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "description": "Capability registry for helix_forge", + "registered_at": "2026-06-15T08:24:18+00:00", + "updated_at": "2026-08-20T21:44:43+00:00" + }, + { + "repo": "shard-wiki", + "url": "https://forgejo.coulomb.social/coulomb/shard-wiki/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:35:03+00:00", + "updated_at": "2026-08-20T21:44:44+00:00" + }, + { + "repo": "state-hub", + "url": "https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:35:00+00:00", + "updated_at": "2026-07-07T16:09:42+00:00" + }, + { + "repo": "tegwick-control", + "url": "https://forgejo.coulomb.social/coulomb/tegwick-control/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:59:00+00:00", + "updated_at": "2026-08-20T21:44:44+00:00" + }, + { + "repo": "the-custodian", + "url": "https://forgejo.coulomb.social/coulomb/the-custodian/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-15T23:59:04+00:00", + "updated_at": "2026-08-20T21:44:45+00:00" + }, + { + "repo": "user-engine", + "url": "https://forgejo.coulomb.social/coulomb/user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:02:46+00:00", + "updated_at": "2026-08-20T21:44:45+00:00" + }, + { + "repo": "vantage-point", + "url": "https://forgejo.coulomb.social/coulomb/vantage-point/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:02:51+00:00", + "updated_at": "2026-08-20T21:44:46+00:00" + }, + { + "repo": "vergabe-teilnahme", + "url": "https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:02:56+00:00", + "updated_at": "2026-08-20T21:44:46+00:00" + }, + { + "repo": "whynot-control", + "url": "https://forgejo.coulomb.social/coulomb/whynot-control/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:03:00+00:00", + "updated_at": "2026-08-20T21:44:46+00:00" + }, + { + "repo": "whynot-design", + "url": "https://forgejo.coulomb.social/coulomb/whynot-design/raw/branch/main/registry/indexes/capabilities.yaml", + "enabled": true, + "required": false, + "domain": "helix_forge", + "cache_ttl_seconds": 86400, + "auth_header": "Authorization", + "registered_at": "2026-06-16T00:03:03+00:00", + "updated_at": "2026-08-20T21:44:47+00:00" + } + ] +} diff --git a/docs/assessments/netkingdom-2026-10-14/hosted-verification.json b/docs/assessments/netkingdom-2026-10-14/hosted-verification.json new file mode 100644 index 00000000..8b4ef920 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hosted-verification.json @@ -0,0 +1,61 @@ +{ + "matched": 32, + "expected": 70, + "missing": [ + "capability.execution.openweight-rein", + "capability.execution.profile-harness", + "capability.execution.sandbox-provision", + "capability.execution.scheduled-agent-rein", + "capability.finance.security-budget-evidence", + "capability.identity.tenant-facts", + "capability.infotech.runbook-tutorials", + "capability.infotech.sbom-management", + "capability.observability.security-signals", + "capability.organization.role-catalog", + "capability.railiance.bootstrap-sequencing", + "capability.railiance.browser-verification", + "capability.railiance.knative-rail", + "capability.railiance.kubernetes-rail", + "capability.railiance.openbao-package", + "capability.railiance.policy-publication-package", + "capability.railiance.postgres-isolation-recovery", + "capability.railiance.sbom-runtime-package", + "capability.railiance.security-consumption-contracts", + "capability.railiance.substrate-bindings", + "capability.railiance.telemetry-package", + "capability.railiance.tenant-engine-package", + "capability.railiance.user-engine-package", + "capability.resources.security-capacity", + "capability.security.adversarial-evidence", + "capability.security.agent-knowledge", + "capability.security.approval-lifecycle", + "capability.security.credential-lifecycle", + "capability.security.doctrine-review", + "capability.security.human-decision-workspace", + "capability.security.maturity-claims", + "capability.security.policy-publication", + "capability.security.posture-assessment", + "capability.security.practice-canon", + "capability.security.repository-secret-prevention", + "capability.security.risk-register", + "capability.security.structure-construction", + "capability.security.zone-reference" + ], + "stale": false, + "composed_at": "2026-10-14T04:48:46+00:00", + "warnings": null, + "private_sources": [ + "rapp-openbao", + "rapp-policy-nexus", + "rapp-postgres", + "rapp-telemetry", + "rapp-tenant-engine", + "rapp-user-engine", + "rapp-sbom-nexus" + ], + "write_attempt": { + "route": "reuse-surface-hub-write-token", + "pdp_decision": "decision:f730e3da14beebdd", + "result": "OpenBao 403 permission denied; helper not executed; no hub writes" + } +} diff --git a/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json b/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json new file mode 100644 index 00000000..af6b3430 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hub-private-source-pending.json @@ -0,0 +1,104 @@ +{ + "reason": "Anonymous source fetch returns 404; hub-side read credential or separately approved metadata publication is needed. Do not change repository visibility.", + "repos": [ + "rapp-openbao", + "rapp-policy-nexus", + "rapp-postgres", + "rapp-sbom-nexus", + "rapp-telemetry", + "rapp-tenant-engine", + "rapp-user-engine" + ], + "draft_registrations_not_ready": [ + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-openbao", + "url": "https://forgejo.coulomb.social/coulomb/rapp-openbao/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-policy-nexus", + "url": "https://forgejo.coulomb.social/coulomb/rapp-policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-postgres", + "url": "https://forgejo.coulomb.social/coulomb/rapp-postgres/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-telemetry", + "url": "https://forgejo.coulomb.social/coulomb/rapp-telemetry/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-tenant-engine", + "url": "https://forgejo.coulomb.social/coulomb/rapp-tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-user-engine", + "url": "https://forgejo.coulomb.social/coulomb/rapp-user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-sbom-nexus", + "url": "https://forgejo.coulomb.social/coulomb/rapp-sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + } + ], + "needed_fields": [ + "auth_env name for an already admitted hub-side source-read credential", + "proof that the credential is limited to the intended repository read scope", + "successful hub-side index fetch without value disclosure", + "owner consent to metadata appearing in public federation" + ] +} diff --git a/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json b/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json new file mode 100644 index 00000000..160efdff --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hub-public-registration-plan.json @@ -0,0 +1,374 @@ +[ + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "approval-engine", + "url": "https://forgejo.coulomb.social/coulomb/approval-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "emergent-security", + "url": "https://forgejo.coulomb.social/coulomb/emergent-security/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "fin-hub", + "url": "https://forgejo.coulomb.social/coulomb/fin-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "gate-house", + "url": "https://forgejo.coulomb.social/coulomb/gate-house/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "glas-harness", + "url": "https://forgejo.coulomb.social/coulomb/glas-harness/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "informed-decision", + "url": "https://forgejo.coulomb.social/coulomb/informed-decision/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "kings-guard", + "url": "https://forgejo.coulomb.social/coulomb/kings-guard/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "maturity-engine", + "url": "https://forgejo.coulomb.social/coulomb/maturity-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "ops-mason", + "url": "https://forgejo.coulomb.social/coulomb/ops-mason/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "policy-nexus", + "url": "https://forgejo.coulomb.social/coulomb/policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rail-kubernetes", + "url": "https://forgejo.coulomb.social/coulomb/rail-kubernetes/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-bootstrap", + "url": "https://forgejo.coulomb.social/coulomb/railiance-bootstrap/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-master", + "url": "https://forgejo.coulomb.social/coulomb/railiance-master/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-telemetry", + "url": "https://forgejo.coulomb.social/coulomb/railiance-telemetry/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-playwright", + "url": "https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "reef-railiance", + "url": "https://forgejo.coulomb.social/coulomb/reef-railiance/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rein-aharness", + "url": "https://forgejo.coulomb.social/coulomb/rein-aharness/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rein-openweights", + "url": "https://forgejo.coulomb.social/coulomb/rein-openweights/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "repo-manager", + "url": "https://forgejo.coulomb.social/coulomb/repo-manager/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "resource-control", + "url": "https://forgejo.coulomb.social/coulomb/resource-control/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "risk-nexus", + "url": "https://forgejo.coulomb.social/coulomb/risk-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "role-engine", + "url": "https://forgejo.coulomb.social/coulomb/role-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "runbook-tutorials", + "url": "https://forgejo.coulomb.social/coulomb/runbook-tutorials/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "sand-boxer", + "url": "https://forgejo.coulomb.social/coulomb/sand-boxer/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "sbom-nexus", + "url": "https://forgejo.coulomb.social/coulomb/sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "secrets-engine", + "url": "https://forgejo.coulomb.social/coulomb/secrets-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "security-canon", + "url": "https://forgejo.coulomb.social/coulomb/security-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "tenant-engine", + "url": "https://forgejo.coulomb.social/coulomb/tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "whitehat-security", + "url": "https://forgejo.coulomb.social/coulomb/whitehat-security/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "zone-engine", + "url": "https://forgejo.coulomb.social/coulomb/zone-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rail-knative", + "url": "https://forgejo.coulomb.social/coulomb/rail-knative/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + } +] diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json new file mode 100644 index 00000000..680a8d68 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-plan.json @@ -0,0 +1,458 @@ +[ + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "approval-engine", + "url": "https://forgejo.coulomb.social/coulomb/approval-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "emergent-security", + "url": "https://forgejo.coulomb.social/coulomb/emergent-security/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "fin-hub", + "url": "https://forgejo.coulomb.social/coulomb/fin-hub/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "gate-house", + "url": "https://forgejo.coulomb.social/coulomb/gate-house/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "glas-harness", + "url": "https://forgejo.coulomb.social/coulomb/glas-harness/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "informed-decision", + "url": "https://forgejo.coulomb.social/coulomb/informed-decision/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "kings-guard", + "url": "https://forgejo.coulomb.social/coulomb/kings-guard/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "maturity-engine", + "url": "https://forgejo.coulomb.social/coulomb/maturity-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "ops-mason", + "url": "https://forgejo.coulomb.social/coulomb/ops-mason/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "policy-nexus", + "url": "https://forgejo.coulomb.social/coulomb/policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rail-kubernetes", + "url": "https://forgejo.coulomb.social/coulomb/rail-kubernetes/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-bootstrap", + "url": "https://forgejo.coulomb.social/coulomb/railiance-bootstrap/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-master", + "url": "https://forgejo.coulomb.social/coulomb/railiance-master/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "railiance-telemetry", + "url": "https://forgejo.coulomb.social/coulomb/railiance-telemetry/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-openbao", + "url": "https://forgejo.coulomb.social/coulomb/rapp-openbao/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-playwright", + "url": "https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-policy-nexus", + "url": "https://forgejo.coulomb.social/coulomb/rapp-policy-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-postgres", + "url": "https://forgejo.coulomb.social/coulomb/rapp-postgres/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-telemetry", + "url": "https://forgejo.coulomb.social/coulomb/rapp-telemetry/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-tenant-engine", + "url": "https://forgejo.coulomb.social/coulomb/rapp-tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-user-engine", + "url": "https://forgejo.coulomb.social/coulomb/rapp-user-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "reef-railiance", + "url": "https://forgejo.coulomb.social/coulomb/reef-railiance/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rein-aharness", + "url": "https://forgejo.coulomb.social/coulomb/rein-aharness/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rein-openweights", + "url": "https://forgejo.coulomb.social/coulomb/rein-openweights/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "repo-manager", + "url": "https://forgejo.coulomb.social/coulomb/repo-manager/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "resource-control", + "url": "https://forgejo.coulomb.social/coulomb/resource-control/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "risk-nexus", + "url": "https://forgejo.coulomb.social/coulomb/risk-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "role-engine", + "url": "https://forgejo.coulomb.social/coulomb/role-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "runbook-tutorials", + "url": "https://forgejo.coulomb.social/coulomb/runbook-tutorials/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "sand-boxer", + "url": "https://forgejo.coulomb.social/coulomb/sand-boxer/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "sbom-nexus", + "url": "https://forgejo.coulomb.social/coulomb/sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "secrets-engine", + "url": "https://forgejo.coulomb.social/coulomb/secrets-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "security-canon", + "url": "https://forgejo.coulomb.social/coulomb/security-canon/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "tenant-engine", + "url": "https://forgejo.coulomb.social/coulomb/tenant-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "whitehat-security", + "url": "https://forgejo.coulomb.social/coulomb/whitehat-security/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "zone-engine", + "url": "https://forgejo.coulomb.social/coulomb/zone-engine/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rail-knative", + "url": "https://forgejo.coulomb.social/coulomb/rail-knative/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + }, + { + "method": "POST", + "path": "/v1/repos", + "body": { + "repo": "rapp-sbom-nexus", + "url": "https://forgejo.coulomb.social/coulomb/rapp-sbom-nexus/raw/branch/main/registry/indexes/capabilities.yaml", + "domain": "infotech", + "enabled": true, + "required": false, + "registered_by": "codex-CUST-WP-0081" + } + } +] diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json new file mode 100644 index 00000000..b847dce6 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-proposal.json @@ -0,0 +1,14 @@ +{ + "id": "CUST81-REUSE-REGISTRATION-001", + "authority": "User explicitly requested establishment of reviewed capabilities with reuse-surface. Source publication and cross-repository writes approved through sandbox escalation. No grant beyond registry metadata.", + "target": "https://reuse.coulomb.social/v1/repos", + "helper_sha256": "55465aa4f6a41960055d1b7fcf578c812c917af3110e58676f343472977202fd", + "plan_sha256": "ec0edd0301c43cfb98b5beea7fd454975bca8f6900359df851e70dcc6e6d08df", + "actions": 38, + "credential_lane": "reuse-surface-hub-write-token through warden access --exec; no credential export or persistence", + "expected": "All 60 reviewed owner indexes registered, all 70 reviewed IDs discoverable exactly once with source parity", + "verification": "Public HTTPS raw index and entry hashes, registration readback and fresh hosted federation payload", + "rollback": "Disable only newly created registrations from the exact plan if discovery is incorrect; preserve existing registrations. Source metadata can be reverted by the registry-only commits.", + "cost": "No service deployment or new recurring resource commitment; 38 bounded metadata writes and public readback on existing services.", + "risk": "Incorrect catalog discovery or temporary compose errors; no identity, policy, credential grant, workload or audit authority change. Stop on conflicting registration or transport failure." +} diff --git a/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json b/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json new file mode 100644 index 00000000..8cc40171 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/hub-registration-receipt.json @@ -0,0 +1,9 @@ +{ + "complete": false, + "actions": [], + "helper_executed": false, + "credential_lane_result": "OpenBao HTTP 403", + "pdp_decision": "decision:f730e3da14beebdd", + "public_registrations_ready": 31, + "private_registrations_pending": 7 +} diff --git a/docs/assessments/netkingdom-2026-10-14/inventory.json b/docs/assessments/netkingdom-2026-10-14/inventory.json new file mode 100644 index 00000000..a36f4f1c --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/inventory.json @@ -0,0 +1,2905 @@ +{ + "as_of": "2026-10-14", + "capabilities": [ + { + "repo": "security-canon", + "id": "capability.security.practice-canon", + "name": "Security practice and authority vocabulary", + "availability": "A0", + "operational_estimate": 2, + "surface": "Versioned SEC-DSM and Mode of Authority documents", + "limitation": "Normative practice; no runtime control or certification", + "use_cases": [ + "U01", + "U07", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.practice-canon.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom security architecture and conformance tooling", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned IAM, layer, tenancy and credential contracts plus validators", + "limitation": "Mixed accepted and proposed standards; framework integration remains incomplete", + "use_cases": [ + "U01", + "U02", + "U03", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "SECURITY-COMPANION.md" + ], + "existing_entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "prior_vector": "D3 / A2 / C1 / R1", + "vector": "D3 / A2 / C1 / R1", + "entry_path": "registry/capabilities/capability.security.iam-tooling-suite.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.scenario-compose", + "name": "Deterministic security scenario composition", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI selects pinned providers and orders trust transitions", + "limitation": "Plan only; execution.permitted is always false", + "use_cases": [ + "U01", + "U14" + ], + "artifacts": [ + "tools/security-scenario-composer/README.md", + "tools/security-scenario-composer/security_scenario_composer.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.scenario-compose.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.posture-feedback", + "name": "Deterministic posture feedback", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI evaluates evidence age and posture into owner-routed findings", + "limitation": "Proposal only; no policy changes or remediation execution", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "tools/posture-feedback/README.md", + "tools/posture-feedback/posture_feedback.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.posture-feedback.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.case-contracts", + "name": "Security case types and instance validation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned types, cases and schema validation", + "limitation": "Type acknowledgment, case acceptance, structural materialization and native execution are distinct", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "tools/security-case-types/README.md", + "canon/standards/security-case-types_v0.1.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.case-contracts.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.bootstrap-recovery", + "name": "Guarded bootstrap and recovery preparation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Local identity, bootstrap console, encrypted custody handoff and caller tools", + "limitation": "Source repairs and disposable native fixtures do not prove estate root isolation or recovery", + "use_cases": [ + "U10" + ], + "artifacts": [ + "tools/security-bootstrap-console/README.md", + "tools/custody-record/README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.bootstrap-recovery.md" + }, + { + "repo": "net-kingdom", + "id": "capability.security.emission-profile", + "name": "Security emission cadence validation", + "availability": "A2", + "operational_estimate": 2, + "surface": "Security profile over generic emission contracts and validator", + "limitation": "Profile adoption and source completeness require owner-native evidence", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "tools/emission-cadence-profile/README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.emission-profile.md" + }, + { + "repo": "key-cape", + "id": "capability.iam.key-cape", + "name": "OIDC identity and assurance", + "availability": "A4", + "operational_estimate": 3, + "surface": "OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI", + "limitation": "Current stack is Authelia, LLDAP and privacyIDEA; service secrets remain static and recovery proof has open gates", + "use_cases": [ + "U02", + "U03", + "U04", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.iam.key-cape.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A4 / C2 / R1", + "entry_path": "registry/capabilities/capability.iam.key-cape.md" + }, + { + "repo": "user-engine", + "id": "capability.identity.user-engine", + "name": "User lifecycle and account journeys", + "availability": "A4", + "operational_estimate": 3, + "surface": "Accounts, identity links, membership, MFA and recovery portal, advisory catalog", + "limitation": "Application readback is advisory; applications must enforce their own authorization", + "use_cases": [ + "U02", + "U03", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.identity.user-engine.md", + "prior_vector": "D4 / A1 / C2 / R0", + "vector": "D4 / A4 / C2 / R0", + "entry_path": "registry/capabilities/capability.identity.user-engine.md" + }, + { + "repo": "tenant-engine", + "id": "capability.identity.tenant-facts", + "name": "Tenant lifecycle and guardrail facts", + "availability": "A4", + "operational_estimate": 3, + "surface": "Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store", + "limitation": "Tenant ceilings may narrow platform authority; external audit sender acceptance remains separate", + "use_cases": [ + "U03", + "U04" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.identity.tenant-facts.md" + }, + { + "repo": "zone-engine", + "id": "capability.security.zone-reference", + "name": "Zone membership reference conformance", + "availability": "A2", + "operational_estimate": 2, + "surface": "Offline resolution, exception and lineage checks", + "limitation": "No live zone engine, PDP or protected side effects", + "use_cases": [ + "U01", + "U03", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.zone-reference.md" + }, + { + "repo": "access-engine", + "id": "capability.authorization.policy-evaluate", + "name": "Policy evaluation and decision evidence", + "availability": "A4", + "operational_estimate": 3, + "surface": "Check, batch, list-allowed, explain, binding, lifetime and decision records", + "limitation": "One PDP owner with per-consumer deployments; signed envelope production and consumer adoption are distinct", + "use_cases": [ + "U03", + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A4 / C2 / R1", + "entry_path": "registry/capabilities/capability.authorization.policy-evaluate.md" + }, + { + "repo": "approval-engine", + "id": "capability.security.approval-lifecycle", + "name": "Bound approval lifecycle", + "availability": "A4", + "operational_estimate": 2, + "surface": "Authenticated issue, claim, revoke, supersede and atomic consume API with outbox", + "limitation": "Deployed schema v5 and source v6 differ; named PEP and issuer acceptance remain open", + "use_cases": [ + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "approval_engine/api.py", + "docs/production-dependencies.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.approval-lifecycle.md" + }, + { + "repo": "secrets-engine", + "id": "capability.security.credential-lifecycle", + "name": "Cataloged credential lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, delivery and revoke", + "limitation": "Production protected execution and independently anchored PDP authentication remain incomplete", + "use_cases": [ + "U04", + "U05", + "U07" + ], + "artifacts": [ + "SCOPE.md", + "src/secrets_engine/decision_check.py" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.credential-lifecycle.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.ssh-certificate-issuance", + "name": "Decision-bound SSH certificates", + "availability": "A3", + "operational_estimate": 3, + "surface": "warden sign with local and OpenBao backends and adm/agt/atm actors", + "limitation": "Direct Tooling contact is a declared gap; certificate reachability is not target authorization", + "use_cases": [ + "U06" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "prior_vector": "D4 / A3 / C3 / R2", + "vector": "D4 / A3 / C3 / R2", + "entry_path": "registry/capabilities/capability.security.ssh-certificate-issuance.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.access-routing", + "name": "Credential routing and contained access", + "availability": "A3", + "operational_estimate": 3, + "surface": "warden route and access catalog; exact lane conduit and secret-exec routing", + "limitation": "Routing grants no authority; interim delegates and attended high-risk lanes persist", + "use_cases": [ + "U04", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "wiki/CredentialRouting.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A3 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.access-routing.md" + }, + { + "repo": "ops-warden", + "id": "capability.security.case-follow-through", + "name": "Security case operational follow-through", + "availability": "A2", + "operational_estimate": 2, + "surface": "KnownSecurityCase route, plan and operational receipts", + "limitation": "Execution requires accepted structure and exact owner contracts; case closure is not automatic", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "workplans/WARDEN-WP-0044-security-case-follow-through.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.case-follow-through.md" + }, + { + "repo": "ops-mason", + "id": "capability.security.structure-construction", + "name": "Reviewed security structure construction", + "availability": "A2", + "operational_estimate": 2, + "surface": "Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply", + "limitation": "Founder plan gate is an explicit exception; not full PDP conformance", + "use_cases": [ + "U01", + "U05", + "U06" + ], + "artifacts": [ + "SCOPE.md", + "docs/construction-plan-format.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.structure-construction.md" + }, + { + "repo": "ops-bridge", + "id": "capability.ops.tunnel-bridge", + "name": "SSH tunnel lifecycle", + "availability": "A2", + "operational_estimate": 3, + "surface": "Named tunnels, reconnect, health and TTL-aware cert_command", + "limitation": "Private transport does not authenticate applications or decide access", + "use_cases": [ + "U06" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "prior_vector": "D3 / A2 / C2 / R1", + "vector": "D3 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.ops.tunnel-bridge.md" + }, + { + "repo": "audit-core", + "id": "capability.audit.event-retain", + "name": "Independent audit custody", + "availability": "A4", + "operational_estimate": 3, + "surface": "Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation", + "limitation": "Custody after arrival does not prove source completeness; freshness bounds integrity assertions", + "use_cases": [ + "U08", + "U09", + "U10" + ], + "artifacts": [ + "SCOPE.md", + "docs/stream-completeness.md" + ], + "existing_entry_path": "registry/capabilities/capability.audit.event-retain.md", + "prior_vector": "D4 provision / A4 / C3 / R2", + "vector": "D3 / A4 / C3 / R2", + "entry_path": "registry/capabilities/capability.audit.event-retain.md" + }, + { + "repo": "maturity-engine", + "id": "capability.security.maturity-claims", + "name": "Evidence-based maturity claims and gap register", + "availability": "A2", + "operational_estimate": 2, + "surface": "SQLite library and CLI for ladders, evidence expiry, compute, explain and stance inventory", + "limitation": "No production deployment claimed; levels supply facts and cannot authorize actions", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/claim-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.maturity-claims.md" + }, + { + "repo": "kings-guard", + "id": "capability.security.posture-assessment", + "name": "Security posture assessment and response proposals", + "availability": "A2", + "operational_estimate": 2, + "surface": "Normalized observation evaluator, cadence checks and secret-use snapshot adapter", + "limitation": "Bounded reference pilot; containment proposals only; deployed-stream admission remains open", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "docs/SecretUseSnapshotAdmission.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.posture-assessment.md" + }, + { + "repo": "whitehat-security", + "id": "capability.security.adversarial-evidence", + "name": "Authorized adversarial evidence harness", + "availability": "A2", + "operational_estimate": 2, + "surface": "Offline ASM and tenancy calibrations and engagement admission", + "limitation": "Live probes require a complete engagement; no blanket target authorization", + "use_cases": [ + "U03", + "U08", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.adversarial-evidence.md" + }, + { + "repo": "gate-house", + "id": "capability.security.doctrine-review", + "name": "Security doctrine and architecture review", + "availability": "A0", + "operational_estimate": 3, + "surface": "Layer rules, authority context, ASM criteria and interpretations", + "limitation": "Staff judgment; no runtime PDP, credential issuer or automatic enforcement", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "INTENT.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.doctrine-review.md" + }, + { + "repo": "emergent-security", + "id": "capability.security.agent-knowledge", + "name": "Verified security orientation for agents", + "availability": "A2", + "operational_estimate": 2, + "surface": "Versioned source-pinned cards, read-only CLI, provider adapters and sealed exports", + "limitation": "Current start card withheld for source drift; orientation never grants authority", + "use_cases": [ + "U01", + "U11", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "knowledge/cards/start.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.agent-knowledge.md" + }, + { + "repo": "informed-decision", + "id": "capability.security.human-decision-workspace", + "name": "Human security decision presentation and disposition", + "availability": "A4", + "operational_estimate": 3, + "surface": "Headless lifecycle and browser workspace with exact native approval references", + "limitation": "Initial audience is bounded; Approval Engine owns approval state, Access Engine decides", + "use_cases": [ + "U04", + "U05", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.human-decision-workspace.md" + }, + { + "repo": "policy-nexus", + "id": "capability.security.policy-publication", + "name": "Policy publication with source provenance", + "availability": "A2", + "operational_estimate": 3, + "surface": "Generated immutable publication, source currency and stable policy URLs", + "limitation": "Publication does not ratify policy or enforce it", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "README.md", + "docs/publication-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.policy-publication.md" + }, + { + "repo": "risk-nexus", + "id": "capability.security.risk-register", + "name": "Security risk and exception review register", + "availability": "A2", + "operational_estimate": 2, + "surface": "Markdown findings and Python review, verification and due-work reports", + "limitation": "Judgment remains human or agent; no live EUR risk gate or autonomous response", + "use_cases": [ + "U09", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.risk-register.md" + }, + { + "repo": "role-engine", + "id": "capability.organization.role-catalog", + "name": "Organizational role definitions", + "availability": "A0", + "operational_estimate": 1, + "surface": "Versioned documentation catalog", + "limitation": "Not IAM roles, assignments or runtime authorization", + "use_cases": [ + "U01", + "U11" + ], + "artifacts": [ + "README.md", + "INTENT.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.organization.role-catalog.md" + }, + { + "repo": "glas-harness", + "id": "capability.execution.profile-harness", + "name": "Profile-bound agent execution lifecycle", + "availability": "A3", + "operational_estimate": 2, + "surface": "Typed execution requests, profile/rein resolution, sandbox and cleanup orchestration", + "limitation": "No ready profile asserted by SCOPE; Custodian native isolation remains open", + "use_cases": [ + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A3 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.profile-harness.md" + }, + { + "repo": "sand-boxer", + "id": "capability.execution.sandbox-provision", + "name": "Sandbox establishment and lifecycle", + "availability": "A5", + "operational_estimate": 2, + "surface": "Profiles, extensions, provision, checkpoints, TTL teardown and telemetry", + "limitation": "Backend-specific guarantees; a created sandbox alone proves no credential isolation", + "use_cases": [ + "U11", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/execution.sandbox-provision.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D5 / A5 / C5 / R0", + "entry_path": "registry/capabilities/execution.sandbox-provision.md" + }, + { + "repo": "rein-aharness", + "id": "capability.execution.scheduled-agent-rein", + "name": "Scheduled agent intake and harness routing", + "availability": "A2", + "operational_estimate": 3, + "surface": "Activity Core lease claim/heartbeat and Glas profile execution", + "limitation": "Legacy paths are time-gated; task success is not privileged authority", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.scheduled-agent-rein.md" + }, + { + "repo": "rein-openweights", + "id": "capability.execution.openweight-rein", + "name": "Bounded open-weight agent execution", + "availability": "A2", + "operational_estimate": 2, + "surface": "Tool loop, path guards, turn/budget limits and verified-commit result", + "limitation": "Provider credential acquisition and runtime authority need separate custody controls", + "use_cases": [ + "U11" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.execution.openweight-rein.md" + }, + { + "repo": "agentic-resources", + "id": "capability.agents.performance-learning", + "name": "Agent performance learning", + "availability": "A2", + "operational_estimate": 2, + "surface": "Capture sessions, curate patterns, distribute lessons and measure outcomes", + "limitation": "Workforce assignments and broader authority contracts remain proposed", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.agents.performance-learning.md" + }, + { + "repo": "runbook-tutorials", + "id": "capability.infotech.runbook-tutorials", + "name": "Guided administrative runbooks", + "availability": "A2", + "operational_estimate": 2, + "surface": "Pack schema, loader, local UI/CLI, gates, verification and rollback evidence", + "limitation": "Owner supplies procedures; UI progress is not runtime approval", + "use_cases": [ + "U05", + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/pack-spec.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md", + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.runbook-tutorials.md" + }, + { + "repo": "repo-manager", + "id": "capability.security.repository-secret-prevention", + "name": "Repository metadata and staged-secret prevention", + "availability": "A2", + "operational_estimate": 3, + "surface": "Repository observation plus pinned staged-blob scanner and hook integration", + "limitation": "Local hooks are bypassable; coverage is exact-checkout scoped", + "use_cases": [ + "U07", + "U12" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.repository-secret-prevention.md" + }, + { + "repo": "sbom-nexus", + "id": "capability.infotech.sbom-management", + "name": "Dependency provenance and SBOM evidence", + "availability": "A4", + "operational_estimate": 3, + "surface": "Controlled archive ingest, immutable snapshots, freshness and license review", + "limitation": "SBOM and license evidence do not prove vulnerability exploitability or artifact trust", + "use_cases": [ + "U12", + "U09" + ], + "artifacts": [ + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.sbom-management.md", + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.sbom-management.md" + }, + { + "repo": "activity-core", + "id": "capability.activity.event-coordinate", + "name": "Durable automation and bounded operations", + "availability": "A4", + "operational_estimate": 3, + "surface": "Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime sinks", + "limitation": "Not a general shell executor; first unassisted security-flow cadence acceptance remains open", + "use_cases": [ + "U09", + "U12" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.activity.event-coordinate.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.activity.event-coordinate.md" + }, + { + "repo": "issue-core", + "id": "capability.infotech.issue-tracking", + "name": "External issue tracker connector", + "availability": "A2", + "operational_estimate": 2, + "surface": "CLI and Python adapters for external issue systems", + "limitation": "Internal work originates in owner files; external projection is optional", + "use_cases": [ + "U09" + ], + "artifacts": [ + "README.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.issue-tracking.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.infotech.issue-tracking.md" + }, + { + "repo": "state-hub", + "id": "capability.statehub.workstream-coordinate", + "name": "Cross-repository work tracking", + "availability": "A4", + "operational_estimate": 3, + "surface": "File-derived workplans, tasks, dependencies, decisions and coordination views", + "limitation": "Read/cache/index of owner work; not runtime approval authority", + "use_cases": [ + "U09" + ], + "artifacts": [ + "README.md", + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "prior_vector": "D4 / A4 / C3 / R2", + "vector": "D4 / A4 / C3 / R2", + "entry_path": "registry/capabilities/capability.statehub.workstream-coordinate.md" + }, + { + "repo": "state-hub", + "id": "capability.statehub.progress-log", + "name": "Progress and work evidence indexing", + "availability": "A4", + "operational_estimate": 3, + "surface": "REST progress and task evidence references", + "limitation": "Not independent security event custody", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "README.md", + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.statehub.progress-log.md", + "prior_vector": "D4 / A4 / C3 / R3", + "vector": "D4 / A4 / C3 / R3", + "entry_path": "registry/capabilities/capability.statehub.progress-log.md" + }, + { + "repo": "the-custodian", + "id": "capability.agents.custodian-runtime-tooling", + "name": "Generic agent runtime and repository tooling", + "availability": "A2", + "operational_estimate": 2, + "surface": "Agent runtime modules and repository classification tooling", + "limitation": "Only generic tooling is reusable; confidential canon and session memory are excluded", + "use_cases": [ + "U09", + "U11", + "U14" + ], + "artifacts": [ + "runtime/README.md" + ], + "existing_entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "prior_vector": "D2 / A1 / C1 / R0", + "vector": "D2 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md" + }, + { + "repo": "coordination-engine", + "id": "capability.coordination.cross-owner-work", + "name": "Cross-owner coordination lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "Observation, lease, wake-up, checkpoint and receipt contracts/runtime", + "limitation": "Coordinates owners without replacing their execution or security authority", + "use_cases": [ + "U09" + ], + "artifacts": [ + "SCOPE.md", + "spec/cross-owner-wait-mode-v0.1.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.coordination.cross-owner-work.md" + }, + { + "repo": "reuse-surface", + "id": "capability.registry.register", + "name": "Capability registry and federation", + "availability": "A3", + "operational_estimate": 3, + "surface": "Owner Markdown entries, indexes, federation hub and planning queries", + "limitation": "Discovery is not readiness; empty and stale entries need evidence-led maintenance", + "use_cases": [ + "U01", + "U09", + "U14" + ], + "artifacts": [ + "docs/RegistryFederation.md", + "specs/CapabilityMaturityStandard.md" + ], + "existing_entry_path": "registry/capabilities/capability.registry.register.md", + "prior_vector": "D3 / A4 / C2 / R3", + "vector": "D3 / A3 / C2 / R3", + "entry_path": "registry/capabilities/capability.registry.register.md" + }, + { + "repo": "reuse-surface", + "id": "capability.registry.validate", + "name": "Capability registry validation", + "availability": "A3", + "operational_estimate": 3, + "surface": "Schema, index consistency and relation checks", + "limitation": "Schema validity alone proves neither capability behavior nor hosted freshness", + "use_cases": [ + "U01", + "U14" + ], + "artifacts": [ + "docs/RegistryFederation.md", + "schemas/capability.schema.yaml" + ], + "existing_entry_path": "registry/capabilities/capability.registry.validate.md", + "prior_vector": "D4 / A3 / C3 / R3", + "vector": "D4 / A3 / C3 / R3", + "entry_path": "registry/capabilities/capability.registry.validate.md" + }, + { + "repo": "info-tech-canon", + "id": "capability.infotech.canon-service", + "name": "Shared semantic contracts and validation", + "availability": "A4", + "operational_estimate": 2, + "surface": "Markdown canon with library, CLI and read-only API", + "limitation": "Mixed seed/candidate maturity; validation is not owner runtime conformance", + "use_cases": [ + "U01", + "U08", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.infotech.canon-service.md", + "prior_vector": "D2 / A2 / C1 / R0", + "vector": "D2 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.infotech.canon-service.md" + }, + { + "repo": "railiance-master", + "id": "capability.railiance.security-consumption-contracts", + "name": "Platform security consumption architecture", + "availability": "A0", + "operational_estimate": 2, + "surface": "Rail/rapp/reef boundaries, exposure and security consumption contracts", + "limitation": "Architecture declarations do not prove implementation or production admission", + "use_cases": [ + "U01", + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md", + "docs/netkingdom-security-consumption-contract.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.security-consumption-contracts.md" + }, + { + "repo": "railiance-platform", + "id": "capability.railiance.platform-services", + "name": "Secret custody and platform data services", + "availability": "A2", + "operational_estimate": 3, + "surface": "OpenBao policy/custody, consumer grants, secret delivery and database/backup contracts", + "limitation": "Package ownership is split to rapp repos; caches and object services are demand-led", + "use_cases": [ + "U04", + "U05", + "U07", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md", + "docs/openbao.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.platform-services.md", + "prior_vector": "D3 / A2 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.platform-services.md" + }, + { + "repo": "railiance-infra", + "id": "capability.railiance.infra-provisioning", + "name": "Host convergence and security baseline", + "availability": "A2", + "operational_estimate": 3, + "surface": "Ansible inventory, firewall, SSH bootstrap and baseline verification", + "limitation": "Current hosts differ from the retained Hetzner provisioning path", + "use_cases": [ + "U06", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "prior_vector": "D4 / A2 / C2 / R1", + "vector": "D4 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.railiance.infra-provisioning.md" + }, + { + "repo": "railiance-cluster", + "id": "capability.railiance.cluster-bootstrap", + "name": "Kubernetes runtime and cluster controls", + "availability": "A2", + "operational_estimate": 3, + "surface": "k3s, ingress, CNI, operators and kubeconfig/runtime checks", + "limitation": "Single-node runtime and workload recovery are distinct from bootstrap success", + "use_cases": [ + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "prior_vector": "D3 / A2 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.cluster-bootstrap.md" + }, + { + "repo": "railiance-enablement", + "id": "capability.railiance.ci-enablement", + "name": "Developer delivery and CI templates", + "availability": "A2", + "operational_estimate": 2, + "surface": "Reusable CI workflows, build and deployment patterns", + "limitation": "Templates do not prove mandatory checks or runner isolation", + "use_cases": [ + "U12", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.ci-enablement.md", + "prior_vector": "D3 / A2 / C2 / R1", + "vector": "D3 / A2 / C2 / R1", + "entry_path": "registry/capabilities/capability.railiance.ci-enablement.md" + }, + { + "repo": "railiance-forge", + "id": "capability.railiance.forge-infrastructure", + "name": "Source forge, registries and runner substrate", + "availability": "A2", + "operational_estimate": 3, + "surface": "Forgejo operation, package registries and runner lifecycle", + "limitation": "Runner workload authority and independent verification coverage remain open", + "use_cases": [ + "U12" + ], + "artifacts": [ + "SCOPE.md", + "workplans/FORGE-WP-0006-independent-secret-detection.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.forge-infrastructure.md" + }, + { + "repo": "railiance-forge", + "id": "capability.security.forge-secret-prevention", + "name": "Independent introduced-history secret prevention", + "availability": "A2", + "operational_estimate": 3, + "surface": "Pinned receive adapter, lifecycle template and fail-closed scan", + "limitation": "Dated native coverage excludes one repo; import/mirror fetch and response coverage remain separate", + "use_cases": [ + "U07", + "U12" + ], + "artifacts": [ + "workplans/FORGE-WP-0006-independent-secret-detection.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.security.forge-secret-prevention.md" + }, + { + "repo": "railiance-apps", + "id": "capability.railiance.workload-deployment-tooling", + "name": "Workload release configuration and guards", + "availability": "A2", + "operational_estimate": 3, + "surface": "Helm/manifests, exact image pins, application runbooks and rollout/rollback", + "limitation": "Release settings depend on underlying platform and workload owners", + "use_cases": [ + "U12", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "prior_vector": "D3 / A2 / C1 / R1", + "vector": "D3 / A2 / C1 / R1", + "entry_path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md" + }, + { + "repo": "railiance-bootstrap", + "id": "capability.railiance.bootstrap-sequencing", + "name": "Bootstrap sequencing contracts", + "availability": "A0", + "operational_estimate": 1, + "surface": "Bare-VM to estate sequence and handoff contract", + "limitation": "End-to-end unattended rebuild is not established", + "use_cases": [ + "U10", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.bootstrap-sequencing.md" + }, + { + "repo": "rail-kubernetes", + "id": "capability.railiance.kubernetes-rail", + "name": "Generic Kubernetes workload lifecycle", + "availability": "A2", + "operational_estimate": 2, + "surface": "Workload declaration, rollout, observe, promote and rollback surfaces", + "limitation": "Compatibility extraction remains; not cluster or application-domain ownership", + "use_cases": [ + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.kubernetes-rail.md" + }, + { + "repo": "reef-railiance", + "id": "capability.railiance.substrate-bindings", + "name": "Substrate topology and bindings", + "availability": "A0", + "operational_estimate": 2, + "surface": "Grouped home-reef identity, topology and placement declarations", + "limitation": "Declarations are not automatic placement or authorization", + "use_cases": [ + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A0 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.substrate-bindings.md" + }, + { + "repo": "railiance-fabric", + "id": "capability.railiance.fabric-graph", + "name": "Infrastructure ownership and dependency graph", + "availability": "A2", + "operational_estimate": 2, + "surface": "Schemas, validation, graph queries and State Hub exports", + "limitation": "Graph assertions need current owner evidence; not an enforcement registry", + "use_cases": [ + "U09", + "U13", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": "registry/capabilities/capability.railiance.fabric-graph.md", + "prior_vector": "D3 / A1 / C1 / R0", + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.fabric-graph.md" + }, + { + "repo": "rapp-openbao", + "id": "capability.railiance.openbao-package", + "name": "Managed OpenBao deployment package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Helm values, package deploy/status/smoke/rollback and custody boundary", + "limitation": "Platform owns grants/policies; retained S3 handoff and recovery acceptance remain explicit", + "use_cases": [ + "U04", + "U10", + "U13" + ], + "artifacts": [ + "README.md", + "docs/retained-s3-handoff.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.openbao-package.md" + }, + { + "repo": "rapp-postgres", + "id": "capability.railiance.postgres-isolation-recovery", + "name": "Database isolation and recovery package", + "availability": "A2", + "operational_estimate": 3, + "surface": "CNPG cells, per-consumer roles, negative isolation tests and backup/restore procedures", + "limitation": "Host-loss proof and consumer schemas stay with their owners", + "use_cases": [ + "U03", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.postgres-isolation-recovery.md" + }, + { + "repo": "rapp-user-engine", + "id": "capability.railiance.user-engine-package", + "name": "User Engine runtime package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Pinned deployment, dedicated CNPG, ExternalSecret references and rollback", + "limitation": "Domain, identity, PDP and custody authority are separate", + "use_cases": [ + "U02", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.user-engine-package.md" + }, + { + "repo": "rapp-tenant-engine", + "id": "capability.railiance.tenant-engine-package", + "name": "Tenant Engine runtime package", + "availability": "A2", + "operational_estimate": 2, + "surface": "Package declaration, smoke and rollback", + "limitation": "No tenant-domain ownership or credential values", + "use_cases": [ + "U03", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.tenant-engine-package.md" + }, + { + "repo": "rapp-policy-nexus", + "id": "capability.railiance.policy-publication-package", + "name": "Policy publication runtime package", + "availability": "A2", + "operational_estimate": 3, + "surface": "Immutable image, non-root/read-only runtime and approved TLS exposure", + "limitation": "No policy authoring or DNS/issuer administration", + "use_cases": [ + "U01", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.policy-publication-package.md" + }, + { + "repo": "rapp-playwright", + "id": "capability.railiance.browser-verification", + "name": "Managed browser verification pilot", + "availability": "A4", + "operational_estimate": 2, + "surface": "Bounded jobs, cancellation, artifacts, origin checks and restart receipts", + "limitation": "Pilot deployed; human/agent authentication and per-caller self-service connectivity pending", + "use_cases": [ + "U02", + "U14" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.browser-verification.md" + }, + { + "repo": "railiance-telemetry", + "id": "capability.observability.security-signals", + "name": "Security-relevant telemetry contracts and adapters", + "availability": "A2", + "operational_estimate": 2, + "surface": "Signal contract, platform adapters, report exporter and absence/alert rules", + "limitation": "Reference receiver is not a second production plane; end-to-end delivery acceptance pending", + "use_cases": [ + "U08", + "U09" + ], + "artifacts": [ + "SCOPE.md", + "README.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.observability.security-signals.md" + }, + { + "repo": "rapp-telemetry", + "id": "capability.railiance.telemetry-package", + "name": "Private monitoring package", + "availability": "A2", + "operational_estimate": 2, + "surface": "Prometheus, Alertmanager and Grafana package with isolated restore evidence", + "limitation": "Private installation only; recurring recovery capture and audited confirmation pending", + "use_cases": [ + "U08", + "U09", + "U10" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.railiance.telemetry-package.md" + }, + { + "repo": "resource-control", + "id": "capability.resources.security-capacity", + "name": "Capacity and recovery resource planning", + "availability": "A2", + "operational_estimate": 2, + "surface": "Provider-neutral inventory, procurement evidence and optimization reports", + "limitation": "No payment authority or irreversible procurement; metrics do not prove usable runtime capacity", + "use_cases": [ + "U09", + "U10", + "U13" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A2 / C1 / R0", + "entry_path": "registry/capabilities/capability.resources.security-capacity.md" + }, + { + "repo": "fin-hub", + "id": "capability.finance.security-budget-evidence", + "name": "Budget and cost evidence for security operations", + "availability": "A4", + "operational_estimate": 2, + "surface": "Budget, commitment, spend attribution and planning-evidence consumption", + "limitation": "No verified concurrent runtime EUR risk/cost enforcement for agents", + "use_cases": [ + "U09", + "U11" + ], + "artifacts": [ + "SCOPE.md" + ], + "existing_entry_path": null, + "prior_vector": null, + "vector": "D3 / A4 / C1 / R0", + "entry_path": "registry/capabilities/capability.finance.security-budget-evidence.md" + } + ], + "repositories": { + "access-engine": { + "head": "16ca97b2776789f730cc7049a2d6533612faaccd", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:f6c14f5f824fb86ac06368fb9c52e60d627ee42810817a45723d34a6a9a178a5", + "README.md": "sha256:7ed086b4d153ff067f4f8d3665891b65006a4a74cec8e6fb596e7e1dbd097b38", + "SCOPE.md": "sha256:dd1484a32a313135e69f16dbc833d768467491438bbb1d9127c2b098061edb60" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.authorization.policy-evaluate", + "name": "Authorization Policy Evaluation", + "summary": "Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.", + "vector": "D4 / A2 / C2 / R1", + "domain": "helix_forge", + "status": "draft", + "owner": "flex-auth", + "path": "registry/capabilities/capability.authorization.policy-evaluate.md", + "tags": [ + "authorization", + "policy", + "flex-auth" + ], + "consumption_modes": [ + "source module" + ] + } + ] + } + }, + "activity-core": { + "head": "83e6446807c4b36f3aa5023a5c16d4c7df8bd3df", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:8aec524060edb9309af679ef38bc5549aa3650752634d23977c7ae57c45bbefa", + "README.md": "sha256:549e7878b27bbf7edc9e958c7afbacd3eba773b082151d226b5f0a14af654f9b", + "SCOPE.md": "sha256:820aafbff2f7d1c314c0c270d745468172a0500d106ab276216e0eeb702ca7bd" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.activity.event-coordinate", + "name": "Organizational Event Coordination", + "summary": "Coordinate structured responses to cross-domain events through activity workflows and automation.", + "vector": "D3 / A1 / C1 / R0", + "domain": "helix_forge", + "status": "draft", + "owner": "activity-core", + "path": "registry/capabilities/capability.activity.event-coordinate.md", + "tags": [ + "activity", + "coordination", + "automation" + ], + "consumption_modes": [ + "informational" + ] + } + ] + } + }, + "agentic-resources": { + "head": "65b3a5cb6bf3eb214b492b95a38f2eb729f89709", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:81dc51facb26c36ab6b7bc85a22802bbf89c88558c7cb3e749e0c205a0ba24d4", + "README.md": "sha256:4e890352ff6088a2e018a11738a1959971b07b584a4ca3b8fb2aed88b9ea26f1", + "SCOPE.md": "sha256:ba38e80cf2a374063eb6b6b60211a02e32bca5d3b260aea5f8a70978f67a5627" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "approval-engine": { + "head": "e1649617e8ad321f79632d5fd33e973ae5d5ae51", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:06dbab07ed14fa43d0fc6b54eaacc2b3f7b4a9196050e3f73c9c4e58086636c5", + "README.md": "sha256:4d095613decf7d64012e19d4e76823296bdbeedc82cae17c9b5cf752671b45c9", + "SCOPE.md": "sha256:1425d4ae5942cf09197719b1f66989c4d5e8d2d5627c7fa79dc6151908b03990", + "approval_engine/api.py": "sha256:4c686aa3b4d645c4ad2a84a5f299db9b013b59a5c747853837adbe3a3a05be63", + "docs/production-dependencies.md": "sha256:c2244e4a72dc174d0f5e9fc7da6b56fac2596d4b553a11c738976404cef05fa8" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "audit-core": { + "head": "f1e715326b3ffd956623a84fa7ab0ce5ab3fbcf9", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:cffd7a3730ea54dab4e745329005813011bb821d9922d9a6aff3977ec46162c7", + "README.md": "sha256:c7ab22ae28d07afc746d7cb10e168291dfbc3207be60cd32ec416ff0f27f51f1", + "SCOPE.md": "sha256:358ecab2cf8e32567f2220c5cd3d9b3f7ce9349faaa8d89bc464d5f82f09e80e", + "docs/stream-completeness.md": "sha256:e3c4b1e0ff5bdd648077ae0b6473a0094ccb4a65e8ce398df11aa43faf0d65cf" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-08-16", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.audit.event-retain", + "name": "Audit Event Retention", + "summary": "Collect, normalize, retain, and search audit events with integrity evidence across tenants.", + "joins": "operations.audit", + "provision": "data/capability/audit-core-operational.json", + "vector": "D4 provision / A4 / C3 / R2", + "domain": "infotech", + "status": "production", + "owner": "audit-core", + "path": "registry/capabilities/capability.audit.event-retain.md", + "tags": [ + "audit", + "retention", + "compliance" + ], + "consumption_modes": [ + "http ingest", + "source module" + ] + } + ] + } + }, + "coordination-engine": { + "head": "c401067842072b75717f76480dd6e7db1836059c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7236c8dc284fcbe81c47eedde25e197d5a911a73267bfd448f8930140d2f6fd9", + "README.md": "sha256:fa6812b74956387a85cf07ccf3ef05f79aa07ca937e6f5d073edd318238e768d", + "SCOPE.md": "sha256:e207efd8bf40ede4ad6c2705121cefc809467dab72746054850c62f2e2e3a12e", + "spec/cross-owner-wait-mode-v0.1.md": "sha256:42f51f8dd1523a1243797fc3fc21a0d6d756c4e9d9d77142296735c1ef6de915" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "emergent-security": { + "head": "4c6fda38298fa50665ead41526b893adf069d335", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:64daea4874c8d8822a52437b15ffc8f9d5e30491dd0b61d0958bd186d1dc7269", + "README.md": "sha256:40e23e0233f5b33949fc25047cea13b827af3d44bd73e00b3c4eb8b1feb338cc", + "SCOPE.md": "sha256:b90916cef962e5999c8fee886f5d0b68f55707a38f428a20d0390d2bf2c0d603", + "knowledge/cards/start.md": "sha256:698a18f4a8f97a43da75ed0767aa0425c970e17c04a9cbea75cfab719564cc5d" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "fin-hub": { + "head": "8f527c6705bbf5d7ffed43559411ca748bec8fe4", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7697ddd29c8324197c925378c55eadcbf89899903af4321d0325f26e52ca3d19", + "README.md": "sha256:f35fb3d21f6264f8fab0ab204b79c81f82e6f9764ebc06aa0735d330ad854470", + "SCOPE.md": "sha256:2ef38e5d1a36dedfa7785f128a35b0058ae7e123bba834efa41dcc809d18a631" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "gate-house": { + "head": "bc890c4d050a2e726ce8988a8260ab9caea133e3", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:013692bbb52ce85dc1ad8dc95292c64d4e7c2c58714549a1e23331eae5d556e7", + "README.md": "sha256:e2c7b7c94884260f4e3e33d963544299a6076bd63729baa0e03e0bb34c423002", + "SCOPE.md": "sha256:5c7b9bc38fa7887f2188c34cb1110e37f47f2b9ebc4f33e85ef96ef80a1c9a79" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "glas-harness": { + "head": "7b1557ba14f483569b90ebfdc2d0136fa69602fe", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:d9c256243816e372757a256b0c2b87f5a0333fb1d65f0488b66600f985553cf2", + "README.md": "sha256:23179d6a1760e442fa025ac73aed050ee0141e985e87979c0a05781fdc2ca350", + "SCOPE.md": "sha256:5a2b96f8a3aa7218ad43dbd72abc89319a44c329298e973589f49c4ec354b0c6" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "info-tech-canon": { + "head": "3d206a56f4ece439f6ee87f9ee4d1800ab82166e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:aa739b333929bc5d36a0654ef5afea1b9dedabad38da0c335f3d8b0f17a38bad", + "README.md": "sha256:55f21ebac58356dabdd032d4396a6eb0e3af4c5d13c900667fb79827879b58b1", + "SCOPE.md": "sha256:342ee894c1d6d64da76ff521eeb3c21279c55c6e7b7f0892b34f54c2d89e91b3" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.canon-service", + "name": "InfoTechCanon Service Surface", + "summary": "Concrete service surface (CLI, importable functions, read-only local HTTP API) over the InfoTechCanon information-processing infospace, backed by infospace-bench.", + "vector": "D2 / A2 / C1 / R0", + "domain": "infotech", + "status": "draft", + "owner": "info-tech-canon", + "path": "registry/capabilities/capability.infotech.canon-service.md", + "tags": [ + "canon", + "infospace", + "service" + ], + "consumption_modes": [ + "cli", + "library import", + "http api (read-only, local)" + ] + } + ] + } + }, + "informed-decision": { + "head": "ee6a65b80a0fea1a914dfa31434b903669656c09", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:b543c2d80b97182393e2d080ae8fd3759f2e956a89306c2c568c0010e7425eeb", + "README.md": "sha256:7d2bcb581348c4cae55b59550eb7a9ef34abaa928375acae28ec41878c5abb7b", + "SCOPE.md": "sha256:ab352aa1a88ca53106517b14eafc62a3cb6504519638835227e6f852b3cdf68b" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "issue-core": { + "head": "de368271f6ffc06353ec409998a0d6d0ec0bf25e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:fb6e1f77fed6b5ae110fdcfb92dd96263050c1907702a1f380895930a8ad0dd9", + "README.md": "sha256:00281e7af8fc9c8f9c41a46a71a959faea4c6db1c08c6c4b5b3fe3a5808b271a", + "SCOPE.md": "sha256:c43d8c15cf0b85dd8558bc0031a0662d668de9c0394eb2045a7735d044d7ed0e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-07", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.issue-tracking", + "name": "Universal Issue Tracking Coordination", + "summary": "Unified Python/CLI interface for issue tracking across Forgejo, GitHub, and GitLab, preventing direct platform API usage and credential sprawl for coordinating agents.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "issue-core", + "path": "registry/capabilities/capability.infotech.issue-tracking.md", + "tags": [ + "issue-tracking", + "coordination", + "multi-platform" + ], + "consumption_modes": [ + "cli", + "library import" + ] + } + ] + } + }, + "key-cape": { + "head": "1344fc80e56315c5c99f58993f9ee02ce79e8a76", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md", + " M src/internal/server/oidc/authorize.go", + " M workplans/KEY-WP-0039-openbao-negative-probe-tokens.md" + ], + "source_sha256": { + "INTENT.md": "sha256:b22cb440691bb399b064ee10ab1a03e1e07838da1051bf6235fbfe2cf820eb10", + "README.md": "sha256:953586cca96d01e9240448186b922c9b8ea03827a7f314731e9a9ead4f19d0d3", + "SCOPE.md": "sha256:20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.iam.key-cape", + "name": "KeyCape Lightweight IAM (NetKingdom Profile)", + "summary": "Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract), orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not against implementation internals.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "key-cape", + "path": "registry/capabilities/capability.iam.key-cape.md", + "tags": [ + "iam", + "oidc", + "netkingdom", + "security" + ], + "consumption_modes": [ + "service (self-hosted deployment)" + ] + } + ] + } + }, + "kings-guard": { + "head": "af02e2547598d6ec0e83f482d9ea3ef943ea67b7", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:923fd2ce1a22c29d486f562071a0a251c16b64fbb5d73490cac4d373daa0c83d", + "README.md": "sha256:57983baf2275d9afbd5109782cfe1f3559145f4ee906ea97345c6d517a5e4fc7", + "SCOPE.md": "sha256:8e77e587c67aa419df35d4f642468bb57bc30df65e1ea6a922fdca282ea9ed63", + "docs/SecretUseSnapshotAdmission.md": "sha256:7fd32df4c8203d83aa14334ccaed0700682730679539a5c657d93f5efbf5d31c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "maturity-engine": { + "head": "2f1de542cc8f24a79452f906d99f95be39d8b6a9", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:d17b9169ad82b60450244988dafa3ab4a515790ee08903a7fcee9df5fd8eae0c", + "README.md": "sha256:66333483d63f45c2dd744661610d062440569955bb150927ebd9d21d72b85daa", + "SCOPE.md": "sha256:653f47b0d370dfdb45c723b361f6fee53be7e384732c201443d7238c04d155bc", + "docs/claim-contract.md": "sha256:082490f3651db8f771dfd72c42f5c5df4c3317361c9dec1ec0f0dc9814f80a2a" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "net-kingdom": { + "head": "1a36e857cc5aae6fe738f794417126c46dd94627", + "branch": "main", + "dirty_paths": [ + "M WORK-RECORDS.md", + "?? intakes/NET-IN-0005-single-use-setup-link-mail-handoff.md" + ], + "source_sha256": { + "INTENT.md": "sha256:fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54", + "README.md": "sha256:25172bafe09fd3a26467d44a74ca90e8f123bc81bfa2784a483837c0e9efe9fe", + "SCOPE.md": "sha256:0f896db98d03aa7460d88999b738ea00be87dd34fe0b250f11bf0b6f170b0172", + "SECURITY-COMPANION.md": "sha256:06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643", + "canon/standards/security-case-types_v0.1.md": "sha256:a4fda906d5138d2594a1f8d047c7c28e1cdf96b1eae051f543b9a5e5852bcb5e", + "tools/custody-record/README.md": "sha256:ec653a17b4f35e56d37824c1db15f1ea6b1761c564863fca4ea168a3ed625000", + "tools/emission-cadence-profile/README.md": "sha256:a4adadb43b0d55f7d705d89166ef63ce01aceeff742b260039263dda92ce85b8", + "tools/posture-feedback/README.md": "sha256:83b8de1da01de77318e950c9266e5f2755091dbd0e5a318d75bc5cc8f556ef18", + "tools/posture-feedback/posture_feedback.py": "sha256:629779308e4965be3aabbb76f105fd9c8b532c64987915d2ccab5b543273bfe4", + "tools/security-bootstrap-console/README.md": "sha256:bc1af3598d667346370a476d0765bff1f0c3ebb57f751c4da6e61a4add29f30d", + "tools/security-case-types/README.md": "sha256:03e1c503bc60990214d5b1a7cec8878cf47fc892d82c82d682f3490e33dc71f5", + "tools/security-scenario-composer/README.md": "sha256:447554e04816c0bc815f57d9138430d354790c9f3813e48bbd38fee034f98015", + "tools/security-scenario-composer/security_scenario_composer.py": "sha256:9f0cc69930aa8ee2cc3fb92236e6a99728df17b8c0fe36e1250241c38fc01c4f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-08-23", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.security.iam-tooling-suite", + "name": "NetKingdom Security/IAM Tooling Suite", + "summary": "Canonical security architecture and executable reference tooling for IAM, bootstrap, posture validation, deterministic plan-only security scenario composition, and proposal-only posture feedback.", + "vector": "D3 / A2 / C1 / R1", + "domain": "infotech", + "status": "draft", + "owner": "net-kingdom", + "path": "registry/capabilities/capability.security.iam-tooling-suite.md", + "tags": [ + "security", + "iam", + "kubernetes", + "conformance" + ], + "consumption_modes": [ + "cli", + "local web ui" + ] + } + ] + } + }, + "ops-bridge": { + "head": "190ef1e188e12c606f1359325fd9fdd1dbef29e2", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:2134f693649803414d7ab2f9839416f1fe06169aa86732e64c9dd962c35f412b", + "SCOPE.md": "sha256:63cd52d1cdf38e72af0285c25aa2292f959080c6befe565a1d2690747a813975" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.ops.tunnel-bridge", + "name": "SSH Reverse Tunnel Lifecycle Manager (ops-bridge)", + "summary": "CLI that manages named SSH reverse tunnels keeping remote execution environments connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.", + "vector": "D3 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "ops-bridge", + "path": "registry/capabilities/capability.ops.tunnel-bridge.md", + "tags": [ + "ssh", + "tunnel", + "ops", + "connectivity" + ], + "consumption_modes": [ + "cli" + ] + } + ] + } + }, + "ops-mason": { + "head": "d86ad141befb6800468f5132d4c7c9ce2f852bb5", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:482269782f4fd337f83674b4e2c36a5cd9f8eb694918e55709e9a7e78a003c71", + "README.md": "sha256:9e0c9b5c76c3a2d4aeeaf032579e96d8da9056662ac4655b8885b16ed7f3bca5", + "SCOPE.md": "sha256:7da4c8c660b1c8d15675768a5f6040303fe3ca3b4f05b1bba4633be3cc6e0c77", + "docs/construction-plan-format.md": "sha256:468678089885193b8fefe3993cd6878bbdbeaaa64aa088b18b90047b696ce564" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "ops-warden": { + "head": "6d2f1be9691b19e826898a2166ae4451e4802ae2", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:3e9382fefa52ee0970dfac133cc799656e5034760b26dccc1bf9bab65fc538d9", + "README.md": "sha256:1f11071d7fd651806da180272cc4aa4e3ae19d7bad0e321aa97c7dcaea7f2857", + "SCOPE.md": "sha256:47b47468746617c84f8411ac671bb488ab740b4c3133401f5d7b55d3d024345f", + "wiki/CredentialRouting.md": "sha256:544530cc13052e33d2135fa3b0583e620010abb0af86079be6d8e09c36844646", + "workplans/WARDEN-WP-0044-security-case-follow-through.md": "sha256:c0029545bd2d8c015ae0cac87f6d53a2e5ee935b7bf5d5e1b81bf1ff5dbdc4f8" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-17", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.security.ssh-certificate-issuance", + "name": "SSH Certificate Issuance", + "summary": "Issue short-lived CA-signed SSH certificates for adm, agt, and atm actors through a stable cert_command CLI interface; steward NetKingdom operational access routing.", + "vector": "D4 / A3 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "ops-warden", + "path": "registry/capabilities/capability.security.ssh-certificate-issuance.md", + "tags": [ + "ssh", + "certificate", + "ca", + "ops-warden", + "openbao", + "security" + ], + "consumption_modes": [ + "CLI", + "cert_command subprocess" + ] + } + ] + } + }, + "policy-nexus": { + "head": "f784f017b0822f34c785f0b34c7c55fcf39c9d99", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:58b95e4e158da6b978b9bd3a2ecbaf7f279553098906a8e8ed404afd3d582494", + "README.md": "sha256:cc3a825974a8cea0c737a16cc8b06d3fec56e10f593c6ed7169bc54786df5a81", + "docs/publication-contract.md": "sha256:65a9a233201ba966db0f2c5465ff3b0684147af3075f43180b8eefb3e059abb4" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rail-kubernetes": { + "head": "35159e49c1340b7a0e30c49188975c8839d346f6", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:72a64030f25f0474e4f3837860d3eba60e3d5a1c2b31e8f6d062e15da8f209c4", + "README.md": "sha256:89c6c0155f3d9829c7d0ff33f27883ed2fdd8f6d857eae013656136467296cd2", + "SCOPE.md": "sha256:00fce3ee7cb4bbbd7eff210adb2a03c533f2b43870f7327cfc35f28354bb549a" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "railiance-apps": { + "head": "706461b845086ee2df8ce9acae3dae7feebfffda", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:31060dc1738aa4540f78735019359a276ece39dad8afbf1be740713bebbe65e5", + "SCOPE.md": "sha256:8243098d979d4258c9e7f9e39b5de24ce78b521cd82a7e199028df30bc130b14" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.workload-deployment-tooling", + "name": "Railiance Application Workload Deployment Tooling", + "summary": "S5 Workloads and Experience Endpoints layer of the Railiance OAS Stack \u2014 application Helm releases, Kubernetes workload manifests, deployment guardrails, and smoke-test/check tooling for user-facing services.", + "vector": "D3 / A2 / C1 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-apps", + "path": "registry/capabilities/capability.railiance.workload-deployment-tooling.md", + "tags": [ + "railiance", + "kubernetes", + "helm", + "deployment" + ], + "consumption_modes": [ + "cli (shell scripts)", + "helm/kubernetes deployment" + ] + } + ] + } + }, + "railiance-bootstrap": { + "head": "ae00b2652737aaf18358431e66f59eeb7c01e16b", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:c1840c7df1cb87d72a22a7b1bc95417687a0a9d9355b6ffb50392d8bf6ae241f", + "README.md": "sha256:3acd2adcf4bf3c3801be99c95d96da8ac7638f5a21c03d6f987505402a00afa6", + "SCOPE.md": "sha256:4efdd7f7817e39c01d6024e2f8bcbd70c2b10b90baf9f92855bb3967cd629831" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [] + } + }, + "railiance-cluster": { + "head": "12d1e881ff2086566712fbc591db293b38ea2bcf", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:a00fe12563c77734e19b538ca8307d44fcfae9f040bec284c705146f99bb3490", + "README.md": "sha256:5c82b7c31adb126e1f95ccd5057156888fff73a05828abd5e8ab3e013c7fe59f", + "SCOPE.md": "sha256:e4f6a8dd3d72a1f04f0d94721d57ca2a4c7e98790a8373876a5005b87ec5d8a6" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.cluster-bootstrap", + "name": "Railiance Cluster Runtime Bootstrap", + "summary": "Cluster runtime entry point of the Railiance Infrastructure-as-Code framework: from two bare Linux servers, a Git repo, and credentials, rebuilds a fully automated Kubernetes-based environment.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-cluster", + "path": "registry/capabilities/capability.railiance.cluster-bootstrap.md", + "tags": [ + "railiance", + "kubernetes", + "iac", + "bootstrap" + ], + "consumption_modes": [ + "cli", + "ansible playbook" + ] + } + ] + } + }, + "railiance-enablement": { + "head": "51a7c4cee68b48ed7a236e661b39c1d3cca92063", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:5a562d3f019156969948315e8072ce925c81e21d027a47096e21c8535473a588", + "SCOPE.md": "sha256:2a554aef6d6803f1a176ea3bdb3bcc0f077f03d131b0a897a5ec56bd6df85f88" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.ci-enablement", + "name": "Railiance Developer Enablement And CI/CD Templates", + "summary": "S4 Developer Enablement layer of the Railiance OAS Stack \u2014 reusable CI/CD workflow templates, developer portal paths, platform templates, SDKs, and buildpacks, using forge capabilities without owning forge runtime.", + "vector": "D3 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-enablement", + "path": "registry/capabilities/capability.railiance.ci-enablement.md", + "tags": [ + "railiance", + "ci-cd", + "developer-enablement", + "forgejo" + ], + "consumption_modes": [ + "ci workflow template (copy/reference)", + "cli (promote-repo-to-forgejo.sh)" + ] + } + ] + } + }, + "railiance-fabric": { + "head": "96d19127125e85bdab7ff0ff79fc3ecf7d19045e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:1cdca96e57849709aef333c88ace903f9573eeb2894f52246e473928c7e3846c", + "README.md": "sha256:8705fec071bfe75d3bdfcc5677ac8801f5d66b5ee3a49043cc8d019443a1fb8c", + "SCOPE.md": "sha256:b80d4a8b39c2920818ba4069318f888e56736a0f0e8d40f3a72568b0472fb36d" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.fabric-graph", + "name": "Railiance Fabric Ecosystem Graph", + "summary": "Models the durable infrastructure-responsibility graph of the Railiance netkingdom: schemas, discovery tools, registry services, graph queries, and State Hub export contracts for services, machines, repos, deployables, endpoints, ownership, dependencies, and bindings.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-fabric", + "path": "registry/capabilities/capability.railiance.fabric-graph.md", + "tags": [ + "railiance", + "graph", + "ownership", + "discovery" + ], + "consumption_modes": [ + "library import", + "cli (validation)" + ] + } + ] + } + }, + "railiance-forge": { + "head": "a15fac8e938c11b041eb39386f05b63d46ae566a", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:310d6ad12a1f621c05396a3d6aab19ff8a6bacc4f67814e64d07f09da124ea54", + "README.md": "sha256:e10a07e1b8935a444699ee456f6d3f98e02109d7e453db41823a31261d181b2a", + "SCOPE.md": "sha256:dc4c179e33898e32fae7b2e8e30e88a66d9efc3ad2f488651ccedf600274c1b8", + "workplans/FORGE-WP-0006-independent-secret-detection.md": "sha256:fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.forge-infrastructure", + "name": "Railiance Forge And Artifact Infrastructure", + "summary": "Source forge, registry, and automation-runner infrastructure for Railiance, separated out from railiance-apps/railiance-enablement; covers current Gitea operation, the Forgejo migration, container/package registries, and Actions runner substrate.", + "vector": "D3 / A1 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-forge", + "path": "registry/capabilities/capability.railiance.forge-infrastructure.md", + "tags": [ + "railiance", + "forgejo", + "forge", + "ci-runner" + ], + "consumption_modes": [ + "cli (operator tooling)", + "documentation/runbooks" + ] + } + ] + } + }, + "railiance-infra": { + "head": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:00d05aeeedd6e11527fdacd35070a37c0b67ff16914ed6ce0f634baaded5f1ae", + "README.md": "sha256:dcea6117a34fa466e75c7943fb43dcfc42eb8f6f6c9c5207458eb7621e694ced", + "SCOPE.md": "sha256:18cdf933d658eeddcb68528bb9c222ceb0866d8c5f0ec4bb3ea955de762c3c33" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.infra-provisioning", + "name": "RailianceHosts Infrastructure Provisioning", + "summary": "Git-driven server provisioning and convergence for Hosteurope/Hetzner Cloud using Terraform, cloud-init, and Ansible, with SOPS+age encrypted in-repo secrets and a servers.yaml inventory as source of truth.", + "vector": "D4 / A2 / C2 / R1", + "domain": "financials", + "status": "draft", + "owner": "railiance-infra", + "path": "registry/capabilities/capability.railiance.infra-provisioning.md", + "tags": [ + "railiance", + "terraform", + "ansible", + "infrastructure" + ], + "consumption_modes": [ + "cli (terraform/ansible)", + "gitops" + ] + } + ] + } + }, + "railiance-master": { + "head": "865c3bed86b3992244b29d6f1d6b8ebbe8db78c7", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:dacbc59b7d42412e3e65d3d16ce058d0bde486e16435112c7abf83b696572eda", + "README.md": "sha256:4a706ec49c177ef13343ea3e56e61bf5a7bd6c601562b301a87189690ee800ff", + "SCOPE.md": "sha256:63ebaef0397795257650521e6f3be6b46cca1142f53b1865d9df9ed0c0530fc8", + "docs/netkingdom-security-consumption-contract.md": "sha256:be50d016b7cd14ac27127a2c641c4a9a0c8d1605495ba62ba5cf30ef0f65bab7" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "railiance-platform": { + "head": "d303c99e3be993ffa989bc9ba3d7b471903858ce", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:12c6540735af591f7a4a9fe85ff10d3cd00eec55b5b6b1ddf148abf2d3ac9a9c", + "SCOPE.md": "sha256:bb18dc91f3be50337d7ebc81d269f1234f65919f7014eef990b09c3df54a5347", + "docs/openbao.md": "sha256:9c92b0e30c81351b258da44df46720f4cdd2941488a7ca2f8687b8937da8099b" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.railiance.platform-services", + "name": "Railiance Platform Services", + "summary": "S3 Platform Services layer of the Railiance OAS Stack \u2014 shared cluster services: PostgreSQL HA, Valkey cache, secret management, identity integration, and object storage.", + "vector": "D3 / A2 / C1 / R0", + "domain": "financials", + "status": "draft", + "owner": "railiance-platform", + "path": "registry/capabilities/capability.railiance.platform-services.md", + "tags": [ + "railiance", + "platform", + "secrets", + "postgres" + ], + "consumption_modes": [ + "cli (shell/python scripts)" + ] + } + ] + } + }, + "railiance-telemetry": { + "head": "81d905971c38de9aaf11088ba605e112152d8268", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:de793b403514f8c7984ba7c20608ecca9d1fea422d3fcc20ec186a0d7c2f2f47", + "README.md": "sha256:4fdb18006ab2e5a0c4d72127324a88c7abacb55a30b80de6a95e55ce46c56468", + "SCOPE.md": "sha256:206279dabc14fe1a44ba6df8ad2b664cc91d3460379b732951d3e29bb6a814da" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-openbao": { + "head": "13ab9144bbb1d88fe760362df91a83c8b34e4e66", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:28b74eec385f6cef4f8c846992f10b6067ce436cb9d52de19338dd57c111f90e", + "README.md": "sha256:9964de809b5b645c24871774621747f9d6ce2f069443d507b9ef9616ee255d85", + "SCOPE.md": "sha256:cdcf80122c8c55dfe697312d6cd67b76861f322cae9816b85123aefe2345c674", + "docs/retained-s3-handoff.md": "sha256:d1b2f27f740176ab16f6b4b589b0c25dab41c923d6f377d84059ec8369c0a3b6" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-playwright": { + "head": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:b719684974f35812708e562cd8c0b4573662ae22fd12f4252bd4abaca627882b", + "README.md": "sha256:e64daa81de97b3d2c6afe4028f9a2d4aca6e9892ac36a798316a8d8e8fa80ce8", + "SCOPE.md": "sha256:c1489a7b75a87a3a8b00edb9b9497d256b0e5ec72d5fe5236cc038745215dc91" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-policy-nexus": { + "head": "d3fee97d32ad47e3a7e3201a9c5b7209b4333fda", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:a3ae592c56822697ad24bd64851578b5b17f1a9bd8622a247e3e425a5de594c7", + "README.md": "sha256:41c1bfeaa90d11f4778d22a3e58a97cb9653d153712657ff2e3aecc45dda240f", + "SCOPE.md": "sha256:dfb85b48d6ff68a9945178a5fc1b85f1d342f765d046a58285e7edc52f517438" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-postgres": { + "head": "03744030c9258e920f6403a9ce184a26d7b75268", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:2a9ce4f5eb8fbbffbaeb8532a677c855b97973a6028536520018ccd1796a4735", + "README.md": "sha256:298079470d931ab78d79a0a44274f207606d6a877740d79a8925d9c37f8ff15a", + "SCOPE.md": "sha256:5919caed210fc8c6977845b3469ebe419b0216f6aafa69e01a40b9d12d6050bc" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-telemetry": { + "head": "17053dbc47f7c22efd67fd90d06d108d154835fa", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:fc3ac98e40f67384f3ff94ecf223d89f0713c031ba5ca6093320278b269e4276", + "README.md": "sha256:fd797950ffaa67123773da7cdfa6e45984f367f820caba7c10e0fd300f96d630", + "SCOPE.md": "sha256:3776b5924bd90f8114e77f7bbbcacc7f3713cd56ca26440a3e4bce792ce8b142" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-tenant-engine": { + "head": "c160be23577ab4d99ee2cd008deb455b07f0597d", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:5eb0a651c1fd20a7d60a3a30060431925d2fb3ed64cf6ae22293dcc5546c7251", + "README.md": "sha256:05596b39a47fa22cc4e966714c4c755220894ca54c7759cdd3088e78b31c00e6", + "SCOPE.md": "sha256:fc0c5a80f37c410c10eb29a7541ca37088668e5f76d64ece4e889c7f0145a13d" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rapp-user-engine": { + "head": "15faf1dc063a0bfdb2c4a56e9eb5b5791ec73d4c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:891150bf022c2456d62c234db10172a16cb2e1a9c9aa5284aafd5d89755a82fb", + "README.md": "sha256:f1d89f8f1c1cc67f2b79bd2bd3dd94b9a895fcaf308c44b5d8d23fc7b9f1bb7a", + "SCOPE.md": "sha256:732fd68b194d034e81faf170d5a69e1d61cfab5385457b93a5f5689a63a2f184" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "reef-railiance": { + "head": "ffb9e272ce1489cc37cc6388873558d8ba56c239", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:deb16216816dfcc1c42c2d826b6fcd496d9c0e6789169c0312e0bc9d0fa88781", + "README.md": "sha256:31480d89ba5a8f868c28c2b09f62a51d662aad6a0ec93a56340fed39a789c395", + "SCOPE.md": "sha256:a273078d5dc7ceb72bbdf5473b5146cd624411b08bdc6b1e7d78113c4e675cc8" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rein-aharness": { + "head": "398949a3d34b6c9faae0fa1d0ff0aa039565aa42", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:f9a35aa6f9c4803a1d978aeb487ba475830505670871c564a5fecacb77b11ec4", + "README.md": "sha256:da0f62f0eda7bac0018151b73ffa2bcf9cab9dbd796adb285c738c435853afc3", + "SCOPE.md": "sha256:d9979b35ec0909f76e6c34a0f40de2e5cbc700d1bb5c7b5f73c6e2b20e3cbc48" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "rein-openweights": { + "head": "e1fccb39b738a5381a9de6e1d799f124797798ce", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:e1284da2b06a44d93e050638d34ab8abf15173bed77f82788ddcc32939359cd6", + "README.md": "sha256:0eb6e6225727770985c4b6442acdb17e8a0d5e707c25aaeb561e47b921f6aa74", + "SCOPE.md": "sha256:f7791a1f858cd7225e217b9b53213066e44ddd7ac4a1e748383a2c8756d3aa3c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "repo-manager": { + "head": "7677b00f69cd6362ac16a1021dc180ec6df4ebfa", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:62afa83ecb1fd733abce07489d48d0d7c7e14ccf9def9f561c118cf8ec5409b2", + "README.md": "sha256:9330836f65bde7466f7a1414f4a6df28682acde710aca0ea3e45be429622c75c", + "SCOPE.md": "sha256:bca5806e11f04e4550ce5c147d4d98e6c0014fed1f17fa3f134e5b193adec43c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "resource-control": { + "head": "3604d468f86ede7d320f4d22dd4aea775306b53f", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:f81326a4f18e284d8f7ca73f71dbe9502b7a75b1d567074e9bec48ebdd968309", + "SCOPE.md": "sha256:2daf0899d730bb6da30bd471f364061b86428cb5e38573df9d5551aff9dd5e29" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "reuse-surface": { + "head": "a6da9f2c5c0cb8a69ddf4ea2386e79699a90c2e1", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:511d1029a7aefc67b68a6363ed3ce8f803f2516c00062ff805263dffe26c771b", + "README.md": "sha256:6e4dc8d382612320cc2c8558ad583b0564ff594a7032b33137cb7a61887621cc", + "SCOPE.md": "sha256:2c30972ceb2a643147ce61c04c6919b16797b6754c2a407df998c81ce76c9c30", + "docs/RegistryFederation.md": "sha256:bfc80be5eac1250189ac2ba726a6188c03928ccf1e9992ec58cf59e58009f289", + "schemas/capability.schema.yaml": "sha256:3b0172baa4e6d54f400e911af6adb0d86b4576b86d7aea6d8f18c3fce3b8ae3f", + "specs/CapabilityMaturityStandard.md": "sha256:3eb3c7e1dd51b85e993c9936b2a176f6b3998e6198666695bdbb5b7ba7d8b17c" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-10-13", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.infotech.headless-browser", + "name": "Headless Browser Automation", + "summary": "Headless browser automation, screenshots and keyboard trials through rapp-playwright 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; managed Railiance admission is pending. Download the Python 3.10+ standalone client from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` with a fresh output directory. This endpoint was verified locally on 2026-10-13 and is ephemeral; it installs no browser for the caller. If unreachable, follow the local container setup in the capability card or adapt its A2 source examples; this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.", + "vector": "D3 / A5 / C2 / R2", + "domain": "infotech", + "status": "reviewed", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.infotech.headless-browser.md", + "tags": [ + "headless", + "browser", + "automation", + "playwright", + "chromium", + "testing", + "screenshots", + "extraction", + "firefox", + "webkit", + "selenium", + "puppeteer" + ], + "consumption_modes": [ + "informational", + "source adaptation", + "JavaScript library", + "Python library", + "cli", + "service API", + "container" + ] + }, + { + "id": "capability.registry.register", + "name": "Capability Registration", + "summary": "Register a new capability so it becomes visible for planning and implementation reuse.", + "vector": "D3 / A4 / C2 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.register.md", + "tags": [ + "registry", + "governance", + "meta" + ], + "consumption_modes": [ + "informational", + "markdown authoring", + "cli", + "service API" + ] + }, + { + "id": "capability.registry.validate", + "name": "Registry Entry Validation", + "summary": "Validate capability registry entries against schema, index consistency, and relation integrity.", + "vector": "D4 / A3 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "reuse-surface", + "path": "registry/capabilities/capability.registry.validate.md", + "tags": [ + "registry", + "validation", + "cli" + ], + "consumption_modes": [ + "cli" + ] + } + ] + } + }, + "risk-nexus": { + "head": "b877231d66e1289dc32fda07ed2c61dcb3e970dc", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:38783193bce6e05a502463a0965341fe7940cc98d72c800c7d70a36e9defae83", + "README.md": "sha256:05dd751b2569801f5bc0971b3ebeeb263b3488a880cb334c3b4f076ed15d6ceb", + "SCOPE.md": "sha256:82e5f7476f5ebe327bc720691f858f3dbac3990da6860ac8114f83c3b287394c" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "role-engine": { + "head": "d231241dbfeeb541b34243f4022883aa6417a1eb", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:06678fc42521c91514ef9684674479c70ae47ee829e7a1e5e6c5d7ae54c0d7a2", + "README.md": "sha256:a98b021f59566bce52d02b7f7e2c9f2d3f637f9357037c54d752c69a13cb15bf" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "runbook-tutorials": { + "head": "df97fadf5decfcdb5c3c6ab90211226335ffdf8e", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:6a96bddd785357c6084d3137c66c188b9266f9e69cd1ad6e2c2562106a296b63", + "README.md": "sha256:747bd15db6182f5f473a4a774ade282d14341f63ee427c0cd862cbd3a6c0a6d0", + "SCOPE.md": "sha256:5da9ba54026809314e6c0d97894642ca705793cb752c8a9cb535551cef9aee5c", + "docs/pack-spec.md": "sha256:075a67476ba9226e79bc955caa039c9c1bad6ead96a7e61fb8e68b8ea56d2a0d" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-09-29", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.infotech.runbook-tutorials", + "name": "Runbook-tutorial engine", + "summary": "Engine, local UI and CLI for guided, parameterized operator runbooks; packs live in the repos that own the procedure.", + "domain": "infotech", + "status": "active", + "owner": "runbook-tutorials", + "path": "registry/capabilities/capability.infotech.runbook-tutorials.md", + "tags": [ + "runbook", + "tutorial", + "operator", + "guided" + ], + "consumption_modes": [ + "git clone", + "cli" + ] + } + ] + } + }, + "sand-boxer": { + "head": "b06d94f02b037764ff41c73c8ab43f4c8f5d309d", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md" + ], + "source_sha256": { + "INTENT.md": "sha256:a87d81568311ae5bee941183f10eb23fbe60541dc41d2c5a7fbfbac52a89dd37", + "README.md": "sha256:d5038e80f041429f8f8f8e2fc9b2b45a223a5478731ab7c75592378a174e0d2a", + "SCOPE.md": "sha256:68f4623825cc54ebbbe777b0abd78a358cb3232bf2f6577980c6fc945a80ed7a" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-22", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.execution.sandbox-provision", + "name": "Sandbox Provisioning", + "summary": "Isolated execution environments for agentic development, e2e testing, and bounded automations \u2014 profile-based provision, TTL teardown, and State Hub lifecycle registration.", + "vector": "D4 / A2 / C2 / R1", + "domain": "infotech", + "status": "draft", + "owner": "sand-boxer", + "path": "registry/capabilities/execution.sandbox-provision.md", + "tags": [ + "sandbox", + "isolation", + "provision", + "e2e", + "agentic", + "execution", + "profile" + ], + "consumption_modes": [ + "CLI", + "core library" + ] + } + ] + } + }, + "sbom-nexus": { + "head": "07e998d9abfd4e4fcc74db9e292ed22c6f407522", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:0e3eed8bc510109f615d0739502cf15c2aa5a025e74db01a6cedfb316f2d9e58", + "README.md": "sha256:8cc888ebf6370cabb1cfe1539b11e372e3f432dda2aa303c8470a5fc32f70844", + "SCOPE.md": "sha256:32f6e853b366c5097b3ab1a3d05413a0091ec48585de4def7adcbacd57da02ba" + }, + "missing_review_artifacts": [], + "existing_index": { + "schema": "reuse-surface.capability-index.v1", + "repo": "sbom-nexus", + "capabilities": [ + { + "id": "capability.infotech.sbom-management", + "path": "registry/capabilities/capability.infotech.sbom-management.md", + "status": "emerging" + } + ] + } + }, + "secrets-engine": { + "head": "d379a3dfba73c42cd97f4d9cba3a02d705155e4d", + "branch": "main", + "dirty_paths": [ + "M .custodian-brief.md", + " M WORK-RECORDS.md" + ], + "source_sha256": { + "INTENT.md": "sha256:188dc6d99ca9a441e7389a3715ba48275ab6e8745deaff686bd27d2aac34d678", + "README.md": "sha256:6c85cc0e1f57fcc06ef00368d0b7ea1a02657a8a1358bebc38be446be20deeed", + "SCOPE.md": "sha256:d77af9b9bab0383928120b80ed4a70f471cf244e22718ee6feb6039a70aedf6f", + "src/secrets_engine/decision_check.py": "sha256:a8c9a45320b752871bf6b8238cc25074e8f08ed29fee131e99030606fc091e6e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-24", + "domain": "infotech", + "capabilities": [ + { + "id": "capability.infotech.repo-template", + "name": "Coulomb Repository Template", + "summary": "Bootstrap new git repositories with agent instructions, registry scaffold, and State Hub onboarding conventions.", + "vector": "D3 / A3 / C2 / R2", + "domain": "infotech", + "status": "draft", + "owner": "repo-seed", + "path": "registry/capabilities/capability.infotech.repo-template.md", + "tags": [ + "template", + "bootstrap", + "state-hub", + "onboarding" + ], + "consumption_modes": [ + "git clone", + "informational" + ] + } + ] + } + }, + "security-canon": { + "head": "1664a6def20be2759a1e575024563efd27c9f36f", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:d2e8ebdbc9500b613162c45145f50fd88471beeca3e96ebe6c2df5d85d07539c", + "README.md": "sha256:0ab66ab06438b14b86cc67ad0084ef88126618a283a37baed663176709ef1236", + "SCOPE.md": "sha256:74ebe3d738fa554be113866e82cd2b049c49b4c7a302c61f21ffadf31c297ce8", + "infospace/standards/devops-secrets-management/SecurityCanonDevOpsSecretsManagementStandard.md": "sha256:f79a6dfe1067028810677426cb7e8c5be16735074121437f3cc97849d08fb72b" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "state-hub": { + "head": "8ca9201f6a1445c66fe1d1b0ba0c8d044c131647", + "branch": "main", + "dirty_paths": [ + "M api/main.py", + " M api/models/__init__.py", + " M api/models/agent_message.py", + " M api/routers/messages.py", + " M docs/inbox-change-feed-contract.md", + " M workplans/STATE-WP-0094-routed-gates-and-owner-returns.md", + "?? api/routers/message_feed.py", + "?? api/schemas/inbox_feed.py", + "?? docs/evidence/legacy-meter-weekly-review-20261014.json", + "?? migrations/versions/c4d5e6f7a8b9_inbox_feed_revision.py", + "?? tests/test_message_feed.py" + ], + "source_sha256": { + "INTENT.md": "sha256:4888ffa0a126a26bef3ba94658c76c3a23dbdc1399f4686c94e325b9d934e85f", + "README.md": "sha256:af3dde630cbc54664aab3681190e3095f04facd4e9b3fbc9cac7c279df05fc2d", + "SCOPE.md": "sha256:cfdd20b8718d92db1413c9bfcccdb1ae1e7fdee638aadcedf6508cee9f7c713f" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-06-16", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.statehub.progress-log", + "name": "Work Progress Logging", + "summary": "Record progress events, decisions, and session notes against workstreams and tasks in State Hub.", + "vector": "D4 / A4 / C3 / R3", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.progress-log.md", + "tags": [ + "state-hub", + "progress", + "coordination" + ], + "consumption_modes": [ + "service API" + ] + }, + { + "id": "capability.statehub.workstream-coordinate", + "name": "Workstream And Task Coordination", + "summary": "Track active workstreams, tasks, progress, and consistency across domain repositories.", + "vector": "D4 / A4 / C3 / R2", + "domain": "helix_forge", + "status": "draft", + "owner": "state-hub", + "path": "registry/capabilities/capability.statehub.workstream-coordinate.md", + "tags": [ + "state-hub", + "coordination", + "workplans" + ], + "consumption_modes": [ + "service API", + "HTTP REST" + ] + } + ] + } + }, + "tenant-engine": { + "head": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:c2deaef01f7492ca1b39f52e36bf703f6a55b04158b2888b7befae73452ce285", + "README.md": "sha256:4beddb32ea5dae1f67e0b489b63f13f7ba9bbc4d3c7f27b80957a199bcf144e0", + "SCOPE.md": "sha256:63f86c1bc39110db862fe60e273703463415e6e0365e4c058ab6c65be399d62e" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-23", + "domain": "infotech", + "capabilities": [] + } + }, + "the-custodian": { + "head": "3f6df63a9a5ca5edfaf1c17ab59bd18b29c54c5e", + "branch": "main", + "dirty_paths": [ + "M WORK-RECORDS.md", + "?? docs/assessments/netkingdom-2026-10-14/", + "?? workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md" + ], + "source_sha256": { + "INTENT.md": "sha256:6ccb4f1f2c8a87f27d59dcfcafaa654d68ff90ba09b94c863d5d444b2a35052c", + "README.md": "sha256:238b643e0c94446cf04bc8ac5d69e4c57d0f681825b5c45b9d444e6198f83f1a", + "SCOPE.md": "sha256:6d64208332890f24f04ae8d6f9067bcd8ed3b541e245fb2649ea3435f401b459", + "runtime/README.md": "sha256:c9bcfe727705b1503447d863f6fed4a84e97eb18a84b335c9073dac6dbb756e4" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.agents.custodian-runtime-tooling", + "name": "Custodian Runtime And Repo-Classification Tooling", + "summary": "Generic tooling from The Custodian's runtime and ecosystem-management surface: an agent runtime framework (context, actions, tool adapters, policies) and repo-classification batch tooling used across the workstation's 61 repos.", + "vector": "D2 / A1 / C1 / R0", + "domain": "custodian", + "status": "draft", + "owner": "the-custodian", + "path": "registry/capabilities/capability.agents.custodian-runtime-tooling.md", + "tags": [ + "agents", + "runtime", + "classification" + ], + "consumption_modes": [ + "library import (runtime/)", + "cli (tools/ scripts)" + ] + } + ] + } + }, + "user-engine": { + "head": "85a419d6c5d0b4434d3ca7f33bde3092f5838f79", + "branch": "main", + "dirty_paths": [ + "M workplans/USER-WP-0035-onboarding-handoff-findings.md", + "?? .claude/settings.local.json.", + "?? docs/evidence/2026-10-11-setup-link-owner-handoff/" + ], + "source_sha256": { + "INTENT.md": "sha256:8aa0f276e0879d3545338727188a1fd5af973c43acbfa986a135b20979ec7ba4", + "README.md": "sha256:74f788850117b3a1d6a1e06f68a26cbf699f8da9a27ed58d68d552a6e40dec3d", + "SCOPE.md": "sha256:0e863e1cc93e2aac373f566db4a4445348a930029a1c0968cf8e30c456b003e8" + }, + "missing_review_artifacts": [], + "existing_index": { + "version": 1, + "updated": "2026-07-06", + "domain": "helix_forge", + "capabilities": [ + { + "id": "capability.identity.user-engine", + "name": "Headless Multi-Tenant User Engine", + "summary": "Headless, multi-application, multi-tenant user management engine covering registration, identity/factor models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys.", + "vector": "D4 / A1 / C2 / R0", + "domain": "communication", + "status": "draft", + "owner": "user-engine", + "path": "registry/capabilities/capability.identity.user-engine.md", + "tags": [ + "identity", + "user-management", + "multi-tenant" + ], + "consumption_modes": [ + "library import" + ] + } + ] + } + }, + "whitehat-security": { + "head": "5587a8f6ac4b129527db819bc72832051c7fcc3b", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:acef2293815fb9bded28a60ee1bc47c196bb38541a28265d895d69ae773731ba", + "README.md": "sha256:3ddf3898b71ffaffec497e4e821f2a048d3cec1ae4269872b203db3422e14aca", + "SCOPE.md": "sha256:394dc1d432d4dd3eec735289ef83a8beedeb3afce667f5a8c3a052902a1e26ba" + }, + "missing_review_artifacts": [], + "existing_index": {} + }, + "zone-engine": { + "head": "b5a6f88a82b125ebc82c0484bec1ea541e4f95d0", + "branch": "main", + "dirty_paths": [], + "source_sha256": { + "INTENT.md": "sha256:7684ce5960c2623fe4a295e17f777326daad88d6d7c274002a71cf6046537c51", + "README.md": "sha256:194caa3a00b9ff041511a7e7a7c550f8e2b2906d1e71f2a9b05aef3220039806", + "SCOPE.md": "sha256:953dbf718481adae00fa53258ede0632df65bdc7f6a1cb3e1dd3344357dba80d" + }, + "missing_review_artifacts": [], + "existing_index": {} + } + } +} diff --git a/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml b/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml new file mode 100644 index 00000000..520c63ab --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-default-federated.yaml @@ -0,0 +1,2516 @@ +version: 1 +updated: '2026-10-14' +domain: helix_forge +collision_policy: warn +sources: +- repo: access-engine + count: 1 + index: ../access-engine/registry/indexes/capabilities.yaml +- repo: activity-core + count: 1 + index: ../activity-core/registry/indexes/capabilities.yaml +- repo: agentic-resources + count: 1 + index: ../agentic-resources/registry/indexes/capabilities.yaml +- repo: approval-engine + count: 1 + index: ../approval-engine/registry/indexes/capabilities.yaml +- repo: artifact-store + count: 1 + url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml +- repo: audit-core + count: 1 + index: ../audit-core/registry/indexes/capabilities.yaml +- repo: can-you-assist + count: 1 + url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml +- repo: citation-engine + count: 1 + url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml +- repo: citation-evidence + count: 1 + url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml +- repo: citation-work + count: 0 + url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/citation-work.yaml +- repo: commerce-canon + count: 2 + url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml +- repo: config-atlas + count: 1 + url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml +- repo: coordination-engine + count: 1 + index: ../coordination-engine/registry/indexes/capabilities.yaml +- repo: core-hub + count: 1 + url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml +- repo: domain-tree + count: 0 + url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/domain-tree.yaml +- repo: email-connect + count: 1 + url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml +- repo: emergent-security + count: 1 + index: ../emergent-security/registry/indexes/capabilities.yaml +- repo: evidence-anchor + count: 0 + url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-anchor.yaml +- repo: evidence-binder + count: 2 + url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml +- repo: evidence-source + count: 1 + url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml +- repo: feature-control + count: 3 + url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- repo: fin-hub + count: 1 + index: ../fin-hub/registry/indexes/capabilities.yaml +- repo: gate-house + count: 1 + index: ../gate-house/registry/indexes/capabilities.yaml +- repo: glas-harness + count: 1 + index: ../glas-harness/registry/indexes/capabilities.yaml +- repo: guide-board + count: 1 + url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml +- repo: helix-forge + count: 0 + url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/helix-forge.yaml +- repo: hub-core + count: 1 + url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml +- repo: human-resources + count: 1 + url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml +- repo: ihp-railiance-probe + count: 0 + url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/ihp-railiance-probe.yaml +- repo: info-tech-canon + count: 1 + index: ../info-tech-canon/registry/indexes/capabilities.yaml +- repo: informed-decision + count: 1 + index: ../informed-decision/registry/indexes/capabilities.yaml +- repo: infospace-bench + count: 1 + url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml +- repo: issue-core + count: 1 + index: ../issue-core/registry/indexes/capabilities.yaml +- repo: kaizen-agentic + count: 1 + url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml +- repo: key-cape + count: 1 + index: ../key-cape/registry/indexes/capabilities.yaml +- repo: kings-guard + count: 1 + index: ../kings-guard/registry/indexes/capabilities.yaml +- repo: kontextual-engine + count: 1 + url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml +- repo: llm-connect + count: 1 + url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml +- repo: markitect-filter + count: 1 + url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml +- repo: markitect-main + count: 1 + url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml +- repo: markitect-quarkdown + count: 1 + url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml +- repo: markitect-tool + count: 1 + url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml +- repo: maturity-engine + count: 1 + index: ../maturity-engine/registry/indexes/capabilities.yaml +- repo: net-kingdom + count: 6 + index: ../net-kingdom/registry/indexes/capabilities.yaml +- repo: open-cmis-tck + count: 1 + url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml +- repo: open-reuse + count: 1 + url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml +- repo: ops-bridge + count: 1 + index: ../ops-bridge/registry/indexes/capabilities.yaml +- repo: ops-hub + count: 1 + url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml +- repo: ops-mason + count: 1 + index: ../ops-mason/registry/indexes/capabilities.yaml +- repo: ops-warden + count: 3 + index: ../ops-warden/registry/indexes/capabilities.yaml +- repo: phase-memory + count: 1 + url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml +- repo: policy-nexus + count: 1 + index: ../policy-nexus/registry/indexes/capabilities.yaml +- repo: rail-knative + count: 1 + index: ../rail-knative/registry/indexes/capabilities.yaml +- repo: rail-kubernetes + count: 1 + index: ../rail-kubernetes/registry/indexes/capabilities.yaml +- repo: railiance-apps + count: 1 + index: ../railiance-apps/registry/indexes/capabilities.yaml +- repo: railiance-bootstrap + count: 1 + index: ../railiance-bootstrap/registry/indexes/capabilities.yaml +- repo: railiance-cluster + count: 1 + index: ../railiance-cluster/registry/indexes/capabilities.yaml +- repo: railiance-enablement + count: 1 + index: ../railiance-enablement/registry/indexes/capabilities.yaml +- repo: railiance-fabric + count: 1 + index: ../railiance-fabric/registry/indexes/capabilities.yaml +- repo: railiance-forge + count: 2 + index: ../railiance-forge/registry/indexes/capabilities.yaml +- repo: railiance-infra + count: 1 + index: ../railiance-infra/registry/indexes/capabilities.yaml +- repo: railiance-master + count: 1 + index: ../railiance-master/registry/indexes/capabilities.yaml +- repo: railiance-platform + count: 1 + index: ../railiance-platform/registry/indexes/capabilities.yaml +- repo: railiance-telemetry + count: 1 + index: ../railiance-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-openbao + count: 1 + index: ../rapp-openbao/registry/indexes/capabilities.yaml +- repo: rapp-playwright + count: 1 + index: ../rapp-playwright/registry/indexes/capabilities.yaml +- repo: rapp-policy-nexus + count: 1 + index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml +- repo: rapp-postgres + count: 1 + index: ../rapp-postgres/registry/indexes/capabilities.yaml +- repo: rapp-sbom-nexus + count: 1 + index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml +- repo: rapp-telemetry + count: 1 + index: ../rapp-telemetry/registry/indexes/capabilities.yaml +- repo: rapp-tenant-engine + count: 1 + index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml +- repo: rapp-user-engine + count: 1 + index: ../rapp-user-engine/registry/indexes/capabilities.yaml +- repo: reef-railiance + count: 1 + index: ../reef-railiance/registry/indexes/capabilities.yaml +- repo: rein-aharness + count: 1 + index: ../rein-aharness/registry/indexes/capabilities.yaml +- repo: rein-openweights + count: 1 + index: ../rein-openweights/registry/indexes/capabilities.yaml +- repo: repo-manager + count: 1 + index: ../repo-manager/registry/indexes/capabilities.yaml +- repo: repo-scoping + count: 1 + url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml +- repo: repo-seed + count: 1 + url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml +- repo: resource-control + count: 1 + index: ../resource-control/registry/indexes/capabilities.yaml +- repo: reuse-surface + count: 3 + index: ../reuse-surface/registry/indexes/capabilities.yaml +- repo: risk-nexus + count: 1 + index: ../risk-nexus/registry/indexes/capabilities.yaml +- repo: role-engine + count: 1 + index: ../role-engine/registry/indexes/capabilities.yaml +- repo: runbook-tutorials + count: 1 + index: ../runbook-tutorials/registry/indexes/capabilities.yaml +- repo: sand-boxer + count: 1 + index: ../sand-boxer/registry/indexes/capabilities.yaml +- repo: sbom-nexus + count: 1 + index: ../sbom-nexus/registry/indexes/capabilities.yaml +- repo: secrets-engine + count: 1 + index: ../secrets-engine/registry/indexes/capabilities.yaml +- repo: security-canon + count: 1 + index: ../security-canon/registry/indexes/capabilities.yaml +- repo: shard-wiki + count: 8 + url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- repo: state-hub + count: 2 + index: ../state-hub/registry/indexes/capabilities.yaml +- repo: tegwick-control + count: 0 + url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/tegwick-control.yaml +- repo: tenant-engine + count: 1 + index: ../tenant-engine/registry/indexes/capabilities.yaml +- repo: the-custodian + count: 1 + index: ../the-custodian/registry/indexes/capabilities.yaml +- repo: user-engine + count: 1 + index: ../user-engine/registry/indexes/capabilities.yaml +- repo: vantage-point + count: 1 + url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml +- repo: vergabe-teilnahme + count: 1 + url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml +- repo: whitehat-security + count: 1 + index: ../whitehat-security/registry/indexes/capabilities.yaml +- repo: whynot-control + count: 0 + url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/whynot-control.yaml +- repo: whynot-design + count: 1 + url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml + cache: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml +- repo: zone-engine + count: 1 + index: ../zone-engine/registry/indexes/capabilities.yaml +capabilities: +- id: capability.activity.event-coordinate + name: Durable automation and bounded operations + summary: Temporal/NATS/webhook/manual trigger, validated definitions and evidence/runtime + sinks. + domain: helix_forge + status: draft + owner: activity-core + tags: + - activity + - coordination + - automation + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.activity.event-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: activity-core + source_index: ../activity-core/registry/indexes/capabilities.yaml +- id: capability.agents.cli-assistant + name: Console-Native LLM Assistant (cya) + summary: Console-native, backend-agnostic assistant CLI that expresses user intent + in natural language and returns safe, explainable, context-aware help. + vector: D2 / A2 / C1 / R0 + domain: agents + status: draft + owner: can-you-assist + path: registry/capabilities/capability.agents.cli-assistant.md + tags: + - cli + - assistant + - llm + - safety + consumption_modes: + - cli + source_repo: can-you-assist + source_url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/can-you-assist.yaml +- id: capability.agents.custodian-runtime-tooling + name: Generic agent runtime and repository tooling + summary: Agent runtime modules and repository classification tooling. + domain: custodian + status: draft + owner: the-custodian + tags: + - agents + - runtime + - classification + - security + - netkingdom + - framework-reuse + vector: D2 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.custodian-runtime-tooling.md + consumption_modes: + - CLI + - source + source_repo: the-custodian + source_index: ../the-custodian/registry/indexes/capabilities.yaml +- id: capability.agents.kaizen-framework + name: Kaizen Agentic Framework + summary: AI agency framework providing 20 deployable agent instruction sets, project + memory, metrics, role and engagement contracts, and scheduled preparation for + governed execution. + vector: D3 / A2 / C1 / R0 + domain: agents + status: draft + owner: kaizen-agentic + path: registry/capabilities/capability.agents.kaizen-framework.md + tags: + - agents + - memory + - coordination + - metrics + - scheduling + - engagements + consumption_modes: + - cli + - library import + - file contracts + source_repo: kaizen-agentic + source_url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/kaizen-agentic.yaml +- id: capability.agents.llm-connector + name: Pluggable LLM Adapter Library (llm-connect) + summary: Provider-neutral Python/CLI LLM adapter library supporting OpenRouter, + Gemini, OpenAI, and the Claude Code CLI out of the box, with a clean abstract + interface for adding new providers. + vector: D3 / A2 / C2 / R1 + domain: agents + status: draft + owner: llm-connect + path: registry/capabilities/capability.agents.llm-connector.md + tags: + - llm + - adapter + - provider-neutral + consumption_modes: + - library import + - cli + source_repo: llm-connect + source_url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/llm-connect.yaml +- id: capability.agents.performance-learning + name: Agent performance learning + summary: Capture sessions, curate patterns, distribute lessons and measure outcomes. + domain: infotech + status: draft + owner: agentic-resources + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.agents.performance-learning.md + consumption_modes: + - CLI + - source + source_repo: agentic-resources + source_index: ../agentic-resources/registry/indexes/capabilities.yaml +- id: capability.agents.repo-scoping-service + name: Repository Scoping Service + summary: Maps repositories from usefulness to implementation (Ability -> Capability + -> Feature -> Evidence -> Code location) via a Python registry core, FastAPI HTTP + API, and curator UI. + vector: D2 / A2 / C1 / R0 + domain: agents + status: draft + owner: repo-scoping + path: registry/capabilities/capability.agents.repo-scoping-service.md + tags: + - classification + - scoping + - registry + consumption_modes: + - http api + - library import + - ui + source_repo: repo-scoping + source_url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/repo-scoping.yaml +- id: capability.audit.event-retain + name: Independent audit custody + summary: Tenant-aware event ingestion, chain integrity, heartbeat and reconciliation. + domain: infotech + status: draft + owner: audit-core + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C3 / R2 + path: registry/capabilities/capability.audit.event-retain.md + consumption_modes: + - HTTP API + - source + source_repo: audit-core + source_index: ../audit-core/registry/indexes/capabilities.yaml +- id: capability.authorization.policy-evaluate + name: Policy evaluation and decision evidence + summary: Check, batch, list-allowed, explain, binding, lifetime and decision records. + domain: helix_forge + status: draft + owner: access-engine + tags: + - authorization + - policy + - flex-auth + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.authorization.policy-evaluate.md + consumption_modes: + - HTTP API + - source + source_repo: access-engine + source_index: ../access-engine/registry/indexes/capabilities.yaml +- id: capability.cmis.tck + name: OpenCMIS Conformance-Preparation Extension + summary: CMIS conformance-preparation extension for guide-board, keeping CMIS-specific + runner code, profiles, capability mappings, and workplans outside the generic + compliance framework. + vector: D2 / A1 / C1 / R0 + domain: communication + status: draft + owner: open-cmis-tck + path: registry/capabilities/capability.cmis.tck.md + tags: + - cmis + - compliance + - guide-board-extension + consumption_modes: + - library import (guide-board extension) + source_repo: open-cmis-tck + source_url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/open-cmis-tck.yaml +- id: capability.communication.compliance-evidence-framework + name: Certification And Compliance Evidence Framework + summary: Framework that turns standards, conformance, regulatory, and repository-quality + claims into structured, reviewable, repeatable, comparable evidence via a pluggable + extension architecture. + vector: D2 / A2 / C1 / R0 + domain: communication + status: draft + owner: guide-board + path: registry/capabilities/capability.communication.compliance-evidence-framework.md + tags: + - compliance + - certification + - evidence + - extensions + consumption_modes: + - cli + source_repo: guide-board + source_url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/guide-board.yaml +- id: capability.communication.context-engine + name: Kontextual Engine (Knowledge Operations Runtime) + summary: Headless knowledge-operations engine turning heterogeneous information + assets into persistent, contextual, governed, retrievable, transformable, and + agent-operable knowledge. + vector: D4 / A1 / C1 / R0 + domain: communication + status: draft + owner: kontextual-engine + path: registry/capabilities/capability.communication.context-engine.md + tags: + - knowledge + - context + - runtime + consumption_modes: + - library import + source_repo: kontextual-engine + source_url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/kontextual-engine.yaml +- id: capability.communication.infospace-workspace + name: Infospace Workspace And Evaluation Bench + summary: Workspace and service for creating, developing, evaluating, and inspecting + structured knowledge spaces (infospaces); application-layer successor to the infospace + work begun in markitect-main. + vector: D3 / A1 / C2 / R1 + domain: communication + status: draft + owner: infospace-bench + path: registry/capabilities/capability.communication.infospace-workspace.md + tags: + - infospace + - knowledge + - evaluation + consumption_modes: + - cli + - library import (consumed by info-tech-canon) + source_repo: infospace-bench + source_url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/infospace-bench.yaml +- id: capability.communication.markitect-legacy-platform + name: MarkiTect Legacy Platform + summary: Intelligent markdown engine and information-management platform treating + documents as structured, queryable information spaces with schema validation, + transclusion, and LLM-driven evaluation; the legacy umbrella now being split into + markitect-tool, infospace-bench, and kontextual-engine. + vector: D3 / A1 / C1 / R0 + domain: communication + status: draft + owner: markitect-main + path: registry/capabilities/capability.communication.markitect-legacy-platform.md + tags: + - markitect + - markdown + - legacy + consumption_modes: + - application (legacy, not recommended for new integration) + source_repo: markitect-main + source_url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-main.yaml +- id: capability.communication.markitect-quarkdown-adapter + name: Markitect Quarkdown Render Adapter + summary: Concrete Quarkdown render/export adapter for Markitect, mapping Markitect + profiles to Quarkdown profiles and running controlled Quarkdown CLI execution + plans without forking or reimplementing Quarkdown. + vector: D3 / A1 / C1 / R0 + domain: communication + status: draft + owner: markitect-quarkdown + path: registry/capabilities/capability.communication.markitect-quarkdown-adapter.md + tags: + - markitect + - quarkdown + - adapter + consumption_modes: + - library import (plugin/entry-point) + source_repo: markitect-quarkdown + source_url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-quarkdown.yaml +- id: capability.communication.markitect-source-adapters + name: Markitect Source-Format Adapters + summary: Concrete source-format adapters (EPUB3, PDF) converting external document + formats into canonical Markitect Markdown, implementing the markitect-tool source + adapter contract. + vector: D2 / A1 / C1 / R0 + domain: communication + status: draft + owner: markitect-filter + path: registry/capabilities/capability.communication.markitect-source-adapters.md + tags: + - markitect + - adapter + - document-conversion + consumption_modes: + - library import (plugin/entry-point) + source_repo: markitect-filter + source_url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-filter.yaml +- id: capability.communication.markitect-toolkit + name: Markitect Markdown Toolkit And CLI + summary: Markdown-native toolkit and CLI (mkt) for turning semi-structured Markdown + into structured, queryable, reusable knowledge artifacts; syntax-layer successor + to markitect-main. + vector: D4 / A2 / C2 / R1 + domain: communication + status: draft + owner: markitect-tool + path: registry/capabilities/capability.communication.markitect-toolkit.md + tags: + - markitect + - markdown + - cli + - toolkit + consumption_modes: + - cli + - library import + source_repo: markitect-tool + source_url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/markitect-tool.yaml +- id: capability.coordination.cross-owner-work + name: Cross-owner coordination lifecycle + summary: Observation, lease, wake-up, checkpoint and receipt contracts/runtime. + domain: infotech + status: draft + owner: coordination-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.coordination.cross-owner-work.md + consumption_modes: + - CLI + - source + source_repo: coordination-engine + source_index: ../coordination-engine/registry/indexes/capabilities.yaml +- id: capability.design.whynot-system + name: Whynot Design System + summary: 'Framework-agnostic visual language for whynot prototype/market-signal + artefacts: design tokens, drop-in CSS, Lit-based web components usable from React/Django/Vue/plain + HTML, and Django template adapters.' + vector: D3 / A2 / C2 / R1 + domain: consumer + status: draft + owner: whynot-design + path: registry/capabilities/capability.design.whynot-system.md + tags: + - design-system + - web-components + - frontend + consumption_modes: + - library import (npm) + - cli + - django template adapter + source_repo: whynot-design + source_url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/whynot-design.yaml +- id: capability.evidence.binding + name: Evidence-to-Target Binding + summary: Links evidence items to structured targets with relation, status, and confidence + metadata, bidirectional queries, active-state coordination, and canonical engine + events. + vector: D3 / A2 / C3 / R3 + domain: infotech + status: draft + owner: evidence-binder + path: registry/capabilities/capability.evidence.binding.md + tags: + - evidence + - binding + - evidence-link + - form-field + - citation-evidence + consumption_modes: + - source module + - React provider + source_repo: evidence-binder + source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml +- id: capability.evidence.rect-registry + name: Visual-Guide Rect Registry + summary: Coordinates field, evidence-card, and highlight rectangles from independent + renderers so an SVG overlay can draw the active visual guide without polling. + vector: D3 / A2 / C3 / R3 + domain: infotech + status: draft + owner: evidence-binder + path: registry/capabilities/capability.evidence.rect-registry.md + tags: + - rect-registry + - visual-guide + - overlay + - active-state + - citation-evidence + consumption_modes: + - source module + - React component + source_repo: evidence-binder + source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-binder.yaml +- id: capability.execution.openweight-rein + name: Bounded open-weight agent execution + summary: Tool loop, path guards, turn/budget limits and verified-commit result. + domain: infotech + status: draft + owner: rein-openweights + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.openweight-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-openweights + source_index: ../rein-openweights/registry/indexes/capabilities.yaml +- id: capability.execution.profile-harness + name: Profile-bound agent execution lifecycle + summary: Typed execution requests, profile/rein resolution, sandbox and cleanup + orchestration. + domain: infotech + status: draft + owner: glas-harness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.execution.profile-harness.md + consumption_modes: + - library + - CLI + source_repo: glas-harness + source_index: ../glas-harness/registry/indexes/capabilities.yaml +- id: capability.execution.sandbox-provision + name: Sandbox establishment and lifecycle + summary: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry. + domain: infotech + status: draft + owner: sand-boxer + tags: + - sandbox + - isolation + - provision + - e2e + - agentic + - execution + - profile + - security + - netkingdom + - framework-reuse + vector: D5 / A5 / C5 / R0 + path: registry/capabilities/execution.sandbox-provision.md + consumption_modes: + - containerized service + - CLI + source_repo: sand-boxer + source_index: ../sand-boxer/registry/indexes/capabilities.yaml +- id: capability.execution.scheduled-agent-rein + name: Scheduled agent intake and harness routing + summary: Activity Core lease claim/heartbeat and Glas profile execution. + domain: infotech + status: draft + owner: rein-aharness + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.execution.scheduled-agent-rein.md + consumption_modes: + - CLI + - source + source_repo: rein-aharness + source_index: ../rein-aharness/registry/indexes/capabilities.yaml +- id: capability.feature-control.evaluate + name: Feature Availability Evaluation + summary: Evaluate whether a feature is active, hidden, disabled, or unavailable + for a subject in context. + vector: D5 / A4 / C3 / R3 + domain: helix_forge + status: draft + owner: feature-control + path: registry/capabilities/capability.feature-control.evaluate.md + tags: + - feature-control + - evaluation + - sdk + consumption_modes: + - SDK + - service API + source_repo: feature-control + source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- id: capability.feature-control.rollout + name: Feature Rollout Control + summary: Gradually expose features to subjects across tenants, domains, groups, + or cohorts using rollout rules. + vector: D4 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: feature-control + path: registry/capabilities/capability.feature-control.rollout.md + tags: + - feature-control + - rollout + - planning + consumption_modes: + - source module + - SDK + source_repo: feature-control + source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- id: capability.feature-control.visibility + name: Feature Visibility Control + summary: Control whether features are visible or hidden for subjects without changing + entitlement or authorization. + vector: D4 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: feature-control + path: registry/capabilities/capability.feature-control.visibility.md + tags: + - feature-control + - visibility + consumption_modes: + - source module + source_repo: feature-control + source_url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/feature-control.yaml +- id: capability.finance.security-budget-evidence + name: Budget and cost evidence for security operations + summary: Budget, commitment, spend attribution and planning-evidence consumption. + domain: infotech + status: draft + owner: fin-hub + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.finance.security-budget-evidence.md + consumption_modes: + - HTTP API + - source + source_repo: fin-hub + source_index: ../fin-hub/registry/indexes/capabilities.yaml +- id: capability.graph.nbgm-spec + name: Network-Based Graph Model (NBGM) Specification + summary: Generic system and versioned protocol specification for exploring dependency + structures as network-based graph models (NBGM), unifying entity/relationship + inspection and reasoning across arbitrary domains. + vector: D2 / A0 / C1 / R0 + domain: infotech + status: draft + owner: vantage-point + path: registry/capabilities/capability.graph.nbgm-spec.md + tags: + - graph + - nbgm + - specification + consumption_modes: + - informational (specification only) + source_repo: vantage-point + source_url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/vantage-point.yaml +- id: capability.hr.workflow-catalog + name: HR Workflow Catalog + summary: Markdown-first registry of HR planning workflows with an iterative assessment + loop tied to INTENT phases. + vector: D3 / A1 / C1 / R0 + domain: consumer + status: draft + owner: human-resources + path: registry/capabilities/capability.hr.workflow-catalog.md + tags: + - hr + - workflows + - assessment + - planning + consumption_modes: + - informational + source_repo: human-resources + source_url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/human-resources.yaml +- id: capability.iam.key-cape + name: OIDC identity and assurance + summary: OIDC code with PKCE, service tokens, JWKS, MFA and caller CLI. + domain: infotech + status: draft + owner: key-cape + tags: + - iam + - oidc + - netkingdom + - security + - framework-reuse + vector: D4 / A4 / C2 / R1 + path: registry/capabilities/capability.iam.key-cape.md + consumption_modes: + - HTTP API + - source + source_repo: key-cape + source_index: ../key-cape/registry/indexes/capabilities.yaml +- id: capability.identity.subject-resolution + name: Identity Subject Resolution + summary: Resolve who or what is acting by mapping principals, accounts, actors, + and identifiers to a stable subject model. + vector: D3 / A0 / C1 / R0 + domain: helix_forge + status: draft + owner: commerce-canon + path: registry/capabilities/capability.identity.subject-resolution.md + tags: + - identity + - subject + - architecture + consumption_modes: + - informational + source_repo: commerce-canon + source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml +- id: capability.identity.tenant-facts + name: Tenant lifecycle and guardrail facts + summary: Cache-read, live-lookup and write APIs; PostgreSQL lifecycle store. + domain: infotech + status: draft + owner: tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.identity.tenant-facts.md + consumption_modes: + - HTTP API + - source + source_repo: tenant-engine + source_index: ../tenant-engine/registry/indexes/capabilities.yaml +- id: capability.identity.user-engine + name: User lifecycle and account journeys + summary: Accounts, identity links, membership, MFA and recovery portal, advisory + catalog. + domain: communication + status: draft + owner: user-engine + tags: + - identity + - user-management + - multi-tenant + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C2 / R0 + path: registry/capabilities/capability.identity.user-engine.md + consumption_modes: + - HTTP API + - source + source_repo: user-engine + source_index: ../user-engine/registry/indexes/capabilities.yaml +- id: capability.identity.vocabulary-canonicalize + name: Identity Vocabulary Canonicalization + summary: Define an implementation-neutral vocabulary for identity-related concepts + across overlapping domains. + vector: D4 / A0 / C2 / R0 + domain: helix_forge + status: draft + owner: commerce-canon + path: registry/capabilities/capability.identity.vocabulary-canonicalize.md + tags: + - identity + - terminology + - research + consumption_modes: + - informational + source_repo: commerce-canon + source_url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/commerce-canon.yaml +- id: capability.infotech.artifact-store + name: Artifact Registry And Storage Gateway + summary: Generic artifact registry and storage gateway for generated outputs, evidence + packages, reports, logs, snapshots, exports, and release artifacts. + vector: D3 / A1 / C1 / R0 + domain: infotech + status: draft + owner: artifact-store + path: registry/capabilities/capability.infotech.artifact-store.md + tags: + - artifact + - storage + - provenance + - registry + consumption_modes: + - library import + - cli + source_repo: artifact-store + source_url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/artifact-store.yaml +- id: capability.infotech.canon-service + name: Shared semantic contracts and validation + summary: Markdown canon with library, CLI and read-only API. + domain: infotech + status: draft + owner: info-tech-canon + tags: + - canon + - infospace + - service + - security + - netkingdom + - framework-reuse + vector: D2 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.canon-service.md + consumption_modes: + - HTTP API + - source + source_repo: info-tech-canon + source_index: ../info-tech-canon/registry/indexes/capabilities.yaml +- id: capability.infotech.citation-engine + name: Citation Evidence Domain Engine + summary: "Core domain model and engine services for the citation-evidence ecosystem\ + \ \u2014 shared vocabulary, in-memory repositories, orchestration services, event\ + \ bus, and citation card renderers." + vector: D3 / A1 / C1 / R0 + domain: infotech + status: draft + owner: citation-engine + path: registry/capabilities/capability.infotech.citation-engine.md + tags: + - citation + - evidence + - domain-model + consumption_modes: + - library import (workspace link) + source_repo: citation-engine + source_url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/citation-engine.yaml +- id: capability.infotech.citation-evidence-workspace + name: Citation Evidence Workspace + summary: "Document-centered evidence workspace for capturing, managing, presenting,\ + \ and re-opening citations \u2014 the umbrella application over the citation-evidence\ + \ six-package design." + vector: D4 / A1 / C1 / R0 + domain: infotech + status: draft + owner: citation-evidence + path: registry/capabilities/capability.infotech.citation-evidence-workspace.md + tags: + - citation + - evidence + - workspace + consumption_modes: + - application (local dev server) + source_repo: citation-evidence + source_url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/citation-evidence.yaml +- id: capability.infotech.config-surface-atlas + name: Configuration Surface Atlas + summary: "Read-first, cross-kind map and evidence layer for configuration surfaces\ + \ \u2014 what configures a system, who owns it, its scope, and where the source\ + \ of truth lives." + vector: D5 / A0 / C2 / R2 + domain: infotech + status: draft + owner: config-atlas + path: registry/capabilities/capability.infotech.config-surface-atlas.md + tags: + - configuration + - registry + - control-plane + - effective-config + - evidence + consumption_modes: + - informational + - source module + source_repo: config-atlas + source_url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/config-atlas.yaml +- id: capability.infotech.core-hub + name: Core Hub Production Interaction Framework + summary: Contract-first framework for cross-domain state, agent coordination, evidence, + registries, workplans, and operator interaction surfaces. + vector: D3 / A1 / C1 / R1 + domain: infotech + status: draft + owner: core-hub + path: registry/capabilities/capability.infotech.core-hub.md + tags: + - interaction-framework + - state-hub + - inter-hub-successor + - agent-coordination + - registry + - api + consumption_modes: + - informational + - planning + - cli + source_repo: core-hub + source_url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/core-hub.yaml +- id: capability.infotech.email-connector + name: Mailbox Evidence Scanner (email-connect) + summary: Headless, provider-neutral email communication and evidence service; first + slice scans a mailbox or fixture directory and produces timestamped CSV evidence + reports. + vector: D2 / A1 / C1 / R0 + domain: infotech + status: draft + owner: email-connect + path: registry/capabilities/capability.infotech.email-connector.md + tags: + - email + - evidence + - coordination + consumption_modes: + - cli + source_repo: email-connect + source_url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/email-connect.yaml +- id: capability.infotech.headless-browser + name: Headless Browser Automation + summary: 'Headless browser automation, screenshots and keyboard trials through rapp-playwright + 0.1.0 (Playwright 1.64.0, Chromium 156.0.8078.4). Published A5 local container; + managed Railiance admission is pending. Download the Python 3.10+ standalone client + from https://forgejo.coulomb.social/coulomb/rapp-playwright/raw/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/client/rapp_playwright.py + and run `python3 rapp_playwright.py --url http://127.0.0.1:18083 preflight`, then + `python3 rapp_playwright.py --url http://127.0.0.1:18083 trial --out trial-01` + with a fresh output directory. This endpoint was verified locally on 2026-10-13 + and is ephemeral; it installs no browser for the caller. If unreachable, follow + the local container setup in the capability card or adapt its A2 source examples; + this is an availability gap on the existing capability. Contract: https://forgejo.coulomb.social/coulomb/rapp-playwright/src/commit/8831a05aeba5ce588f3b395ade676dde2a151c5d/docs/consumer-contract.md.' + vector: D3 / A5 / C2 / R2 + domain: infotech + status: reviewed + owner: reuse-surface + path: registry/capabilities/capability.infotech.headless-browser.md + tags: + - headless + - browser + - automation + - playwright + - chromium + - testing + - screenshots + - extraction + - firefox + - webkit + - selenium + - puppeteer + consumption_modes: + - informational + - source adaptation + - JavaScript library + - Python library + - cli + - service API + - container + source_repo: reuse-surface + source_index: ../reuse-surface/registry/indexes/capabilities.yaml +- id: capability.infotech.hub-core-library + name: Reusable FOS Hub Core Primitives + summary: Reusable FastAPI, SQLAlchemy, and MCP primitives extracted from the State + Hub for use by other FOS (Federation of Services) hubs. + vector: D2 / A1 / C1 / R1 + domain: infotech + status: draft + owner: hub-core + path: registry/capabilities/capability.infotech.hub-core-library.md + tags: + - hub + - fastapi + - sqlalchemy + - mcp + consumption_modes: + - library import + source_repo: hub-core + source_url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/hub-core.yaml +- id: capability.infotech.issue-tracking + name: External issue tracker connector + summary: CLI and Python adapters for external issue systems. + domain: infotech + status: draft + owner: issue-core + tags: + - issue-tracking + - connector + - work-record + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.infotech.issue-tracking.md + consumption_modes: + - CLI + - source + source_repo: issue-core + source_index: ../issue-core/registry/indexes/capabilities.yaml +- id: capability.infotech.oss-integration-continuity + name: Managed Continuity For OSS Integrations + summary: Turns proven open-source integrations into structured, maintainable, continuously + managed assets with clear boundaries and update loops, so they remain robust and + transparent as upstream evolves. + vector: D2 / A1 / C1 / R0 + domain: infotech + status: draft + owner: open-reuse + path: registry/capabilities/capability.infotech.oss-integration-continuity.md + tags: + - oss + - integration + - maintenance + consumption_modes: + - library import + source_repo: open-reuse + source_url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/open-reuse.yaml +- id: capability.infotech.pdf-evidence-ingest + name: Headless PDF Evidence Ingest + summary: "Turns raw PDF bytes into an engine-shaped Document + DocumentRepresentation\ + \ \u2014 SHA-256 fingerprint, canonical text, page map, and gap-free offset map\ + \ \u2014 as a runtime-agnostic library with no viewer, persistence, or React coupling." + vector: D2 / A1 / C1 / R1 + domain: infotech + status: draft + owner: evidence-source + path: registry/capabilities/capability.infotech.pdf-evidence-ingest.md + tags: + - pdf + - ingest + - fingerprint + - canonical-text + - evidence + consumption_modes: + - library import + source_repo: evidence-source + source_url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/evidence-source.yaml +- id: capability.infotech.repo-template + name: Coulomb Repository Template + summary: Bootstrap new git repositories with agent instructions, registry scaffold, + and State Hub onboarding conventions. + vector: D3 / A3 / C2 / R2 + domain: infotech + status: draft + owner: repo-seed + path: registry/capabilities/capability.infotech.repo-template.md + tags: + - template + - bootstrap + - state-hub + - onboarding + consumption_modes: + - git clone + - informational + source_repo: repo-seed + source_url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/repo-seed.yaml +- id: capability.infotech.runbook-tutorials + name: Guided administrative runbooks + summary: Pack schema, loader, local UI/CLI, gates, verification and rollback evidence. + domain: infotech + status: draft + owner: runbook-tutorials + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.infotech.runbook-tutorials.md + consumption_modes: + - CLI + - source + source_repo: runbook-tutorials + source_index: ../runbook-tutorials/registry/indexes/capabilities.yaml +- id: capability.infotech.sbom-management + name: Dependency provenance and SBOM evidence + summary: Controlled archive ingest, immutable snapshots, freshness and license review. + domain: infotech + status: draft + owner: sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.infotech.sbom-management.md + consumption_modes: + - HTTP API + - source + source_repo: sbom-nexus + source_index: ../sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.memory.phase-planning + name: Profile-Driven Memory Phase Planning (phase-memory) + summary: Interprets Markitect memory profiles as runtime plans, modeling memory + phases and producing deterministic dry-run actions for retention, refresh, compaction, + stabilization, and activation. + vector: D3 / A1 / C1 / R0 + domain: communication + status: draft + owner: phase-memory + path: registry/capabilities/capability.memory.phase-planning.md + tags: + - memory + - agentic + - planning + consumption_modes: + - library import + source_repo: phase-memory + source_url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/phase-memory.yaml +- id: capability.observability.security-signals + name: Security-relevant telemetry contracts and adapters + summary: Signal contract, platform adapters, report exporter and absence/alert rules. + domain: infotech + status: draft + owner: railiance-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.observability.security-signals.md + consumption_modes: + - CLI + - source + source_repo: railiance-telemetry + source_index: ../railiance-telemetry/registry/indexes/capabilities.yaml +- id: capability.operations.ops-hub + name: Operations Hub Extension Contract + summary: Versioned hub-extension package and bootstrap client for operational truth, + service-catalog records, readiness evidence, and migration gates. + vector: D3 / A1 / C1 / R1 + domain: operations + status: reviewed + owner: ops-hub + path: registry/capabilities/capability.operations.ops-hub.md + tags: + - operations + - service-catalog + - readiness + - hub-extension + consumption_modes: + - contract package + - command-line bootstrap + source_repo: ops-hub + source_url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/ops-hub.yaml +- id: capability.ops.tunnel-bridge + name: SSH tunnel lifecycle + summary: Named tunnels, reconnect, health and TTL-aware cert_command. + domain: infotech + status: draft + owner: ops-bridge + tags: + - ssh + - tunnel + - ops + - connectivity + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.ops.tunnel-bridge.md + consumption_modes: + - CLI + - source + source_repo: ops-bridge + source_index: ../ops-bridge/registry/indexes/capabilities.yaml +- id: capability.organization.role-catalog + name: Organizational role definitions + summary: Versioned documentation catalog. + domain: infotech + status: draft + owner: role-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.organization.role-catalog.md + consumption_modes: + - informational + source_repo: role-engine + source_index: ../role-engine/registry/indexes/capabilities.yaml +- id: capability.procurement.vergabe-teilnahme + name: Vergabe Teilnahme (Public Procurement Participation) Application + summary: "Django application (with a Vite/Tailwind frontend) for managing German\ + \ public-procurement (Vergabe) tender participation \u2014 Ausschreibungs- und\ + \ Teilnahme-Management-System." + vector: D3 / A1 / C1 / R1 + domain: communication + status: draft + owner: vergabe-teilnahme + path: registry/capabilities/capability.procurement.vergabe-teilnahme.md + tags: + - procurement + - django + - vergabe + consumption_modes: + - application (Django + Vite, local dev via docker-compose) + source_repo: vergabe-teilnahme + source_url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/vergabe-teilnahme.yaml +- id: capability.railiance.bootstrap-sequencing + name: Bootstrap sequencing contracts + summary: Bare-VM to estate sequence and handoff contract. + domain: infotech + status: draft + owner: railiance-bootstrap + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.bootstrap-sequencing.md + consumption_modes: + - informational + source_repo: railiance-bootstrap + source_index: ../railiance-bootstrap/registry/indexes/capabilities.yaml +- id: capability.railiance.browser-verification + name: Managed browser verification pilot + summary: Bounded jobs, cancellation, artifacts, origin checks and restart receipts. + domain: infotech + status: draft + owner: rapp-playwright + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.railiance.browser-verification.md + consumption_modes: + - HTTP API + - source + source_repo: rapp-playwright + source_index: ../rapp-playwright/registry/indexes/capabilities.yaml +- id: capability.railiance.ci-enablement + name: Developer delivery and CI templates + summary: Reusable CI workflows, build and deployment patterns. + domain: financials + status: draft + owner: railiance-enablement + tags: + - railiance + - ci-cd + - developer-enablement + - forgejo + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.ci-enablement.md + consumption_modes: + - CLI + - source + source_repo: railiance-enablement + source_index: ../railiance-enablement/registry/indexes/capabilities.yaml +- id: capability.railiance.cluster-bootstrap + name: Kubernetes runtime and cluster controls + summary: k3s, ingress, CNI, operators and kubeconfig/runtime checks. + domain: financials + status: draft + owner: railiance-cluster + tags: + - railiance + - kubernetes + - iac + - bootstrap + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.cluster-bootstrap.md + consumption_modes: + - CLI + - source + source_repo: railiance-cluster + source_index: ../railiance-cluster/registry/indexes/capabilities.yaml +- id: capability.railiance.fabric-graph + name: Infrastructure ownership and dependency graph + summary: Schemas, validation, graph queries and State Hub exports. + domain: financials + status: draft + owner: railiance-fabric + tags: + - railiance + - graph + - ownership + - discovery + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.fabric-graph.md + consumption_modes: + - CLI + - source + source_repo: railiance-fabric + source_index: ../railiance-fabric/registry/indexes/capabilities.yaml +- id: capability.railiance.forge-infrastructure + name: Source forge, registries and runner substrate + summary: Forgejo operation, package registries and runner lifecycle. + domain: financials + status: draft + owner: railiance-forge + tags: + - railiance + - forgejo + - forge + - ci-runner + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.forge-infrastructure.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: ../railiance-forge/registry/indexes/capabilities.yaml +- id: capability.railiance.infra-provisioning + name: Host convergence and security baseline + summary: Ansible inventory, firewall, SSH bootstrap and baseline verification. + domain: financials + status: draft + owner: railiance-infra + tags: + - railiance + - terraform + - ansible + - infrastructure + - security + - netkingdom + - framework-reuse + vector: D4 / A2 / C2 / R1 + path: registry/capabilities/capability.railiance.infra-provisioning.md + consumption_modes: + - CLI + - source + source_repo: railiance-infra + source_index: ../railiance-infra/registry/indexes/capabilities.yaml +- id: capability.railiance.knative-rail + name: Knative workload lifecycle + summary: Derived rail for activation, revisions, traffic, scaling and rollback. + domain: infotech + status: draft + owner: rail-knative + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.knative-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-knative + source_index: ../rail-knative/registry/indexes/capabilities.yaml +- id: capability.railiance.kubernetes-rail + name: Generic Kubernetes workload lifecycle + summary: Workload declaration, rollout, observe, promote and rollback surfaces. + domain: infotech + status: draft + owner: rail-kubernetes + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.kubernetes-rail.md + consumption_modes: + - CLI + - source + source_repo: rail-kubernetes + source_index: ../rail-kubernetes/registry/indexes/capabilities.yaml +- id: capability.railiance.openbao-package + name: Managed OpenBao deployment package + summary: Helm values, package deploy/status/smoke/rollback and custody boundary. + domain: infotech + status: draft + owner: rapp-openbao + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.openbao-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-openbao + source_index: ../rapp-openbao/registry/indexes/capabilities.yaml +- id: capability.railiance.platform-services + name: Secret custody and platform data services + summary: OpenBao policy/custody, consumer grants, secret delivery and database/backup + contracts. + domain: financials + status: draft + owner: railiance-platform + tags: + - railiance + - platform + - secrets + - postgres + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.platform-services.md + consumption_modes: + - CLI + - source + source_repo: railiance-platform + source_index: ../railiance-platform/registry/indexes/capabilities.yaml +- id: capability.railiance.policy-publication-package + name: Policy publication runtime package + summary: Immutable image, non-root/read-only runtime and approved TLS exposure. + domain: infotech + status: draft + owner: rapp-policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.policy-publication-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-policy-nexus + source_index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.postgres-isolation-recovery + name: Database isolation and recovery package + summary: CNPG cells, per-consumer roles, negative isolation tests and backup/restore + procedures. + domain: infotech + status: draft + owner: rapp-postgres + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.postgres-isolation-recovery.md + consumption_modes: + - CLI + - source + source_repo: rapp-postgres + source_index: ../rapp-postgres/registry/indexes/capabilities.yaml +- id: capability.railiance.sbom-runtime-package + name: Private SBOM runtime and dynamic database delivery + summary: Immutable deployment, private network policy, dynamic database leases and + migration/rollback. + domain: infotech + status: draft + owner: rapp-sbom-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.sbom-runtime-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-sbom-nexus + source_index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml +- id: capability.railiance.security-consumption-contracts + name: Platform security consumption architecture + summary: Rail/rapp/reef boundaries, exposure and security consumption contracts. + domain: infotech + status: draft + owner: railiance-master + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.security-consumption-contracts.md + consumption_modes: + - informational + source_repo: railiance-master + source_index: ../railiance-master/registry/indexes/capabilities.yaml +- id: capability.railiance.substrate-bindings + name: Substrate topology and bindings + summary: Grouped home-reef identity, topology and placement declarations. + domain: infotech + status: draft + owner: reef-railiance + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.railiance.substrate-bindings.md + consumption_modes: + - informational + source_repo: reef-railiance + source_index: ../reef-railiance/registry/indexes/capabilities.yaml +- id: capability.railiance.telemetry-package + name: Private monitoring package + summary: Prometheus, Alertmanager and Grafana package with isolated restore evidence. + domain: infotech + status: draft + owner: rapp-telemetry + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.telemetry-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-telemetry + source_index: ../rapp-telemetry/registry/indexes/capabilities.yaml +- id: capability.railiance.tenant-engine-package + name: Tenant Engine runtime package + summary: Package declaration, smoke and rollback. + domain: infotech + status: draft + owner: rapp-tenant-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.tenant-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-tenant-engine + source_index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.user-engine-package + name: User Engine runtime package + summary: Pinned deployment, dedicated CNPG, ExternalSecret references and rollback. + domain: infotech + status: draft + owner: rapp-user-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.railiance.user-engine-package.md + consumption_modes: + - CLI + - source + source_repo: rapp-user-engine + source_index: ../rapp-user-engine/registry/indexes/capabilities.yaml +- id: capability.railiance.workload-deployment-tooling + name: Workload release configuration and guards + summary: Helm/manifests, exact image pins, application runbooks and rollout/rollback. + domain: financials + status: draft + owner: railiance-apps + tags: + - railiance + - kubernetes + - helm + - deployment + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.railiance.workload-deployment-tooling.md + consumption_modes: + - CLI + - source + source_repo: railiance-apps + source_index: ../railiance-apps/registry/indexes/capabilities.yaml +- id: capability.registry.register + name: Capability registry and federation + summary: Owner Markdown entries, indexes, federation hub and planning queries. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - governance + - meta + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C2 / R3 + path: registry/capabilities/capability.registry.register.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: ../reuse-surface/registry/indexes/capabilities.yaml +- id: capability.registry.validate + name: Capability registry validation + summary: Schema, index consistency and relation checks. + domain: helix_forge + status: draft + owner: reuse-surface + tags: + - registry + - validation + - cli + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R3 + path: registry/capabilities/capability.registry.validate.md + consumption_modes: + - library + - CLI + source_repo: reuse-surface + source_index: ../reuse-surface/registry/indexes/capabilities.yaml +- id: capability.resources.security-capacity + name: Capacity and recovery resource planning + summary: Provider-neutral inventory, procurement evidence and optimization reports. + domain: infotech + status: draft + owner: resource-control + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.resources.security-capacity.md + consumption_modes: + - CLI + - source + source_repo: resource-control + source_index: ../resource-control/registry/indexes/capabilities.yaml +- id: capability.security.access-routing + name: Credential routing and contained access + summary: warden route and access catalog; exact lane conduit and secret-exec routing. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A3 / C1 / R0 + path: registry/capabilities/capability.security.access-routing.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.adversarial-evidence + name: Authorized adversarial evidence harness + summary: Offline ASM and tenancy calibrations and engagement admission. + domain: infotech + status: draft + owner: whitehat-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.adversarial-evidence.md + consumption_modes: + - CLI + - source + source_repo: whitehat-security + source_index: ../whitehat-security/registry/indexes/capabilities.yaml +- id: capability.security.agent-knowledge + name: Verified security orientation for agents + summary: Versioned source-pinned cards, read-only CLI, provider adapters and sealed + exports. + domain: infotech + status: draft + owner: emergent-security + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.agent-knowledge.md + consumption_modes: + - CLI + - source + source_repo: emergent-security + source_index: ../emergent-security/registry/indexes/capabilities.yaml +- id: capability.security.approval-lifecycle + name: Bound approval lifecycle + summary: Authenticated issue, claim, revoke, supersede and atomic consume API with + outbox. + domain: infotech + status: draft + owner: approval-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.approval-lifecycle.md + consumption_modes: + - HTTP API + - source + source_repo: approval-engine + source_index: ../approval-engine/registry/indexes/capabilities.yaml +- id: capability.security.bootstrap-recovery + name: Guarded bootstrap and recovery preparation + summary: Local identity, bootstrap console, encrypted custody handoff and caller + tools. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.bootstrap-recovery.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-contracts + name: Security case types and instance validation + summary: Versioned types, cases and schema validation. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-contracts.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.case-follow-through + name: Security case operational follow-through + summary: KnownSecurityCase route, plan and operational receipts. + domain: infotech + status: draft + owner: ops-warden + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.case-follow-through.md + consumption_modes: + - CLI + - source + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.credential-lifecycle + name: Cataloged credential lifecycle + summary: CLI catalog, plan, exact OpenBao metadata apply, provisioning, verification, + delivery and revoke. + domain: infotech + status: draft + owner: secrets-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.credential-lifecycle.md + consumption_modes: + - CLI + - source + source_repo: secrets-engine + source_index: ../secrets-engine/registry/indexes/capabilities.yaml +- id: capability.security.doctrine-review + name: Security doctrine and architecture review + summary: Layer rules, authority context, ASM criteria and interpretations. + domain: infotech + status: draft + owner: gate-house + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.doctrine-review.md + consumption_modes: + - informational + source_repo: gate-house + source_index: ../gate-house/registry/indexes/capabilities.yaml +- id: capability.security.emission-profile + name: Security emission cadence validation + summary: Security profile over generic emission contracts and validator. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.emission-profile.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.forge-secret-prevention + name: Independent introduced-history secret prevention + summary: Pinned receive adapter, lifecycle template and fail-closed scan. + domain: infotech + status: draft + owner: railiance-forge + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.forge-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: railiance-forge + source_index: ../railiance-forge/registry/indexes/capabilities.yaml +- id: capability.security.human-decision-workspace + name: Human security decision presentation and disposition + summary: Headless lifecycle and browser workspace with exact native approval references. + domain: infotech + status: draft + owner: informed-decision + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A4 / C1 / R0 + path: registry/capabilities/capability.security.human-decision-workspace.md + consumption_modes: + - HTTP API + - source + source_repo: informed-decision + source_index: ../informed-decision/registry/indexes/capabilities.yaml +- id: capability.security.iam-tooling-suite + name: NetKingdom security architecture and conformance tooling + summary: Versioned IAM, layer, tenancy and credential contracts plus validators. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - iam + - kubernetes + - conformance + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R1 + path: registry/capabilities/capability.security.iam-tooling-suite.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.maturity-claims + name: Evidence-based maturity claims and gap register + summary: SQLite library and CLI for ladders, evidence expiry, compute, explain and + stance inventory. + domain: infotech + status: draft + owner: maturity-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.maturity-claims.md + consumption_modes: + - CLI + - source + source_repo: maturity-engine + source_index: ../maturity-engine/registry/indexes/capabilities.yaml +- id: capability.security.policy-publication + name: Policy publication with source provenance + summary: Generated immutable publication, source currency and stable policy URLs. + domain: infotech + status: draft + owner: policy-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.policy-publication.md + consumption_modes: + - CLI + - source + source_repo: policy-nexus + source_index: ../policy-nexus/registry/indexes/capabilities.yaml +- id: capability.security.posture-assessment + name: Security posture assessment and response proposals + summary: Normalized observation evaluator, cadence checks and secret-use snapshot + adapter. + domain: infotech + status: draft + owner: kings-guard + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-assessment.md + consumption_modes: + - CLI + - source + source_repo: kings-guard + source_index: ../kings-guard/registry/indexes/capabilities.yaml +- id: capability.security.posture-feedback + name: Deterministic posture feedback + summary: CLI evaluates evidence age and posture into owner-routed findings. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.posture-feedback.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.practice-canon + name: Security practice and authority vocabulary + summary: Versioned SEC-DSM and Mode of Authority documents. + domain: infotech + status: draft + owner: security-canon + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A0 / C1 / R0 + path: registry/capabilities/capability.security.practice-canon.md + consumption_modes: + - informational + source_repo: security-canon + source_index: ../security-canon/registry/indexes/capabilities.yaml +- id: capability.security.repository-secret-prevention + name: Repository metadata and staged-secret prevention + summary: Repository observation plus pinned staged-blob scanner and hook integration. + domain: infotech + status: draft + owner: repo-manager + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.repository-secret-prevention.md + consumption_modes: + - CLI + - source + source_repo: repo-manager + source_index: ../repo-manager/registry/indexes/capabilities.yaml +- id: capability.security.risk-register + name: Security risk and exception review register + summary: Markdown findings and Python review, verification and due-work reports. + domain: infotech + status: draft + owner: risk-nexus + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.risk-register.md + consumption_modes: + - CLI + - source + source_repo: risk-nexus + source_index: ../risk-nexus/registry/indexes/capabilities.yaml +- id: capability.security.scenario-compose + name: Deterministic security scenario composition + summary: CLI selects pinned providers and orders trust transitions. + domain: infotech + status: draft + owner: net-kingdom + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.scenario-compose.md + consumption_modes: + - CLI + - source + source_repo: net-kingdom + source_index: ../net-kingdom/registry/indexes/capabilities.yaml +- id: capability.security.ssh-certificate-issuance + name: Decision-bound SSH certificates + summary: warden sign with local and OpenBao backends and adm/agt/atm actors. + domain: helix_forge + status: draft + owner: ops-warden + tags: + - ssh + - certificate + - ca + - ops-warden + - openbao + - security + - netkingdom + - framework-reuse + vector: D4 / A3 / C3 / R2 + path: registry/capabilities/capability.security.ssh-certificate-issuance.md + consumption_modes: + - library + - CLI + source_repo: ops-warden + source_index: ../ops-warden/registry/indexes/capabilities.yaml +- id: capability.security.structure-construction + name: Reviewed security structure construction + summary: Digest-bound OpenBao AppRole and Kubernetes-auth plans and guarded apply. + domain: infotech + status: draft + owner: ops-mason + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.structure-construction.md + consumption_modes: + - CLI + - source + source_repo: ops-mason + source_index: ../ops-mason/registry/indexes/capabilities.yaml +- id: capability.security.zone-reference + name: Zone membership reference conformance + summary: Offline resolution, exception and lineage checks. + domain: infotech + status: draft + owner: zone-engine + tags: + - security + - netkingdom + - framework-reuse + vector: D3 / A2 / C1 / R0 + path: registry/capabilities/capability.security.zone-reference.md + consumption_modes: + - CLI + - source + source_repo: zone-engine + source_index: ../zone-engine/registry/indexes/capabilities.yaml +- id: capability.statehub.progress-log + name: Progress and work evidence indexing + summary: REST progress and task evidence references. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - progress + - coordination + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R3 + path: registry/capabilities/capability.statehub.progress-log.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: ../state-hub/registry/indexes/capabilities.yaml +- id: capability.statehub.workstream-coordinate + name: Cross-repository work tracking + summary: File-derived workplans, tasks, dependencies, decisions and coordination + views. + domain: helix_forge + status: draft + owner: state-hub + tags: + - state-hub + - coordination + - workplans + - security + - netkingdom + - framework-reuse + vector: D4 / A4 / C3 / R2 + path: registry/capabilities/capability.statehub.workstream-coordinate.md + consumption_modes: + - HTTP API + - source + source_repo: state-hub + source_index: ../state-hub/registry/indexes/capabilities.yaml +- id: capability.wiki.adapter-contract + name: Capability-Aware Shard Adapter Contract + summary: A versioned backend interface where each binding declares a verified capability + profile, so federation ops degrade by capability. + vector: D5 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.adapter-contract.md + tags: + - wiki + - adapter + - capability + - contract + - conformance + - shard-wiki + consumption_modes: + - source module + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.coordination-journal + name: Event-Sourced Coordination Journal + summary: An append-only, totally-ordered-per-space decision log whose current state + is a derived fold; git-addressable history. + vector: D5 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.coordination-journal.md + tags: + - wiki + - event-sourcing + - coordination + - git + - journal + - shard-wiki + consumption_modes: + - source module + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.derived-views + name: Wiki Derived Views + summary: "Recomputable views over a wiki union \u2014 BackLinks, RecentChanges,\ + \ AllPages, SiteMap, and (delegate-or-derive) Search \u2014 carrying provenance." + vector: D3 / A0 / C0 / R0 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.derived-views.md + tags: + - wiki + - derived-views + - backlinks + - recentchanges + - search + - shard-wiki + consumption_modes: + - informational + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.engine-typed-extensions + name: Wiki Engine with Typed Extensions + summary: A small-core wiki engine realizing a typed-extension framework that addresses + all wiki use cases and lets each shard activate only the features it needs. + vector: D3 / A0 / C0 / R0 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.engine-typed-extensions.md + tags: + - wiki + - engine + - typed-extensions + - feature-activation + - shard-wiki + consumption_modes: + - informational + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.federation-models + name: Selectable Federation-Model Taxonomy + summary: Federation as a plural, composable coordination axis (fork+journal, VCS-replication, + query-join, feed, activity-streams, engine-mirror) selected per space. + vector: D4 / A0 / C1 / R0 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.federation-models.md + tags: + - wiki + - federation + - taxonomy + - composable + - shard-wiki + consumption_modes: + - informational + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.overlay + name: Overlay-Before-Mutation Write Path + summary: Non-destructive edits (draft -> patch -> apply-under-drift) that let read-only + or limited backends be edited safely without silent remote mutation. + vector: D5 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.overlay.md + tags: + - wiki + - overlay + - patch + - write-path + - conflict + - shard-wiki + consumption_modes: + - source module + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.page-model + name: Backend-Neutral Wiki Page Model + summary: A Markdown-first but stretchable page model with stable identity separate + from placement and layered provenance. + vector: D5 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.page-model.md + tags: + - wiki + - page-model + - identity + - provenance + - markdown + - shard-wiki + consumption_modes: + - source module + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml +- id: capability.wiki.shard-orchestration + name: Wiki Shard Orchestration + summary: Present a union of pages across heterogeneous wiki-shaped shards while + preserving each shard's provenance, capabilities, and history. + vector: D5 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: shard-wiki + path: registry/capabilities/capability.wiki.shard-orchestration.md + tags: + - wiki + - federation + - orchestration + - union + - shard-wiki + consumption_modes: + - source module + source_repo: shard-wiki + source_url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + source_index: /tmp/netkingdom-reuse-federation-cache/shard-wiki.yaml diff --git a/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json b/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json new file mode 100644 index 00000000..ac92baa9 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-default-federation-receipt.json @@ -0,0 +1,8 @@ +{ + "source_count": 99, + "reviewed_count": 70, + "all_exactly_once": true, + "warnings": [], + "previous_sources_sha256": "29a877f165b8d474ceb032f199efa87349a4c4f90c3599fab0cb244110113d10", + "scope": "Workstation local federation. Existing unrelated sources preserved; hosted registration is separate." +} diff --git a/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json b/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json new file mode 100644 index 00000000..b38a32d4 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-discovery-receipt.json @@ -0,0 +1,21 @@ +{ + "default_federated_index": "/home/worsch/reuse-surface/registry/indexes/federated.yaml", + "total_capabilities_including_unrelated_sources": 114, + "reviewed_exactly_once": 70, + "composition_warnings": [], + "plan_check_trials": [ + { + "intent": "bound approval consumption before credential delivery", + "top_id": "capability.security.approval-lifecycle", + "verdict": "extend", + "score": 0.2857 + }, + { + "intent": "deterministic posture feedback evidence expiry", + "top_id": "capability.security.posture-feedback", + "verdict": "reuse", + "score": 0.6 + } + ], + "meaning": "Discovery works through the normal CLI. Ranking verdicts are lexical planning recommendations, not permission or runtime readiness." +} diff --git a/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md b/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md new file mode 100644 index 00000000..5fe1446f --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-federation-guide.md @@ -0,0 +1,27 @@ +# NetKingdom security capability discovery + +The workstation federation includes 70 reviewed security and supporting capabilities from 60 sibling repositories. Two additional inspected repositories are nonproviders: rapp-secrets-engine is retired and rapp-forgejo is a placeholder without a package declaration. The owner capability entries are the reusable source; the architecture assessment is in the-custodian CUST-WP-0081. + +## Local discovery + +From a reuse-surface checkout beside those repositories: + +```sh +reuse-surface federation compose +reuse-surface plan-check --intent "bound approval consumption before credential delivery" --no-llm +reuse-surface plan-check --intent "deterministic posture feedback evidence expiry" --no-llm +``` + +The source manifest uses relative sibling paths for the reviewed cohort and requires their indexes to exist. Other federation sources are preserved. A missing sibling is a composition error rather than silent loss of a reviewed capability. The composed local index supports planning; it is not a runtime readiness or authorization grant. `reuse-surface query` searches this repository's own index, while `plan-check` uses the composed federation. + +## Hosted discovery + +```sh +reuse-surface plan-check --hub-url https://reuse.coulomb.social --intent "bound approval consumption" --no-llm +``` + +As checked on 2026-10-14, all 60 source registry commits are published, while the hosted hub contains 32 of the 70 reviewed capabilities. Thirty-eight new owner registrations remain pending scoped write access: the normal Warden lane was allowed by the PDP but OpenBao refused the current caller with HTTP 403. Seven of those indexes also require admitted private-source read access; anonymous retrieval returns 404. Do not change repository visibility or reuse another workload's credential to make discovery pass. + +The seven private sources are rapp-openbao, rapp-policy-nexus, rapp-postgres, rapp-telemetry, rapp-tenant-engine, rapp-user-engine and rapp-sbom-nexus. Hosted registration supports an `auth_env` reference to a credential already configured at the hub. Source-owner approval, scoped read provisioning and a successful native fetch must precede their registration. Thirty-one public-source registrations are otherwise ready. + +The exact registration plan, source commits, raw retrieval results and local/hosted verification receipts are retained in the-custodian at `docs/assessments/netkingdom-2026-10-14/`. Existing IDs were preserved where valid; the copied Secrets Engine repository-template entry was removed. Registry C/R values retained from older entries remain owner assessments, not renewed evidence. diff --git a/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml b/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml new file mode 100644 index 00000000..457f4e6c --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-sources-before.yaml @@ -0,0 +1,431 @@ +version: 1 +domain: helix_forge +collision_policy: warn +sources: +- repo: activity-core + url: https://forgejo.coulomb.social/coulomb/activity-core/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: agentic-resources + url: https://forgejo.coulomb.social/coulomb/agentic-resources/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: artifact-store + url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: audit-core + url: https://forgejo.coulomb.social/coulomb/audit-core/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: can-you-assist + url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-engine + url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-evidence + url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-work + url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: config-atlas + url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: infotech + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: coordination-engine + url: https://forgejo.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: core-hub + url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: domain-tree + url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: email-connect + url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: evidence-anchor + url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: evidence-binder + url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: evidence-source + url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: feature-control + url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: access-engine + url: https://forgejo.coulomb.social/coulomb/access-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: guide-board + url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: helix-forge + url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: hub-core + url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: human-resources + url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: commerce-canon + url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ihp-railiance-probe + url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: info-tech-canon + url: https://forgejo.coulomb.social/coulomb/info-tech-canon/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: infospace-bench + url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: issue-core + url: https://forgejo.coulomb.social/coulomb/issue-core/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: kaizen-agentic + url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: key-cape + url: https://forgejo.coulomb.social/coulomb/key-cape/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: kontextual-engine + url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: llm-connect + url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-filter + url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-main + url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-quarkdown + url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-tool + url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: net-kingdom + url: https://forgejo.coulomb.social/coulomb/net-kingdom/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: open-cmis-tck + url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: open-reuse + url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ops-bridge + url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ops-hub + url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ops-warden + url: https://forgejo.coulomb.social/coulomb/ops-warden/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: phase-memory + url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-apps + url: https://forgejo.coulomb.social/coulomb/railiance-apps/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-cluster + url: https://forgejo.coulomb.social/coulomb/railiance-cluster/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-enablement + url: https://forgejo.coulomb.social/coulomb/railiance-enablement/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-fabric + url: https://forgejo.coulomb.social/coulomb/railiance-fabric/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-forge + url: https://forgejo.coulomb.social/coulomb/railiance-forge/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-infra + url: https://forgejo.coulomb.social/coulomb/railiance-infra/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: railiance-platform + url: https://forgejo.coulomb.social/coulomb/railiance-platform/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: repo-scoping + url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: repo-seed + url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: reuse-surface + # Include this checkout's entries in local plan-check before publication. + index: registry/indexes/capabilities.yaml + enabled: true + required: true + domain: helix_forge + description: Capability registry for helix_forge +- repo: shard-wiki + url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: state-hub + url: https://forgejo.coulomb.social/coulomb/state-hub/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: tegwick-control + url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: the-custodian + url: https://forgejo.coulomb.social/coulomb/the-custodian/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: user-engine + url: https://forgejo.coulomb.social/coulomb/user-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: vantage-point + url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: vergabe-teilnahme + url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: whynot-control + url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: whynot-design + url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization diff --git a/docs/assessments/netkingdom-2026-10-14/local-sources.yaml b/docs/assessments/netkingdom-2026-10-14/local-sources.yaml new file mode 100644 index 00000000..02a3e229 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/local-sources.yaml @@ -0,0 +1,577 @@ +version: 1 +domain: helix_forge +collision_policy: warn +sources: +- repo: access-engine + index: ../access-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: activity-core + index: ../activity-core/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: agentic-resources + index: ../agentic-resources/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: approval-engine + index: ../approval-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: artifact-store + url: https://forgejo.coulomb.social/coulomb/artifact-store/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: audit-core + index: ../audit-core/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: can-you-assist + url: https://forgejo.coulomb.social/coulomb/can-you-assist/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-engine + url: https://forgejo.coulomb.social/coulomb/citation-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-evidence + url: https://forgejo.coulomb.social/coulomb/citation-evidence/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: citation-work + url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: commerce-canon + url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: config-atlas + url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: infotech + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: coordination-engine + index: ../coordination-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: core-hub + url: https://forgejo.coulomb.social/coulomb/core-hub/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: domain-tree + url: https://forgejo.coulomb.social/coulomb/domain-tree/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: email-connect + url: https://forgejo.coulomb.social/coulomb/email-connect/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: emergent-security + index: ../emergent-security/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: evidence-anchor + url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: evidence-binder + url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: evidence-source + url: https://forgejo.coulomb.social/coulomb/evidence-source/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: feature-control + url: https://forgejo.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: fin-hub + index: ../fin-hub/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: gate-house + index: ../gate-house/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: glas-harness + index: ../glas-harness/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: guide-board + url: https://forgejo.coulomb.social/coulomb/guide-board/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: helix-forge + url: https://forgejo.coulomb.social/coulomb/helix-forge/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: hub-core + url: https://forgejo.coulomb.social/coulomb/hub-core/raw/branch/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: human-resources + url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ihp-railiance-probe + url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: info-tech-canon + index: ../info-tech-canon/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: informed-decision + index: ../informed-decision/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: infospace-bench + url: https://forgejo.coulomb.social/coulomb/infospace-bench/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: issue-core + index: ../issue-core/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: kaizen-agentic + url: https://forgejo.coulomb.social/coulomb/kaizen-agentic/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: key-cape + index: ../key-cape/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: kings-guard + index: ../kings-guard/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: kontextual-engine + url: https://forgejo.coulomb.social/coulomb/kontextual-engine/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: llm-connect + url: https://forgejo.coulomb.social/coulomb/llm-connect/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-filter + url: https://forgejo.coulomb.social/coulomb/markitect-filter/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-main + url: https://forgejo.coulomb.social/coulomb/markitect-main/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-quarkdown + url: https://forgejo.coulomb.social/coulomb/markitect-quarkdown/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: markitect-tool + url: https://forgejo.coulomb.social/coulomb/markitect-tool/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: maturity-engine + index: ../maturity-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: net-kingdom + index: ../net-kingdom/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: open-cmis-tck + url: https://forgejo.coulomb.social/coulomb/open-cmis-tck/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: open-reuse + url: https://forgejo.coulomb.social/coulomb/open-reuse/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ops-bridge + index: ../ops-bridge/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: ops-hub + url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: ops-mason + index: ../ops-mason/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: ops-warden + index: ../ops-warden/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: phase-memory + url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: policy-nexus + index: ../policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rail-knative + index: ../rail-knative/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rail-kubernetes + index: ../rail-kubernetes/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-apps + index: ../railiance-apps/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-bootstrap + index: ../railiance-bootstrap/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-cluster + index: ../railiance-cluster/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-enablement + index: ../railiance-enablement/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-fabric + index: ../railiance-fabric/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-forge + index: ../railiance-forge/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-infra + index: ../railiance-infra/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-master + index: ../railiance-master/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-platform + index: ../railiance-platform/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: railiance-telemetry + index: ../railiance-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-openbao + index: ../rapp-openbao/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-playwright + index: ../rapp-playwright/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-policy-nexus + index: ../rapp-policy-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-postgres + index: ../rapp-postgres/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-sbom-nexus + index: ../rapp-sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-telemetry + index: ../rapp-telemetry/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-tenant-engine + index: ../rapp-tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rapp-user-engine + index: ../rapp-user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: reef-railiance + index: ../reef-railiance/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rein-aharness + index: ../rein-aharness/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: rein-openweights + index: ../rein-openweights/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: repo-manager + index: ../repo-manager/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: repo-scoping + url: https://forgejo.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: repo-seed + url: https://forgejo.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: resource-control + index: ../resource-control/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: reuse-surface + index: ../reuse-surface/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: risk-nexus + index: ../risk-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: role-engine + index: ../role-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: runbook-tutorials + index: ../runbook-tutorials/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: sand-boxer + index: ../sand-boxer/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: sbom-nexus + index: ../sbom-nexus/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: secrets-engine + index: ../secrets-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: security-canon + index: ../security-canon/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: shard-wiki + url: https://forgejo.coulomb.social/coulomb/shard-wiki/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: state-hub + index: ../state-hub/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: tegwick-control + url: https://forgejo.coulomb.social/coulomb/tegwick-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: tenant-engine + index: ../tenant-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: the-custodian + index: ../the-custodian/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: user-engine + index: ../user-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: vantage-point + url: https://forgejo.coulomb.social/coulomb/vantage-point/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: vergabe-teilnahme + url: https://forgejo.coulomb.social/coulomb/vergabe-teilnahme/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: whitehat-security + index: ../whitehat-security/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech +- repo: whynot-control + url: https://forgejo.coulomb.social/coulomb/whynot-control/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: whynot-design + url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml + enabled: true + required: false + domain: helix_forge + cache_ttl_seconds: 86400 + auth_header: Authorization +- repo: zone-engine + index: ../zone-engine/registry/indexes/capabilities.yaml + enabled: true + required: true + domain: infotech diff --git a/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py b/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py new file mode 100644 index 00000000..901cc557 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/prepare_local_federation.py @@ -0,0 +1,17 @@ +from pathlib import Path +import hashlib,json,sys,yaml +sys.path.insert(0,'/home/worsch/reuse-surface') +from reuse_surface.federation import compose_federated_index +OUT=Path(__file__).resolve().parent;ROOT=Path('/home/worsch/reuse-surface') +v=json.loads((OUT/'full-inventory.json').read_text());src=ROOT/'registry/federation/sources.yaml';old=yaml.safe_load(src.read_text()) +sources={s['repo']:s for s in old['sources']} +for n in v['repositories']: + sources[n]={'repo':n,'index':f'../{n}/registry/indexes/capabilities.yaml','enabled':True,'required':True,'domain':'infotech'} +manifest={**old,'sources':sorted(sources.values(),key=lambda s:s['repo'])} +(OUT/'local-sources-before.yaml').write_bytes(src.read_bytes());(OUT/'local-sources.yaml').write_text(yaml.safe_dump(manifest,sort_keys=False)) +federated,warnings=compose_federated_index(manifest,cache_dir=Path('/tmp/netkingdom-reuse-federation-cache')) +counts={r['id']:sum(c['id']==r['id'] for c in federated['capabilities']) for r in v['capabilities']} +receipt={'source_count':len(sources),'reviewed_count':len(counts),'all_exactly_once':all(n==1 for n in counts.values()),'warnings':warnings,'previous_sources_sha256':hashlib.sha256(src.read_bytes()).hexdigest(),'scope':'Workstation local federation. Existing unrelated sources preserved; hosted registration is separate.'} +(OUT/'local-default-federation-receipt.json').write_text(json.dumps(receipt,indent=2)+'\n') +(OUT/'local-default-federated.yaml').write_text(yaml.safe_dump(federated,sort_keys=False)) +print(json.dumps(receipt,indent=2));assert receipt['all_exactly_once'] diff --git a/docs/assessments/netkingdom-2026-10-14/prepare_registry.py b/docs/assessments/netkingdom-2026-10-14/prepare_registry.py new file mode 100644 index 00000000..f38bc66b --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/prepare_registry.py @@ -0,0 +1,122 @@ +"""Prepare exact registry edits for review. Does not mutate owner repositories.""" +from pathlib import Path +import json, hashlib, sys, copy +import yaml +sys.path.insert(0,'/home/worsch/reuse-surface') +from reuse_surface.registry import parse_front_matter,entry_vector +from reuse_surface.cli import _run_validate +BASE=Path('/home/worsch'); OUT=Path(__file__).resolve().parent; STAGE=OUT/'registry-stage' +data=json.loads((OUT/'inventory.json').read_text()); rows=data['capabilities'] +CASES={ +'U01':'Architect composes a security deployment from explicit owner contracts and case types', +'U02':'Human signs in with MFA and manages account or factor recovery', +'U03':'Application combines identity, tenant and resource facts and enforces a bound decision', +'U04':'Protected operation obtains and consumes exact human approval before its side effect', +'U05':'Operator provisions and delivers a scoped workload credential through the approved owner lane', +'U06':'Operator or automation obtains a bounded SSH certificate and maintains private connectivity', +'U07':'Owner inventories, rotates, revokes and detects exposure of credentials', +'U08':'Consumer emits security events and reconciles independently retained evidence', +'U09':'Maintainer observes posture, prioritizes findings, coordinates work and verifies outcomes', +'U10':'Operator recovers identity, custody or data with independently held recovery material', +'U11':'Agent executes an attributable bounded task and supplies supervision evidence', +'U12':'Developer builds and publishes through controlled source, dependency and runner paths', +'U13':'Platform owner deploys and rolls back a workload with explicit substrate and custody bindings', +'U14':'Framework adopter validates and reuses selected contracts, tools and reference compositions', +} +# Adjacencies express interfaces, not a claim that every edge is natively admitted. +NEIGHBORS={ +'net-kingdom':['security-canon','gate-house','key-cape','access-engine','reuse-surface'], +'key-cape':['user-engine','tenant-engine','access-engine'], +'user-engine':['key-cape','tenant-engine','access-engine','audit-core'], +'access-engine':['approval-engine','key-cape','tenant-engine','zone-engine','maturity-engine'], +'approval-engine':['access-engine','key-cape','secrets-engine','audit-core'], +'secrets-engine':['approval-engine','access-engine','railiance-platform','ops-warden'], +'ops-warden':['secrets-engine','access-engine','ops-bridge','ops-mason'], +'ops-mason':['secrets-engine','net-kingdom','railiance-platform'], +'audit-core':['approval-engine','tenant-engine','kings-guard','railiance-telemetry'], +'kings-guard':['maturity-engine','audit-core','risk-nexus','net-kingdom'], +'maturity-engine':['gate-house','access-engine','kings-guard'], +'whitehat-security':['gate-house','audit-core','approval-engine'], +'emergent-security':['net-kingdom','gate-house','glas-harness'], +'informed-decision':['approval-engine','access-engine','state-hub'], +'policy-nexus':['net-kingdom','security-canon','risk-nexus'], +'glas-harness':['sand-boxer','rein-aharness','rein-openweights'], +'agentic-resources':['glas-harness','activity-core','fin-hub'], +'repo-manager':['railiance-forge','sbom-nexus','state-hub'], +'railiance-forge':['repo-manager','railiance-enablement','railiance-apps'], +'railiance-platform':['rapp-openbao','rapp-postgres','key-cape','secrets-engine'], +'railiance-telemetry':['rapp-telemetry','audit-core','kings-guard'], +'rapp-telemetry':['railiance-telemetry','rail-kubernetes','reef-railiance'], +'fin-hub':['resource-control','agentic-resources'], +} +primary={} +for r in rows: primary.setdefault(r['repo'],r['id']) +changes=[]; validation=[] +def stage(repo,rel,content): + dst=STAGE/repo/rel;dst.parent.mkdir(parents=True,exist_ok=True); dst.write_text(content) + src=BASE/repo/rel + if src.exists(): + baseline=OUT/'registry-before'/repo/rel;baseline.parent.mkdir(parents=True,exist_ok=True);baseline.write_bytes(src.read_bytes()) + if not src.exists() or src.read_bytes()!=dst.read_bytes(): + changes.append({'repo':repo,'path':rel,'before_sha256':hashlib.sha256(src.read_bytes()).hexdigest() if src.exists() else None,'after_sha256':hashlib.sha256(dst.read_bytes()).hexdigest(),'operation':'write'}) +for repo,rv in data['repositories'].items(): + root=BASE/repo; rs=[r for r in rows if r['repo']==repo] + ix=copy.deepcopy(rv['existing_index'] or {'version':1,'domain':'infotech','capabilities':[]}) + marker=root/'registry/NO_CAPABILITIES.md' + if marker.exists(): changes.append({'repo':repo,'path':'registry/NO_CAPABILITIES.md','before_sha256':hashlib.sha256(marker.read_bytes()).hexdigest(),'after_sha256':None,'operation':'delete'}) + ix['updated']='2026-10-14';ix.setdefault('version',1);ix.setdefault('domain','infotech') + # Include unchanged sibling entries in staged validation without rewriting them. + for p in (root/'registry/capabilities').glob('*.md'): + if repo=='secrets-engine' and parse_front_matter(p).get('id')=='capability.infotech.repo-template': + changes.append({'repo':repo,'path':str(p.relative_to(root)),'before_sha256':hashlib.sha256(p.read_bytes()).hexdigest(),'after_sha256':None,'operation':'delete'}) + ix['capabilities']=[c for c in ix['capabilities'] if c['id']!='capability.infotech.repo-template'];continue + dst=STAGE/repo/p.relative_to(root);dst.parent.mkdir(parents=True,exist_ok=True);dst.write_bytes(p.read_bytes()) + for r in rs: + rel=r['existing_entry_path'] or f"registry/capabilities/{r['id']}.md" + try: old=parse_front_matter(root/rel) if (root/rel).exists() else {} + except (ValueError,yaml.YAMLError): + try: old=yaml.safe_load((root/rel).read_text()[4:]) + except yaml.YAMLError: old={} + valid_old='maturity' in old and 'external_evidence' in old + fm=copy.deepcopy(old) if valid_old else {'id':r['id'],'owner':repo,'status':'draft','domain':'infotech','maturity':{'discovery':{'current':'D3','target':'D5','confidence':'medium'},'availability':{'current':r['availability'],'target':r['availability'],'confidence':'medium'}},'external_evidence':{'completeness':{'level':'C1','confidence':'low','basis':'Source artifacts establish a bounded capability; no independent consumer-completeness assessment in this review.'},'reliability':{'level':'R0','confidence':'low','basis':'No longitudinal consumer reliability measurement established by this review.'}}} + fm.pop('consumption_modes',None) + fm.update(name=r['name'],summary=r['surface']+'.',owner=repo) + fm['tags']=list(dict.fromkeys(fm.get('tags',[])+['security','netkingdom','framework-reuse'])) + if old.get('external_evidence'): + for key in ['completeness','reliability']: + if key in old['external_evidence']: fm['external_evidence'][key]=old['external_evidence'][key] + fm['external_evidence'].setdefault('reliability',{'level':'R0','confidence':'low','basis':'No longitudinal reliability assessment available.'}) + previous=entry_vector(fm) + fm['maturity']['availability']['current']=r['availability'] + if int(fm['maturity']['availability'].get('target',r['availability'])[1:]) + Provide inspectable authorization decisions between verified identity and + protected resources using policy-as-code. + includes: + - policy evaluation + - authorization registry + - decision explainability + excludes: + - identity issuance + - authentication protocols + use_cases: [] + +availability: + current_level: A2 + target_level: A5 + current_artifacts: + - flex-auth/ + consumption_modes: + - source module + +relations: + depends_on: + - capability.identity.subject-resolution + related_to: + - capability.feature-control.evaluate + +consumer_guidance: + recommended_for: + - planning authorization layer between identity and resources + not_recommended_for: + - feature visibility toggles without policy intent + known_limitations: + - maturity evidence is registry-external today +--- + +# Authorization Policy Evaluation + +Policy evaluation from flex-auth sits between identity resolution and protected +systems. \ No newline at end of file diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml new file mode 100644 index 00000000..6784c9b4 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/registry-before/access-engine/registry/indexes/capabilities.yaml @@ -0,0 +1,19 @@ +version: 1 +updated: '2026-06-16' +domain: helix_forge +capabilities: +- id: capability.authorization.policy-evaluate + name: Authorization Policy Evaluation + summary: Evaluate access decisions from policy-as-code rules for subjects, resources, + and actions. + vector: D4 / A2 / C2 / R1 + domain: helix_forge + status: draft + owner: flex-auth + path: registry/capabilities/capability.authorization.policy-evaluate.md + tags: + - authorization + - policy + - flex-auth + consumption_modes: + - source module diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md new file mode 100644 index 00000000..fd0037a0 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/capabilities/capability.activity.event-coordinate.md @@ -0,0 +1,77 @@ +--- +id: capability.activity.event-coordinate +name: Organizational Event Coordination +summary: Coordinate structured responses to cross-domain events through activity workflows and automation. +owner: activity-core +status: draft +domain: helix_forge +tags: [activity, coordination, automation] + +maturity: + discovery: + current: D3 + target: D5 + confidence: medium + rationale: activity-core INTENT defines org-wide event response boundary. + availability: + current: A1 + target: A4 + confidence: low + rationale: Conceptual workflows exist; consumable API surface still emerging. + +external_evidence: + completeness: + level: C1 + name: Fragmentary + confidence: low + basis: scope_vs_intent_and_consumer_expectations + satisfied_expectations: + - problem and boundary documented in INTENT + broken_expectations: + - no registry-native automation artifacts indexed yet + out_of_scope_expectations: + - owning domain-specific business logic + reliability: + level: R0 + confidence: low + basis: consumer_quality_signals + known_reliability_risks: [] + +discovery: + intent: > + Give the organization a structural home for responding to events across repos + and domains in an auditable, automation-ready way. + includes: + - event-triggered coordination + - cross-domain maintenance workflows + excludes: + - single-repo cron replacements only + use_cases: [] + +availability: + current_level: A1 + target_level: A4 + current_artifacts: + - activity-core/INTENT.md + consumption_modes: + - informational + +relations: + depends_on: [] + related_to: + - capability.statehub.workstream-coordinate + - capability.audit.event-retain + +consumer_guidance: + recommended_for: + - planning org-wide event response patterns + not_recommended_for: + - assuming production automation is available + known_limitations: + - early discovery stage +--- + +# Organizational Event Coordination + +activity-core coordinates how the org responds to events—not the domain logic +inside each repo. \ No newline at end of file diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml new file mode 100644 index 00000000..ded089e3 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/registry-before/activity-core/registry/indexes/capabilities.yaml @@ -0,0 +1,19 @@ +version: 1 +updated: '2026-06-16' +domain: helix_forge +capabilities: +- id: capability.activity.event-coordinate + name: Organizational Event Coordination + summary: Coordinate structured responses to cross-domain events through activity + workflows and automation. + vector: D3 / A1 / C1 / R0 + domain: helix_forge + status: draft + owner: activity-core + path: registry/capabilities/capability.activity.event-coordinate.md + tags: + - activity + - coordination + - automation + consumption_modes: + - informational diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md new file mode 100644 index 00000000..60aa0019 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/NO_CAPABILITIES.md @@ -0,0 +1,15 @@ +--- +repo: agentic-resources +reason: > + INTENT/SCOPE are aspirational HR-for-agents vision prose; no src/, no package manifest — vision-stage only, nothing implemented to reuse. +reviewed: "2026-07-06" +reviewed_by: claude-code +revisit: > + Revisit once an implementation exists (src/ or package manifest lands). +--- + +# No reusable capability + +This repo was reviewed for the `reuse-surface` capability registry +(REUSE-WP-0017 coverage campaign) and has no capability to register at this +time. See the `reason` field above. diff --git a/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml new file mode 100644 index 00000000..f944e472 --- /dev/null +++ b/docs/assessments/netkingdom-2026-10-14/registry-before/agentic-resources/registry/indexes/capabilities.yaml @@ -0,0 +1,4 @@ +version: 1 +updated: '2026-06-16' +domain: helix_forge +capabilities: []