id: markitect-tool
name: Markitect Tool
description: Markitect protected-system namespace for flex-auth.
caring_profiles:
  - caring-0.4.0-rc2
actions:
  - name: read
    capabilities:
      - View
    planes:
      - Data
    exposure_modes:
      - Metadata
      - Masked
      - Plaintext
  - name: query
    capabilities:
      - ViewCollection
      - Observe
    planes:
      - Data
    exposure_modes:
      - Metadata
      - Aggregated
      - Masked
  - name: search
    capabilities:
      - ViewCollection
      - Observe
    planes:
      - Data
    exposure_modes:
      - Metadata
      - Aggregated
      - Masked
  - name: package
    capabilities:
      - Create
      - Bind
      - ViewCollection
    planes:
      - Intent
      - Data
    exposure_modes:
      - Metadata
      - Masked
  - name: activate_context
    capabilities:
      - Use
      - Execute
    planes:
      - Intent
      - Policy
    exposure_modes:
      - Metadata
      - Masked
  - name: export
    capabilities:
      - Export
    planes:
      - Data
      - Audit
    exposure_modes:
      - Exportable
      - Plaintext
  - name: workflow_run
    capabilities:
      - Execute
      - Operate
    planes:
      - Execution
      - Data
      - Audit
    exposure_modes:
      - Metadata
      - Masked
      - Plaintext
  - name: admin
    capabilities:
      - Configure
      - Grant
      - Revoke
      - Audit
    planes:
      - Configuration
      - Identity
      - Policy
      - Audit
    exposure_modes:
      - Metadata
      - Plaintext
resource_types:
  - name: knowledge_base
    scope_level: Workspace
    planes:
      - Intent
      - Data
  - name: repository
    parent_types:
      - knowledge_base
    scope_level: Project
    planes:
      - Build
      - Data
  - name: document
    parent_types:
      - repository
      - knowledge_base
    scope_level: Resource
    planes:
      - Data
  - name: section
    parent_types:
      - document
    scope_level: Subresource
    planes:
      - Data
  - name: span
    parent_types:
      - section
      - document
    scope_level: Field
    planes:
      - Data
  - name: context_package
    parent_types:
      - knowledge_base
      - repository
      - document
    scope_level: Dataset
    planes:
      - Intent
      - Data
      - Policy
  - name: workflow_artifact
    parent_types:
      - context_package
      - document
    scope_level: Process
    planes:
      - Execution
      - Data
      - Audit
  - name: export
    parent_types:
      - workflow_artifact
      - context_package
      - document
    scope_level: Record
    planes:
      - Data
      - Audit
metadata:
  source: examples/markitect/protected_system_manifest.yaml
  namespace_doc: docs/markitect-resource-namespace.md