Add small SaaS profile proof

infospace/reports/small-saas-profile-proof.md

@@ -0,0 +1,44 @@
+# Small SaaS Profile Proof
+
+**Workplan:** ITC-WP-0004
+**Profile:** `small-saas`
+**Status:** executable proof
+
+## Purpose
+
+The `small-saas` profile demonstrates that the canon can guide a practical
+service shape before the larger CARING benchmark exists. It connects service
+ownership, users, tenants, access, data, runtime, deployment, governance,
+observability, and task tracking.
+
+## Validation Surface
+
+```bash
+PYTHONPATH=src python3 -m info_tech_canon profile inspect small-saas
+PYTHONPATH=src python3 -m info_tech_canon profile validate small-saas
+PYTHONPATH=src python3 -m info_tech_canon profile graph small-saas
+```
+
+## Graph Slice
+
+The profile graph includes the profile artifact, the small SaaS example
+artifacts, and their direct canon anchors.
+
+```mermaid
+graph TD
+  profile_small_saas["profile/small-saas"] -->|conforms_to| core["kernel/itc-core"]
+  service["small-saas/service/billing-portal"] -->|part_of| system["small-saas/system/billing-system"]
+  service -->|owned_by| team["small-saas/team/platform"]
+  service -->|governed_by| policy["small-saas/policy/tenant-isolation"]
+  service -->|protected_by| control["small-saas/control/namespace-per-tenant"]
+  deployment["small-saas/deployment/production"] -->|separates| acme["small-saas/tenant/acme"]
+  deployment -->|separates| globex["small-saas/tenant/globex"]
+  user["small-saas/user/ada-admin"] -->|has_access_under| policy
+  policy -->|evidenced_by| evidence["small-saas/evidence/access-review-2026-05"]
+  incident["small-saas/incident/cross-tenant-access-attempt"] -->|constrained_by| control
+```
+
+## Result
+
+The proof is suitable as a baseline for the upcoming `user-engine` evaluation
+pack and for `railiance-fabric` entity/edge capture comparisons.