apiVersion: railiance.fabric/v1alpha1
kind: CapabilityDeclaration
metadata:
  id: railiance-platform.openbao.runtime-secrets
  name: Runtime secrets
  owner: railiance-platform
  repo: railiance-platform
  domain: railiance
  source_links:
    - label: Runtime secrets workplan
      path: workplans/RAIL-PLAT-WP-openbao-runtime-secrets.md
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  description: Stores and serves workload runtime secrets through OpenBao.
  capability_type: runtime-secrets
  service_id: railiance-platform.openbao
  interface_ids:
    - railiance-platform.openbao.kv-v2
  criticality: critical
  data_classification: secret
  compatibility:
    version: v1
    compatible_with:
      - railiance-platform.openbao.kv-v2
    notes: Initial runtime secrets capability for Railiance workloads.