From b5b5a2537074d54b6443a589de85dddbae84f2eb Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 6 Jul 2026 19:50:54 +0200 Subject: [PATCH] Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 3) Honest first-pass maturity vector grounded in README/docs/tests present in this repo; no invented evidence. Flagged for human review before publish. See reuse-surface history/2026-07-06-coverage-classification.md. Co-Authored-By: Claude Sonnet 5 --- .../capability.identity.user-engine.md | 123 ++++++++++++++++++ registry/indexes/capabilities.yaml | 19 ++- 2 files changed, 140 insertions(+), 2 deletions(-) create mode 100644 registry/capabilities/capability.identity.user-engine.md diff --git a/registry/capabilities/capability.identity.user-engine.md b/registry/capabilities/capability.identity.user-engine.md new file mode 100644 index 0000000..4cc90c9 --- /dev/null +++ b/registry/capabilities/capability.identity.user-engine.md @@ -0,0 +1,123 @@ +--- +id: capability.identity.user-engine +name: Headless Multi-Tenant User Engine +summary: Headless, multi-application, multi-tenant user management engine covering registration, identity/factor + models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys. +owner: user-engine +status: draft +domain: communication +tags: +- identity +- user-management +- multi-tenant +maturity: + discovery: + current: D4 + target: D5 + confidence: high + rationale: 'Unusually large documentation set for its size: docs/development.md, configuration.md, + contracts.md, canon-mapping.md, canon-interface-card.yaml, family-dataspace-onboarding.md, registration-identity-and-factor-model.md, + prepared-accounts-and-entitlement-claims.md, hats-realms-services-assets-access-profiles.md, onboarding-journeys-and-welcome-protocols.md, + and more — scope and contracts are thoroughly documented.' + availability: + current: A1 + target: A3 + confidence: medium + rationale: Python package with `make test`; no packaged distribution or hosted service confirmed in + this sweep. +external_evidence: + completeness: + level: C2 + confidence: low + basis: scope_vs_intent_and_consumer_expectations + satisfied_expectations: + - registration/identity/factor model documented + - entitlement claims and access-profile model (hats/realms/services/assets) documented + - canon mapping and interface card present + broken_expectations: [] + out_of_scope_expectations: [] + reliability: + level: R0 + confidence: low + basis: consumer_quality_signals + known_reliability_risks: + - breadth of documented scope not independently verified against implementation completeness in this + sweep +discovery: + intent: Provide a headless, multi-application, multi-tenant user-management engine covering the full + registration-to-entitlement lifecycle, reusable across NetKingdom-family applications. + includes: + - multi-tenant registration and identity/factor model + - entitlement claims and hats/realms/services/assets access profiles + - onboarding journeys and welcome protocols + excludes: + - IAM/OIDC protocol implementation itself (see key-cape, net-kingdom) + assumptions: [] + use_cases: [] + research_memos: [] +availability: + current_level: A1 + target_level: A3 + current_artifacts: + - Python package (`user-engine`) + target_artifacts: [] + consumption_modes: + - library import +relations: + depends_on: [] + supports: [] + related_to: [] +evidence: + documentation: + - docs/contracts.md + - docs/registration-identity-and-factor-model.md + - docs/canon-mapping.md + tests: + - tests/ + consumer_feedback: [] + bug_reports: [] + incidents: [] +consumer_guidance: + recommended_for: + - multi-tenant applications needing a headless user/identity/entitlement engine + not_recommended_for: + - needs for the IAM/OIDC protocol layer itself (see key-cape/net-kingdom) + known_limitations: + - large documented scope; implementation completeness not independently verified in this sweep +promotion_history: [] +--- + +# Headless Multi-Tenant User Engine + +## Overview + +`user-engine` is a headless, multi-application, multi-tenant user-management engine: registration, identity/factor models, prepared accounts and entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys, documented in unusual depth for its size. + +## Assessment notes + +### Discovery + +Unusually large documentation set for its size: docs/development.md, configuration.md, contracts.md, canon-mapping.md, canon-interface-card.yaml, family-dataspace-onboarding.md, registration-identity-and-factor-model.md, prepared-accounts-and-entitlement-claims.md, hats-realms-services-assets-access-profiles.md, onboarding-journeys-and-welcome-protocols.md, and more — scope and contracts are thoroughly documented. + +### Availability + +Python package with `make test`; no packaged distribution or hosted service confirmed in this sweep. + +### Completeness + +First-pass honest assessment from the REUSE-WP-0017 coverage campaign +(reuse-surface). No external consumer feedback exists yet; levels reflect +scope-vs-intent documentation quality, not internal code quality. + +### Reliability + +No production consumer telemetry exists yet; reliability level is +intentionally conservative pending REUSE-WP-0019 reuse-telemetry evidence. + +## Promotion checklist + +- [x] ID follows `capability..` pattern +- [x] Maturity enums match `specs/CapabilityMaturityStandard.md` +- [x] `external_evidence` is populated separately from `maturity` +- [ ] Relations reference valid capability IDs (none yet) +- [x] Index entry added in `registry/indexes/capabilities.yaml` diff --git a/registry/indexes/capabilities.yaml b/registry/indexes/capabilities.yaml index f944e47..e0cb8e2 100644 --- a/registry/indexes/capabilities.yaml +++ b/registry/indexes/capabilities.yaml @@ -1,4 +1,19 @@ version: 1 -updated: '2026-06-16' +updated: '2026-07-06' domain: helix_forge -capabilities: [] +capabilities: +- id: capability.identity.user-engine + name: Headless Multi-Tenant User Engine + summary: Headless, multi-application, multi-tenant user management engine covering registration, identity/factor + models, entitlement claims, hats/realms/services/assets access profiles, and onboarding journeys. + vector: D4 / A1 / C2 / R0 + domain: communication + status: draft + owner: user-engine + path: registry/capabilities/capability.identity.user-engine.md + tags: + - identity + - user-management + - multi-tenant + consumption_modes: + - library import