# Institutional Capability Lineage Architecture (ICLA)
# Reference Trace - governed capability formation
#
# Copyright (c) 2026 Mariano Garralda-Barrio
# Licensed under CC BY 4.0.

document_type: capability-proposal
format_version: "icla-artifact/0.1-draft"
specification_version:
  icla-spec: "0.1.0"
id: PROP-AUTH-EVOL-01
artifact_status: reference
normative: false
schema_ref: ../../schemas/capability-proposal.schema.yaml
status: submitted

generated_from:
  recurrence_review: REVIEW-AUTH-EVOL-01
  supporting_records:
    - record_ref: ASM-OAUTH-042
      record_type: contextual-assembly
      repository_ref: companion-reference-traces
      record_locator: ../oauth-042/assembly.yaml
      record_version: 1
      provenance_refs: [INT-OAUTH-042, RES-OAUTH-042, REG-SNAP-042]
    - record_ref: EVD-OAUTH-042
      record_type: execution-evidence-bundle
      repository_ref: companion-reference-traces
      record_locator: ../oauth-042/evidence-bundle.yaml
      record_version: 1
      provenance_refs: [ASM-OAUTH-042, EXE-OAUTH-042, CEE-OAUTH-042]
    - record_ref: ASM-AUTH-ROTATION-017
      record_type: contextual-assembly
      repository_ref: ORG-MEM-AUTH-CHANGE
      record_locator: assemblies/ASM-AUTH-ROTATION-017
      record_version: 1
      provenance_refs: [INT-AUTH-ROTATION-017, REG-SNAP-AUTH-ROTATION-017]
    - record_ref: EVD-AUTH-ROTATION-017
      record_type: execution-evidence-bundle
      repository_ref: ORG-MEM-AUTH-CHANGE
      record_locator: evidence/EVD-AUTH-ROTATION-017
      record_version: 1
      provenance_refs: [ASM-AUTH-ROTATION-017, EXE-AUTH-ROTATION-017]
    - record_ref: ASM-AUTH-PROVIDER-023
      record_type: contextual-assembly
      repository_ref: ORG-MEM-AUTH-CHANGE
      record_locator: assemblies/ASM-AUTH-PROVIDER-023
      record_version: 1
      provenance_refs: [INT-AUTH-PROVIDER-023, REG-SNAP-AUTH-PROVIDER-023]
    - record_ref: EVD-AUTH-PROVIDER-023
      record_type: execution-evidence-bundle
      repository_ref: ORG-MEM-AUTH-CHANGE
      record_locator: evidence/EVD-AUTH-PROVIDER-023
      record_version: 1
      provenance_refs: [ASM-AUTH-PROVIDER-023, EXE-AUTH-PROVIDER-023]

proposed_responsibility:
  name: Authentication Protocol Evolution
  outcome: Govern recurrent cross-capability authentication protocol changes
  domain: identity-and-api-governance

supporting_record_refs:
  - ASM-OAUTH-042
  - EVD-OAUTH-042
  - ASM-AUTH-ROTATION-017
  - EVD-AUTH-ROTATION-017
  - ASM-AUTH-PROVIDER-023
  - EVD-AUTH-PROVIDER-023

recurrence_assessment:
  basis: observed-recurrence
  justified_expectation: true
  current_trace_sufficient: true
  declared_horizon: Three independent authentication-change intents over twelve months
  rationale: Repeated responsibility, assembly rules, and comparable outcomes justify recurrence over the declared horizon

stable_assembly_rules:
  - Compose identity, API evolution, and validation capabilities
  - Preserve compatibility and security metric bindings across intents

value_assessment:
  result: passed
  basis: Reduced repeated assembly design and cross-capability coordination risk

comparable_outcome_refs:
  - OUT-AUTH-EVOL-COMPATIBILITY
  - OUT-AUTH-EVOL-ASSURANCE

candidate_owner: identity-and-api-governance-review

overlap_analysis:
  - capability_refs: [CAP-IAM, CAP-API, CAP-VERIFY]
    result: distinct-cross-capability-responsibility

proposed_relations:
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-IAM
    rationale: Authentication protocol evolution depends on governed identity policy
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-API
    rationale: Authentication protocol evolution depends on coordinated API evolution
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-VERIFY
    rationale: Authentication protocol evolution depends on governed security validation

proposal_scoped_ckc_draft_ref: PROP-AUTH-EVOL-01-CKC-DRAFT