# Institutional Capability Lineage Architecture (ICLA)
# Reference Trace
#
# This artifact is part of the ICLA Reference Specification.
# It is a non-normative reference example and does not represent
# operational or production data.
#
# Copyright (c) 2026 Mariano Garralda-Barrio
#
# Licensed under CC BY 4.0.

document_type: capability-proposal
format_version: "icla-artifact/0.1-draft"
specification_version:
  icla-spec: "0.1.0"
id: PROP-AUTH-EVOL-01
artifact_status: reference
normative: false
schema_ref: ../../schemas/capability-proposal.schema.yaml
status: candidate

generated_from:
  assembly: ASM-OAUTH-042
  evidence: EVD-OAUTH-042
  supporting_records:
    - record_ref: ASM-OAUTH-042
      record_type: contextual-assembly
      repository_ref: companion-reference-traces
      record_locator: ./assembly.yaml
      record_version: 1
      provenance_refs: [INT-OAUTH-042, RES-OAUTH-042, REG-SNAP-042]
    - record_ref: EVD-OAUTH-042
      record_type: execution-evidence-bundle
      repository_ref: companion-reference-traces
      record_locator: ./evidence-bundle.yaml
      record_version: 1
      provenance_refs: [ASM-OAUTH-042, EXE-OAUTH-042, CEE-OAUTH-042]

proposed_responsibility:
  name: Authentication Protocol Evolution
  outcome: Govern recurrent cross-capability authentication protocol changes
  domain: identity-and-api-governance

supporting_record_refs:
  - ASM-OAUTH-042
  - EVD-OAUTH-042

recurrence_assessment:
  basis: observed-recurrence
  justified_expectation: false
  current_trace_sufficient: false
  declared_horizon: Multiple independent authentication-change intents
  rationale: One execution does not yet justify recurrence over the declared horizon
  required_future_execution_types:
    - token-rotation
    - provider-replacement
    - scope-redesign
    - client-migration
    - protocol-upgrade

stable_assembly_rules:
  - Compose CAP-IAM, CAP-API, and CAP-VERIFY for authentication evolution
  - Preserve client-compatibility and assurance metric bindings

value_assessment:
  basis: Comparable governed outcomes across recurrent authentication changes
  expected_value: Reduce repeated assembly design and compatibility risk
  authority: institutional-governance-review

comparable_outcome_refs:
  - OUT-AUTH-EVOL-COMPATIBILITY
  - OUT-AUTH-EVOL-ASSURANCE

candidate_owner: identity-and-api-governance-review

overlap_analysis:
  - Review overlap with CAP-IAM, CAP-API, and CAP-VERIFY

proposed_relations:
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-IAM
    rationale: Authentication protocol evolution depends on governed identity policy
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-API
    rationale: Authentication protocol evolution depends on coordinated API evolution
  - type: depends_on
    direction: outgoing
    other_capability_ref: CAP-VERIFY
    rationale: Authentication protocol evolution depends on governed security validation

proposal_scoped_ckc_draft_ref: PROP-AUTH-EVOL-01-CKC-DRAFT