# Institutional Capability Lineage Architecture (ICLA) # Reference Trace # # This artifact is part of the ICLA Reference Specification. # It is a non-normative reference example and does not represent # operational or production data. # # Copyright (c) 2026 Mariano Garralda-Barrio # # Licensed under CC BY 4.0. document_type: institutional-capability-registry-snapshot format_version: "icla-artifact/0.1-draft" specification_version: icla-spec: "0.1.0" id: REG-SNAP-042 artifact_status: reference normative: false schema_ref: ../../schemas/capability-registry.schema.yaml description: >- Registry snapshot used to resolve INT-OAUTH-042. Capability identifiers, active CKC versions, and resolution outcomes match the worked example in the paper. Owners and source-binding identifiers are illustrative. generated_from: paper_trace: oauth-042 architectural_object: Institutional Capability Registry registry: logical_registry_id: ICR-EXAMPLE-001 snapshot_status: immutable capability_count: 8 active_pointer_policy: approved-activation-only capabilities: - id: CAP-ARCH name: Architecture Governance outcome: Approved cross-platform architecture decisions owner: architecture-review-board domain: enterprise-architecture lifecycle: active risk: high maturity: governed policy_refs: [POL-ARCH-DISCOVERY-v1] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-ARCH version: 5 - id: CAP-IAM name: Identity and Access Architecture outcome: Compliant identity and authorization architecture owner: identity-governance domain: identity-and-access-management lifecycle: active risk: high maturity: governed policy_refs: [POL-IAM-DISCOVERY-v8] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-IAM version: 8 activation_record: ACT-IAM-008 previous_version: 7 - id: CAP-API name: API Evolution outcome: Compatible and governed API evolution owner: api-governance domain: platform-api lifecycle: active risk: high maturity: governed policy_refs: [POL-API-DISCOVERY-v6] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-API version: 6 - id: CAP-CHANGE name: Governed Code Change outcome: Traceable implementation of approved changes owner: platform-engineering domain: software-delivery lifecycle: active risk: high maturity: governed policy_refs: [POL-CHANGE-DISCOVERY-v11] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-CHANGE version: 11 - id: CAP-VERIFY name: Security and Compatibility Validation outcome: Accepted security and compatibility evidence owner: security-assurance domain: verification lifecycle: active risk: critical maturity: governed policy_refs: [POL-VERIFY-DISCOVERY-v9] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-VERIFY version: 9 - id: CAP-RELEASE name: Controlled Release outcome: Auditable and reversible production release owner: release-governance domain: release-management lifecycle: active risk: critical maturity: governed policy_refs: [POL-RELEASE-DISCOVERY-v4] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-RELEASE version: 4 - id: CAP-DATA name: Data Governance outcome: Compliant data use and retention owner: data-governance domain: data-management lifecycle: active risk: high maturity: governed policy_refs: [POL-DATA-DISCOVERY-v7] conditions: {consumer_authorization: required, assurance: high} active_ckc: id: CKC-DATA version: 7 - id: CAP-OBS name: Operational Observability outcome: Sufficient operational telemetry and alerting owner: observability-platform domain: platform-operations lifecycle: active risk: medium maturity: governed policy_refs: [POL-OBS-DISCOVERY-v5] conditions: {consumer_authorization: required, assurance: standard} active_ckc: id: CKC-OBS version: 5 relations: - type: depends_on from: CAP-IAM to: CAP-ARCH mandatory_for_resolution: true - type: depends_on from: CAP-CHANGE to: CAP-RELEASE mandatory_for_resolution: true - type: composes_with from: CAP-IAM to: CAP-API - type: composes_with from: CAP-CHANGE to: CAP-VERIFY - type: shares_knowledge from: CAP-IAM to: CAP-VERIFY - type: shares_knowledge from: CAP-API to: CAP-VERIFY source_bindings: - id: BIND-IDENTITY-POLICY source: SRC-IDENTITY-POLICY version: 8 previous_version: 7 authority: identity-governance capability_refs: [CAP-IAM] change_event_ref: CHG-IDENTITY-POLICY-008 authorized_interpretation: OAuth 2.1 identity-policy interpretation approved for future use temporal_validity: status: active supersedes: SRC-IDENTITY-POLICY-v7 knowledge_roles: [semantic, procedural] - id: BIND-CLIENT-INVENTORY source: SRC-CLIENT-INVENTORY version: 42 authority: api-governance capability_refs: [CAP-API] temporal_validity: status: active supersedes: SRC-CLIENT-INVENTORY-v41 knowledge_roles: [semantic, episodic] - id: BIND-RELEASE-POLICY source: SRC-RELEASE-POLICY version: 4 authority: release-governance capability_refs: [CAP-RELEASE] temporal_validity: status: active supersedes: SRC-RELEASE-POLICY-v3 knowledge_roles: [semantic, procedural] pre_resolution_history: change_event: id: CHG-IDENTITY-POLICY-008 source_binding_ref: BIND-IDENTITY-POLICY source_ref: SRC-IDENTITY-POLICY from_version: 7 to_version: 8 change_dimensions: [authorized-interpretation, temporal-validity] effect: The authorized interpretation and temporal applicability of the identity policy changed impact_record: id: IMP-IAM-008 change_event_ref: CHG-IDENTITY-POLICY-008 assessment_mode: continuous-event-driven affected_bindings: [BIND-IDENTITY-POLICY] affected_capabilities: - CAP-IAM - CAP-ARCH - CAP-API - CAP-VERIFY - CAP-CHANGE - CAP-RELEASE affected_ckcs: - CKC-IAM-v7 - CKC-ARCH-v5 - CKC-API-v6 - CKC-VERIFY-v9 - CKC-CHANGE-v11 - CKC-RELEASE-v4 traversed_relations: - {type: depends_on, from: CAP-IAM, to: CAP-ARCH} - {type: composes_with, from: CAP-IAM, to: CAP-API} - {type: shares_knowledge, from: CAP-IAM, to: CAP-VERIFY} - {type: shares_knowledge, from: CAP-API, to: CAP-VERIFY} - {type: composes_with, from: CAP-CHANGE, to: CAP-VERIFY} - {type: depends_on, from: CAP-CHANGE, to: CAP-RELEASE} review_required: true changed_capability: CAP-IAM reviewed_unchanged_capabilities: - CAP-ARCH - CAP-API - CAP-VERIFY - CAP-CHANGE - CAP-RELEASE governance_decision: id: DEC-IAM-008 status: approved authority: identity-governance-review change_event_ref: CHG-IDENTITY-POLICY-008 impact_record_ref: IMP-IAM-008 successor_delta: id: DELTA-IAM-007-008 predecessor_ref: CKC-IAM-v7 successor_ref: CKC-IAM-v8 changed_commitments: - area: knowledge_scope operation: revise subject: BIND-IDENTITY-POLICY - area: governance operation: revise subject: authorized-interpretation-and-temporal-applicability authorization_decision_ref: DEC-IAM-008 successor_append: id: APPEND-IAM-008 capability: CAP-IAM predecessor_ref: CKC-IAM-v7 successor_ref: CKC-IAM-v8 delta_ref: DELTA-IAM-007-008 authorization_decision_ref: DEC-IAM-008 status: inactive-successor activation: id: ACT-IAM-008 capability: CAP-IAM ckc: CKC-IAM version: 8 successor_append_ref: APPEND-IAM-008 active_pointer_transition: from: CKC-IAM-v7 to: CKC-IAM-v8 applies_to: future-resolutions-only historical_immutability: retained_assemblies: - assembly_ref: ASM-IAM-HIST-007 remains_linked_to: CKC-IAM-v7 retroactive_mutation: false