{
  "schema": "unitiqx.orbit.enterprise-capabilities.v1",
  "generated_utc": "2026-10-11T08:44:36.780457+00:00",
  "meaning": "Distinguish actual available components from commercial-grade future work",
  "count": 14,
  "capabilities": [
    {
      "id": "identity",
      "name": "Identity, authentication and lifecycle",
      "currently_verified": "Existing private Workbench owner login only",
      "required_for_enterprise": "General public user registration, passkeys, recovery, MFA and SSO require design/security validation",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "tenancy",
      "name": "Organizations, roles and isolation",
      "currently_verified": "No production multi-tenant identity deployed",
      "required_for_enterprise": "Tenant IDs, memberships, workspace roles, data isolation and cross-tenant negative tests",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "data",
      "name": "State and migrations",
      "currently_verified": "SQLite durable queues used by fixed services",
      "required_for_enterprise": "Versioned per-product schema, tenancy boundaries, migration/rollback proof",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "apis",
      "name": "Public and private API contracts",
      "currently_verified": "ORBIT bounded fixed-recipe JSON queue, public catalog",
      "required_for_enterprise": "Typed OpenAPI/SDK generation, idempotency, pagination, webhook signatures",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "jobs",
      "name": "Durable queues and parallel runners",
      "currently_verified": "ORBIT 3 worker slots + 1 inference lane, Sovereign and Factory separate",
      "required_for_enterprise": "Resource-scoped workload scheduler with priorities, budgets and fair queue admission",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "providers",
      "name": "Inference abstraction",
      "currently_verified": "Multiple local Ollama models; official commercial vendors unconnected",
      "required_for_enterprise": "Authorized adapters, vendor-specific reasoning mode, cost/quota evidence",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "installer",
      "name": "Install and distribution",
      "currently_verified": "Browser-accessible static public apps; optional PWA shell in progress",
      "required_for_enterprise": "Signed native MSI/DMG/DEB/Flatpak app installers need real build/verification workers",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "payments",
      "name": "Commerce and entitlements",
      "currently_verified": "No real-money checkout integration provided",
      "required_for_enterprise": "Approved payment processor, webhook verification, legal taxes/refunds, PCI boundaries",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "observability",
      "name": "Metrics and evidence",
      "currently_verified": "Sanitized public status, internal health/timers, release hashes",
      "required_for_enterprise": "Structured traces, SLOs, alerts, incident drills, independent monitoring",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "security",
      "name": "Privacy and compliance",
      "currently_verified": "Private credential separation, static allowlists, bounded worker requests",
      "required_for_enterprise": "Independent pentest, threat model, dependency scanning, retention and compliance certifications",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "release",
      "name": "Packaging, approvals, rollback",
      "currently_verified": "Factory candidates gated by owner approval; immutable private receipts",
      "required_for_enterprise": "Canary ring, attested artifacts, signed packages, measured rollback drills",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "documentation",
      "name": "Docs and public readiness",
      "currently_verified": "UNITIQX Universe, handoff, machine-readable rules",
      "required_for_enterprise": "Versioned feature parity maps, API specs, runbooks, localization, accessibility reviews",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "support",
      "name": "Customer assistance and SLA",
      "currently_verified": "Public guides and support proposals",
      "required_for_enterprise": "Support operations, owner assignment, incident management and paid SLA terms",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    },
    {
      "id": "billing-analytics",
      "name": "Product telemetry and cost control",
      "currently_verified": "No paid account access exposed",
      "required_for_enterprise": "Consent-controlled metrics, per-tenant budgets and retention rules",
      "status": "PARTIAL_OR_PLANNED",
      "production_certified": false
    }
  ],
  "truth": {
    "current_factory": "Bounded fixed-template module generator, tests, owner-gated publication",
    "current_parallelism": "Three ORBIT I/O workers and serialized one-model lane on 2-vCPU VPS",
    "official_commercial_provider_connections_verified": 0,
    "installed_native_packages_certified": false,
    "public_tenant_authentication": false,
    "fully_commercial_production_certified": false
  }
}