feat(capabilities): registrera capability-ägare med verifierat kontrakt (#529)

siax.repo.v3.json

@@ -71,34 +71,39 @@
   "canonical": true,
   "parentRepo": null,
   "capabilities": [
-    "prospekt.email_verify",
-    "prospekt.jobs_write",
-    "prospekt.jobs_read",
-    "prospekt.search_read",
-    "prospekt.search_write",
-    "0pt.query_source",
+    "0pt.catalog_list",
+    "0pt.crawl_job",
     "0pt.document_ocr",
-    "0pt.write_external_record",
+    "0pt.estimate_compute",
+    "0pt.execute_metric",
     "0pt.lakehouse_mapping_manage",
     "0pt.lakehouse_write",
-    "0pt.source_rate_policy_manage",
-    "0pt.screen_sanctions",
-    "0pt.estimate_compute",
-    "0pt.vehicle_lookup",
-    "0pt.catalog_list",
-    "0pt.source_registry_list",
+    "0pt.load_full_table",
     "0pt.order_create",
     "0pt.order_payment",
-    "0pt.write_iceberg_table",
-    "0pt.structure.resolve_entities",
-    "0pt.structure.get_lineage",
-    "0pt.structure.quality_run",
-    "0pt.structure.quality_list_runs",
-    "0pt.structure.quality_checks",
-    "0pt.structure.quality_reports",
+    "0pt.query_source",
+    "0pt.render_report",
+    "0pt.run_data_quality_check",
+    "0pt.screen_sanctions",
+    "0pt.source_rate_policy_manage",
+    "0pt.source_registry_list",
     "0pt.structure.extract_document",
+    "0pt.structure.get_lineage",
+    "0pt.structure.normalize_value",
+    "0pt.structure.quality_checks",
+    "0pt.structure.quality_list_runs",
+    "0pt.structure.quality_reports",
+    "0pt.structure.quality_run",
+    "0pt.structure.resolve_entities",
     "0pt.structure.route_parsing",
-    "0pt.structure.normalize_value"
+    "0pt.vehicle_lookup",
+    "0pt.write_external_record",
+    "0pt.write_iceberg_table",
+    "prospekt.email_verify",
+    "prospekt.jobs_read",
+    "prospekt.jobs_write",
+    "prospekt.search_read",
+    "prospekt.search_write"
   ],
   "surfaces": [
     "api",

siax/capabilities/0pt.crawl_job.json

@@ -0,0 +1,18 @@
+{
+  "id": "0pt.crawl_job",
+  "name": "0pt.crawl_job",
+  "owner": "0pt",
+  "version": "0.1.0",
+  "riskLevel": "L2",
+  "piiLevel": "low",
+  "surfaces": [
+    "api",
+    "cli",
+    "mcp",
+    "job"
+  ],
+  "requiresJob": true,
+  "tenantScoped": true,
+  "operationId": "siax.acquisition.run",
+  "description": "Ägare 0pt. Registrerad i CL0UD capability-registry (packages/capability-registry/src/acquisition-capabilities.ts, runtime B0TS). operationId är den faktiska kontraktsoperationen siax.acquisition.run, refererad även i 0pt/acquisition.consumer.json — ingen påhittad id."
+}

siax/capabilities/0pt.execute_metric.json

@@ -0,0 +1,16 @@
+{
+  "id": "0pt.execute_metric",
+  "name": "0pt.execute_metric",
+  "owner": "0pt",
+  "version": "0.1.0",
+  "riskLevel": "L1",
+  "piiLevel": "none",
+  "surfaces": [
+    "api",
+    "cli"
+  ],
+  "requiresJob": false,
+  "tenantScoped": true,
+  "operationId": "0ptExecuteMetric",
+  "description": "Ägare 0pt. Implementation: 0pt/services/analytics/app.py:366 execute_metric, rutt POST /api/0pt/analytics/metrics/{metric_id}/query. Konsumeras av ACT0 consulting_delivery_analytics (governed-metric-steg). operationId är registrerad kontraktsnamn i CL0UD capability-registry (consulting-capabilities.ts)."
+}

siax/capabilities/0pt.load_full_table.json

@@ -0,0 +1,14 @@
+{
+  "id": "0pt.load_full_table",
+  "name": "0pt.load_full_table",
+  "owner": "0pt",
+  "version": "0.1.0",
+  "riskLevel": "L3",
+  "piiLevel": "high",
+  "surfaces": [
+    "job"
+  ],
+  "requiresJob": true,
+  "tenantScoped": true,
+  "description": "Ägare 0pt. Registrerad i CL0UD capability-registry (0pt-full-table-capabilities.ts); best befintliga jobbgräns 0pt.full_table_job, utförd av p0lytics.docstruct.full_table_worker. Endast jobb-ytan deklareras — ingen HTTP-operation existerar, därför medvetet ingen operationId (registret säger uttryckligen att ingen påhittas)."
+}

siax/capabilities/0pt.render_report.json

@@ -0,0 +1,15 @@
+{
+  "id": "0pt.render_report",
+  "name": "0pt.render_report",
+  "owner": "0pt",
+  "version": "0.1.0",
+  "riskLevel": "L1",
+  "piiLevel": "none",
+  "surfaces": [
+    "api"
+  ],
+  "requiresJob": false,
+  "tenantScoped": true,
+  "operationId": "0ptRenderReport",
+  "description": "Ägare 0pt. ACT0 consulting_delivery_analytics render-steg (artifact-before-notice). Registrerad i CL0UD capability-registry (consulting-capabilities.ts); operationId är registrerad kontraktsnamn, inte en gissning."
+}

siax/capabilities/0pt.run_data_quality_check.json

@@ -0,0 +1,16 @@
+{
+  "id": "0pt.run_data_quality_check",
+  "name": "0pt.run_data_quality_check",
+  "owner": "0pt",
+  "version": "0.1.0",
+  "riskLevel": "L1",
+  "piiLevel": "none",
+  "surfaces": [
+    "api",
+    "cli"
+  ],
+  "requiresJob": false,
+  "tenantScoped": true,
+  "operationId": "0ptRunDataQualityCheck",
+  "description": "Ägare 0pt. ACT0 consulting_delivery_analytics kvalitetsgrind + seedade analystmallar (tmpl_000010/000011/000575 använder samma capability-id). Registrerad i CL0UD capability-registry (consulting-capabilities.ts)."
+}

siax/signing/README.md

@@ -1,4 +1,4 @@
 # 0pt — cosign-signeringskedjan (2026-09-29)
 
-Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-38ae3ddf0b (sha256:a13f08ece91f4e623d236e0a9cba78433a5c6d5c7231a75b3dd7b804cf67cd2f) är cosign-signerad
+Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-62517aca49 (sha256:352a7874ef197993473862424ad267022133421824a87ed71675603a046b13a6) är cosign-signerad
 med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.

siax/signing/cosign.pub

@@ -1,4 +1,4 @@
 -----BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEF33kL4LYHiptpJ6j7+WTKmQgdX+l
-9d/kuVDzpk8Loo3im4pT7oNFLU6dXq76r2xcI6B/IKvIt1VHPT9RpWnv+w==
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECvzKA8ERfkqcK8IYYHNGfeyNnV/D
+fFqiVO/yWMfxBCMUbufHTVWamepSE/PcJMq0ifov2vSpmfzaF+i3EPFljQ==
 -----END PUBLIC KEY-----