slug: ibm
provider: IBM
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Telecommunications
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 6
edges:
- tag: Policies
  spec_file: ibm-policies-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.9
  evidence: POST /v1/policies  createPolicy  Create an access policy
  reason: Access-policy lifecycle with PolicySubject/PolicyResource/PolicyRole schemas is authorization
    management within IAM, not corporate policy management.
- tag: API Keys
  spec_file: ibm-api-keys-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: POST /v1/apikeys  createApiKey  Create an API key ... POST /v1/apikeys/{id}/lock  lockApiKey
  reason: IBM Cloud IAM credential lifecycle (create, lock, disable API keys) is identity and access management
    for cloud resources.
- tag: Service IDs
  spec_file: ibm-service-ids-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: POST /v1/serviceids/  createServiceId  Create a service ID
  reason: Non-human (service) identity lifecycle with associated API keys is core identity and access
    management.
- tag: Trusted Profiles
  spec_file: ibm-trusted-profiles-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: POST /v1/profiles  createProfile  Create a trusted profile
  reason: Trusted profiles are federated identity constructs used to grant access to IBM Cloud resources;
    lifecycle CRUD maps to identity and access management.
- tag: Claim Rules
  spec_file: ibm-claim-rules-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: GET /v1/profiles/{profile-id}/rules  listClaimRules  List claim rules for a trusted profile
  reason: Claim rules govern federated identity trust conditions for trusted profiles — an IAM/federation
    configuration capability, not an insurance claim.
- tag: Tokens
  spec_file: ibm-tokens-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.7
  evidence: POST /identity/token  createAccessToken  Create an IAM access token
  reason: Token issuance is authentication plumbing; it sits inside IAM so a weak mapping is defensible,
    but it is close to pure technical auth.
  recovered_from: capability-edges-sweep.json