slug: ironcore-labs
provider: IronCore Labs
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 2
edges:
- tag: Tenant
  spec_file: ironcore-labs-tenant-api-openapi.yml
  capability_id: BC-4230.10
  capability_id_l1: BC-4230
  capability_name: Tenant Provisioning & Lifecycle
  confidence: 0.88
  evidence: POST /1/tenants Tenant Create V2 ... DELETE /1/tenants/{tenantId} Tenant Delete
  reason: Full create/list/update/delete lifecycle of tenants in a multi-tenant SaaS (SaaS Shield), which
    is precisely tenant provisioning and lifecycle.
- tag: KMS Configuration
  spec_file: ironcore-labs-kms-configuration-api-openapi.yml
  capability_id: BC-4210.60
  capability_id_l1: BC-4210
  capability_name: Configuration & Secrets Management
  confidence: 0.7
  evidence: 'GET /1/kms/configs ... schemas: AwsKmsConfig, AzureCredentialsV1, GcpKmsConfig, ThalesCredentialsV1'
  reason: Operations create/update/delete key-management-service configurations holding cloud KMS credentials
    for envelope encryption — runtime configuration and secrets/key material management. Could also be
    read as security architecture/IAM, hence moderate confidence on the sub-capability.