slug: prove provider: Prove generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 1 edges: - tag: Auth spec_file: prove-auth-api-openapi.yml capability_id: BC-620.20 capability_id_l1: BC-620 capability_name: Identity & Access Management confidence: 0.75 evidence: POST /server/auth/start — "Start a phone authentication flow"; POST /device/revoke — "Revoke a bound device" reason: Operations run a multi-step phone-possession authentication flow and revoke bound devices, which is identity and access management (authentication and credential/device lifecycle). Consumer-identity framing leaves slight ambiguity versus customer identity capabilities.