Security/IAM plane — access control, audit, compliance, secret rotation
| User | 00000000-000... |
| Partition Key | default |
| Term Key | Linked Contract | Schema |
|---|---|---|
| capability | Compliance | Platform Config |
| capability | Observability | Platform Config |
| capability_group | Access | Platform Config |
| capability_group | IAM | Platform Config |