CapAuth Component Map

Where capauth sits in the SKWorld ecosystem: the sovereign identity root, who delegates to it, and the optional platform/third-party edges

CapAuth Component Map Where capauth sits in the SKWorld ecosystem: the sovereign identity root, who delegates to it, and the optional platform/third-party edges capauth · PGP keypair, challenge-response, DID generator · Core: identity and governance · canonical identity resolver capauth PGP keypair, challenge-response, DID generator canonical identity resolver skmemory · memory capability · Core: identity and governance skmemory memory capability sksso · single sign-on, Core sibling · Core: identity and governance sksso single sign-on, Core sibling sksec · security capability, Core sibling · Core: identity and governance sksec security capability, Core sibling Forgejo · passwordless login via OIDC · Third-party services, passwordless login Forgejo passwordless login via OIDC Authentik · OIDC bridge, custom stage · Third-party services, passwordless login Authentik OIDC bridge, custom stage skchat · identity-routed messaging · Comms skchat identity-routed messaging skcomms · FQID addressing · Comms skcomms FQID addressing skcapstone · framework hub · Consumers: delegate to capauth skcapstone framework hub sk-alert · optional alert bus · Platform primitives, optional when present sk-alert optional alert bus skscheduler · optional, 24h key-rotation check · Platform primitives, optional when present skscheduler optional, 24h key-rotation check resolve_agent_identity() resolve_agent_identity() resolve_agent_identity() resolve_agent_identity() OIDC discovery and verify custom PGP challenge-response stage auth events, optional profile verify every 24h, optional Core: identity and governance Third-party services, passwordless login Comms Consumers: delegate to capauth Platform primitives, optional when present Legend Frontend Backend Database Security Message bus External