M0 e M1 revisados e fixes implementados

RI/config/capabilities/finance/invoice-get.yaml

@@ -0,0 +1,12 @@
+name: finance.invoice.get
+version: 1.0.0
+domain: finance
+owner: finance-platform
+risk_tier: R1
+side_effects: false
+idempotent: true
+data_classification: [confidential]
+entitlements: [Finance.Read, Finance.Payments]
+backend:
+  type: mcp
+  service: finance-domain

RI/config/capabilities/finance/payment-create.yaml

@@ -0,0 +1,12 @@
+name: finance.payment.create
+version: 1.0.0
+domain: finance
+owner: finance-platform
+risk_tier: R2
+side_effects: true
+idempotent: false
+data_classification: [confidential, restricted]
+entitlements: [Finance.Payments]
+backend:
+  type: mcp
+  service: finance-domain

RI/config/capabilities/finance/payment-execute.yaml

@@ -0,0 +1,16 @@
+# README.md §17 (R3, high impact) + §26 (approval-eligible above Finance.Payments'
+# restrictions.approval_threshold, enforced by config/policies/transaction.rego)
+name: finance.payment.execute
+version: 1.0.0
+domain: finance
+owner: finance-platform
+risk_tier: R3
+side_effects: true
+idempotent: false
+data_classification: [confidential, restricted]
+entitlements: [Finance.Payments]
+backend:
+  type: mcp
+  service: finance-domain
+approval:
+  required: true

RI/config/capabilities/sales/customer-get.yaml

@@ -0,0 +1,12 @@
+name: sales.customer.get
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R1
+side_effects: false
+idempotent: true
+data_classification: [internal]
+entitlements: [Sales.Read]
+backend:
+  type: mcp
+  service: sales-domain

RI/config/capabilities/sales/customer-search.yaml

@@ -0,0 +1,12 @@
+name: sales.customer.search
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R1
+side_effects: false
+idempotent: true
+data_classification: [internal]
+entitlements: [Sales.Read]
+backend:
+  type: mcp
+  service: sales-domain

RI/config/capabilities/sales/inventory-check.yaml

@@ -0,0 +1,12 @@
+name: sales.inventory.check
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R1
+side_effects: false
+idempotent: true
+data_classification: [internal]
+entitlements: [Sales.Read]
+backend:
+  type: mcp
+  service: sales-domain

RI/config/capabilities/sales/order-get.yaml

@@ -0,0 +1,12 @@
+name: sales.order.get
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R1
+side_effects: false
+idempotent: true
+data_classification: [internal]
+entitlements: [Sales.Read]
+backend:
+  type: mcp
+  service: sales-domain

RI/config/capabilities/sales/quote-create.yaml

@@ -0,0 +1,12 @@
+name: sales.quote.create
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R2
+side_effects: true
+idempotent: false
+data_classification: [confidential]
+entitlements: [Sales.Write]
+backend:
+  type: mcp
+  service: sales-domain

RI/config/capabilities/sales/quote-update.yaml

@@ -0,0 +1,12 @@
+name: sales.quote.update
+version: 1.0.0
+domain: sales
+owner: sales-platform
+risk_tier: R2
+side_effects: true
+idempotent: false
+data_classification: [confidential]
+entitlements: [Sales.Write]
+backend:
+  type: mcp
+  service: sales-domain