Evidence

Identity

• Dominant purpose appears to be reference architecture rather than an adjacent artifact type.
• Common usage in security architecture emphasizes architectural stance and guidance model.

Capabilities

• Capabilities reflect repeated functions the artifact can perform in practice.
• Selections remain provisional and tied to current corpus evidence.

Composition

• Reasoning structure is not primary in the current characterization.

Lifecycle

• Lifecycle is currently assessed as emerging based on broad usage and historical visibility.

Alternatives Considered

• framework: considered but not selected as dominant identity.
• standard: considered but not selected as dominant identity.