Per-Chart Fact Sheets

UNOFFICIAL/EXPERIMENTAL. Generated by scripts/generate-chart-fact-sheets.mjs. Do not hand-edit. Regenerate with npm run chart-fact-sheets.

The user-facing "can I use this chart, and how?" view for every catalog chart, realizing the two-column principle from per-chart-fact-sheet-spec: support level (the claim) beside evidence depth (the substantiation) - never one without the other. Read-only projection over chart-evidence-router + chart-skills. The browser board is fact-sheets.html.

Covers 100 charts. By support status: needs-better-base-variant 33 · works-with-operator-review 23 · ready-to-try 20 · works-with-target-prerequisites 15 · not-ready-yet 9.

After any apply, the honest check is cub-scout - object-set-matches, prerequisites-met, workloads-converged - because "created" is not "working".

argo-cd/argo-cd@9.5.15

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

bitnami/mongodb@19.0.7

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: existing-secret-replicaset
• You must provide/decide: a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first

bitnami/mysql@14.0.3

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: existing-secret
• You must provide/decide: an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

bitnami/nginx@24.0.2

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: http-clusterip:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: http-clusterip
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose whether http-clusterip is in production scope; close or document its render-only live-readiness issue first

bitnami/postgresql@18.6.7

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: existing-secret
• You must provide/decide: an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first

bitnami/rabbitmq@16.0.14

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: existing-secret
• You must provide/decide: an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

bitnami/redis@25.5.3

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: reuse-existing-secret
• You must provide/decide: a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose whether default is in production scope; close or document its render-only live-readiness issue first

external-secrets/external-secrets@2.5.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

grafana/grafana@10.5.15

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: existing-secret-ingress:superseded:not-production-supported-because-source-chart-is-deprecated
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: existing-secret-ingress
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: resolve image digests for each affected variant before production OCI support

grafana/loki@7.0.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: single-binary-filesystem:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: single-binary-filesystem
• You must provide/decide: a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs
• Quirks & disposition: crds;generated-secrets;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

grafana/tempo@1.24.4

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: local-persistent:superseded:not-production-supported-because-source-chart-is-deprecated
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2)
• Recommended base: local-persistent
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: resolve image digests for each affected variant before production OCI support

hashicorp/consul@2.0.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default-control-plane:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2)
• Recommended base: default-control-plane
• You must provide/decide: a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs
• Quirks & disposition: webhooks;extension-slots;install-vs-upgrade-divergence;required-values;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

hashicorp/vault@0.32.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:rejected:parity-passed-production-support-rejected
• Evidence depth: catalog-supported-with-live-evidence (render parity 3/3, local live 2/3, live parity 2/3)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs
• Quirks & disposition: webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: resolve image digests for each affected variant before production OCI support

ingress-nginx/ingress-nginx@4.15.1

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: internal-clusterip:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 3/3, local live 3/3, live parity 3/3)
• Recommended base: internal-clusterip
• You must provide/decide: webhook/cert readiness at delivery time; mandatory chart inputs
• Quirks & disposition: webhooks;required-values;tpl;capabilities;rbac - exact rendered objects with render parity and receipts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: record the target-scoped lifecycle support decision, then refresh live/e2e evidence for that scope

jetstack/cert-manager@v1.20.2

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: crds-enabled:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: crds-enabled
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: write or fix the receipt for target fact preflight

longhorn/longhorn@1.11.2

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: target facts at variant time; mandatory chart inputs
• Quirks & disposition: required-values;generated-facts;tpl;rbac - exact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support

metrics-server/metrics-server@3.13.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time
• Quirks & disposition: generated-secrets;existing-secret;lookup;generated-facts;capabilities;rbac - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes

prometheus-community/kube-prometheus-stack@85.3.3

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs
• Quirks & disposition: hooks;crds;generated-secrets;existing-secret;webhooks;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support

prometheus-community/prometheus@29.8.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: server-only-ephemeral:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: server-only-ephemeral
• You must provide/decide: a StorageClass / storage decision; target facts at variant time; mandatory chart inputs
• Quirks & disposition: generated-secrets;extension-slots;required-values;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support

secrets-store-csi-driver/secrets-store-csi-driver@1.6.0

• Status: Ready to try (ready-to-try)
• Support (claim): yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed
• Evidence depth: catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support

traefik/traefik@40.2.0

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 1/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use
• Quirks & disposition: crds;generated-secrets;existing-secret;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

external-dns/external-dns@1.21.1

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); mandatory chart inputs
• Quirks & disposition: crds;existing-secret;extension-slots;required-values;tpl;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

gitlab/gitlab-runner@0.89.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); target facts at variant time; your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;generated-facts;tpl;capabilities - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

kyverno/kyverno@3.8.1

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use
• Quirks & disposition: hooks;crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

cloudnative-pg/cloudnative-pg@0.28.2

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time
• Quirks & disposition: crds;existing-secret;webhooks;extension-slots;generated-facts;tpl;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

fluent/fluent-bit@0.57.6

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: your wanted install shape, until a reviewed base exists
• Quirks & disposition: hooks;extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); extension slots routed to reviewed bases
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

runix/pgadmin4@1.62.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;required-values;tpl;capabilities;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; your wanted install shape, until a reviewed base exists
• Quirks & disposition: capabilities;rbac;storage - exact rendered objects with render parity and receipts
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

kedacore/keda@2.19.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time
• Quirks & disposition: crds;webhooks;extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run APIService promotion review: choose supported base, target scope, CRD ownership path, and evidence refresh rule using the committed aggregation receipt

prometheus-community/kube-state-metrics@7.4.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a StorageClass / storage decision; target facts at variant time
• Quirks & disposition: existing-secret;extension-slots;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

elastic/eck-operator@3.4.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; mandatory chart inputs
• Quirks & disposition: crds;existing-secret;webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

elastic/kibana@8.5.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;tpl - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

descheduler/descheduler@0.36.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;required-values;tpl;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

prometheus-community/prometheus-blackbox-exporter@11.10.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots;tpl;capabilities - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/elasticsearch@22.1.6

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

stakater/reloader@2.2.12

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

jaegertracing/jaeger@4.8.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; your wanted install shape, until a reviewed base exists
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

grafana/alloy@1.8.2

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); mandatory chart inputs
• Quirks & disposition: crds;extension-slots;required-values;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

nats/nats@2.14.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); mandatory chart inputs
• Quirks & disposition: existing-secret;extension-slots;required-values;tpl - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

dex/dex@0.24.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

prometheus-community/alertmanager@1.37.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision
• Quirks & disposition: extension-slots;tpl;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

falcosecurity/falco@9.0.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;required-values;lookup;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

prometheus-community/prometheus-node-exporter@4.55.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); target facts at variant time; mandatory chart inputs
• Quirks & disposition: existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/spark@10.0.3

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

elastic/logstash@8.5.1

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision
• Quirks & disposition: extension-slots;tpl;capabilities;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

prometheus-community/prometheus-adapter@5.3.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): review-needed
• Evidence depth: proof-grade-compatible-base-needs-standard-lanes (render parity 3/3, local live 1/3, live parity 1/3)
• Recommended base: apiservice-v1-capability
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and the APIService runtime contract for the maintained apiservice-v1-capability base before catalog promotion.

projectcalico/tigera-operator@v3.32.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: hooks;required-values;lookup;rbac - exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

fairwinds-stable/goldilocks@10.3.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds;generated-secrets;existing-secret;webhooks;extension-slots;lookup;generated-facts;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

prometheus-community/prometheus-operator-crds@29.0.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); target facts at variant time; your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds;existing-secret;generated-facts - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

bitnami/zookeeper@13.8.7

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

elastic/filebeat@8.5.1

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots;tpl;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

hashicorp/terraform@1.1.2

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); mandatory chart inputs
• Quirks & disposition: crds;required-values - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

coredns/coredns@1.45.2

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

fairwinds-stable/vpa@4.11.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time
• Quirks & disposition: crds;webhooks;extension-slots;lookup;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review APIService render-path notes: current maintained bases do not render APIService objects; create a separate APIService-enabled base only if product chooses that path

bitnami/phpmyadmin@20.0.0

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

prometheus-community/prometheus-pushgateway@3.6.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: generated-secrets;extension-slots;required-values;tpl;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

fluent/fluentd@0.5.3

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

jaegertracing/jaeger-operator@2.57.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 1/2)
• Recommended base: no-crds
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time
• Quirks & disposition: crds;webhooks;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/memcached@8.5.5

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; your wanted install shape, until a reviewed base exists
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

strimzi/strimzi-kafka-operator@1.0.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;extension-slots;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

opencost/opencost@2.5.21

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;required-values;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

gatekeeper/gatekeeper@3.22.2

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time
• Quirks & disposition: hooks;crds;existing-secret;webhooks;extension-slots;capabilities;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases
• Skill: serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/contour@21.1.4

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 3/3, local live 0/3, live parity 0/3)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); target facts at variant time; a decision on the named limitation before use
• Quirks & disposition: crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

kyverno/kyverno-policies@3.8.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;required-values;lookup;tpl - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

elastic/metricbeat@8.5.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: a StorageClass / storage decision; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

minio-operator/operator@7.1.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

percona/pxc-operator@1.19.1

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); target facts at variant time
• Quirks & disposition: crds;extension-slots;install-vs-upgrade-divergence;lookup;rbac - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/apache@11.4.29

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; a decision on the named limitation before use
• Quirks & disposition: generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

grafana/pyroscope@2.0.2

• Status: Not ready yet (not-ready-yet)
• Support (claim): decision-needed-first
• Evidence depth: proof-grade-with-named-limitation (render parity 3/3, local live 2/3, live parity 0/3)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use
• Quirks & disposition: crds;generated-secrets;existing-secret;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage - exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: review limitation before promotion: existing-secret (chart ships no Secret toggle)

aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: extension-slots;required-values;tpl;capabilities;rbac - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

falcosecurity/falcosidekick@0.13.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots;required-values;capabilities;rbac;storage - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

aqua/trivy-operator@0.32.1

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

argo-cd/argo-events@2.4.21

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

argo-cd/argo-rollouts@2.40.9

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

argo-cd/argo-workflows@1.0.14

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 3/3)
• Recommended base: minimal-crds
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

argo-cd/argocd-image-updater@1.2.2

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

autoscaler/cluster-autoscaler@9.57.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

autoscaler/vertical-pod-autoscaler@0.9.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

bitnami/opensearch@2.0.10

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 0/3)
• Recommended base: legacy
• You must provide/decide: an existing Secret for some bases (buildable - not yet run)
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

crossplane-stable/crossplane@2.3.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

grafana/promtail@6.17.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

grafana/rollout-operator@0.49.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

haproxytech/kubernetes-ingress@1.52.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

istio/gateway@1.30.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: none-flagged - exact rendered objects with render parity and receipts
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

istio/istiod@1.30.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

jetstack/cert-manager-csi-driver@v0.14.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: your wanted install shape, until a reviewed base exists
• Quirks & disposition: none-flagged - exact rendered objects with render parity and receipts
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

jetstack/trust-manager@v0.22.1

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2)
• Recommended base: no-crds
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

linkerd/linkerd-crds@1.8.0

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds;existing-secret - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

minio-operator/tenant@7.1.1

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

nats/nack@0.34.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: no-crds
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

nats/surveyor@0.20.9

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

open-telemetry/opentelemetry-operator@0.114.0

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2)
• Recommended base: no-crds
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

percona/pg-operator@3.0.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

percona/psmdb-operator@1.22.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

rook-release/rook-ceph@v1.19.5

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists
• Quirks & disposition: crds - exact rendered objects with render parity and receipts; CRD handling split into explicit bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

rook-release/rook-ceph-cluster@v1.19.5

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

sealed-secrets/sealed-secrets@2.18.6

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

velero/velero@12.0.1

• Status: Works with prerequisites (works-with-target-prerequisites)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); a CRD ownership choice (crds vs no-crds base)
• Quirks & disposition: crds;existing-secret;extension-slots - exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases
• Skill: none ()
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review

vm/victoria-logs-single@0.12.5

• Status: Needs a better base (needs-better-base-variant)
• Support (claim): not-yet-user-ready
• Evidence depth: proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1)
• Recommended base: default
• You must provide/decide: an existing Secret for some bases (buildable - not yet run); your wanted install shape, until a reviewed base exists
• Quirks & disposition: existing-secret;extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: add at least one user-shaped variant before catalog promotion

vm/victoria-metrics-single@0.39.0

• Status: works-with-operator-review (works-with-operator-review)
• Support (claim): not-yet-public-catalog-proof-ready
• Evidence depth: proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2)
• Recommended base: default
• You must provide/decide: nothing beyond a cluster and namespace
• Quirks & disposition: extension-slots - exact rendered objects with render parity and receipts; extension slots routed to reviewed bases
• Skill: live-parity (docs/skills/live-parity.md)
• Post-apply check: After apply, confirm convergence with cub-scout (object-set-matches, prerequisites-met, workloads-converged) - "created" is not "working". prerequisites-met will flag the missing prerequisite before you debug pods.
• Next action: run catalog promotion review