fix(parity): apply cross-lane corrections to the capability matrix

[rubenvdlinde]

Applies the corrections that later parity lanes found to this already-merged capability matrix (openspec/parity/capabilities.json). Only the rows below changed; every other row is byte-identical. Each corrected row carries readOn: 2026-09-26 (on built, or on the row where it has no built) and names the cross-product evidence in its evidence or note.

share-api-docs

• Before: partial (evidence: both docs endpoints login-only)
• After: partial, unchanged rating (evidence: aangeboden-gebruik docs is @publicpage)
• Evidence: lib/Controller/AangebodenGebruikController.php:860 @publicpage on getApiDocumentation() (:866), routed at appinfo/routes.php:261.
• Found by: later stackiq re-read lane, 2026-09-26

mkt-free-public-service

• Before: partial (evidence: module public for published entries)
• After: partial, unchanged rating (evidence: module public rule also admits registeredBy Supplier with no status condition)
• Evidence: lib/Settings/softwarecatalogus_register.json:7322-7327, module authorization.read entry {group: public, match: {registeredBy: Supplier}}.
• Found by: later stackiq re-read lane, 2026-09-26

Strict verifier

python3 .claude/skills/parity-verify/parity_verify.py openspec/parity/capabilities.json --strict (hydra development). The output is identical before and after this change, so the correction adds no strict finding. The remaining findings were there before.

  134 rated rows, 39 pending, 6 systems

unknown-cells  (1)
    710 cells rate unknown. That is legitimate, and it is listed so it cannot hide: capabilities[land-application-modules] vng-softwarecatalogus, capabilities[land-application-modules] bluedolphin, capabilities[land-application-modules] glpi, capabilities[land-application-modules] topdesk, capabilities[land-module-versions] vng-softwarecatalogus, capabilities[land-module-versions] sap-leanix, capabilities[land-module-versions] bluedolphin, capabilities[land-module-versions] topdesk

1 finding(s) in 1 check(s)

🤖 Generated with Claude Code

[github-actions]

Quality Report — ConductionNL/stackiq @ 68cb38e

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue-demi		✅
test-l10n		✅
format		✅
check-schema-l10n		✅
check-l10n-js		✅
composer			✅	✅ 130/130
npm			✅	✅ 807/807
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					⏭️ not run for this diff — no file in this diff matches the code globs, and none carries a source extension — the heavy tier has nothing to decide about it.
Newman					⏭️
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it on any branch from the Actions tab, or locally with npx playwright test.
Hydra gates					❌

---

Quality workflow — 2026-09-26 11:44 UTC

Download the full PDF report from the workflow artifacts.