ReadonlycapabilityCapability Model -- the base every other model is derived from or indexed against.
Optional ReadonlychangeChange Model, when a previous manifest snapshot was available to diff against.
Optional ReadonlydependencyDependency Model, when a usage scan was run.
Optional ReadonlyfindingFinding Model, when at least one rule/scan pass ran.
ReadonlylifecycleLifecycle Model. Required alongside capability, not optional like
dependency/ownership: it is a pure projection over the inventory
(buildLifecycleModel), so any caller holding a capability can always
produce one -- there is no scenario where a caller legitimately
"doesn't have" it the way it might not have run a usage scan. Only the
expiringWithinDays/now window is a caller choice, and that changes
the contents, never the availability.
Optional ReadonlyownershipOwnership Model, when a usage scan was run.
The project-varying models Evidence Model composes --
capabilityandlifecycleare required; the rest depend on which passes actually ran.