{
  "schemaVersion": "1.0.0",
  "updated": "2026-07-02",
  "description": "Canonical marketplace entitlement registry — maps product slugs to Keycloak/feature flags, SKUs, and onboarding runbooks",
  "entitlementModel": "contract_po_first",
  "billingNote": "Automated billing is roadmap (PUBLIC_SECTOR baseline G2). Grant entitlements via PO/contract then Keycloak flags.",
  "products": [
    {
      "productSlug": "phoenix-ledger-service",
      "entitlementKeys": ["PHOENIX_LEDGER_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "LEDGER_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-identity-service",
      "entitlementKeys": ["PHOENIX_IDENTITY_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "IDENTITY_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-wallet-registry",
      "entitlementKeys": ["PHOENIX_WALLET_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "WALLET_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-tx-orchestrator",
      "entitlementKeys": ["PHOENIX_TX_ORCH_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "ORCHESTRATION_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-messaging-orchestrator",
      "entitlementKeys": ["PHOENIX_MSG_ORCH_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "ORCHESTRATION_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-voice-orchestrator",
      "entitlementKeys": ["PHOENIX_VOICE_ORCH_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "ORCHESTRATION_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-event-bus",
      "entitlementKeys": ["PHOENIX_EVENT_BUS_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "PLATFORM_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-audit-service",
      "entitlementKeys": ["PHOENIX_AUDIT_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "PLATFORM_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-observability",
      "entitlementKeys": ["PHOENIX_OBSERVABILITY_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "PLATFORM_SERVICES",
      "manifestRef": null,
      "onboardingRunbook": null,
      "fulfillmentMode": "self_service"
    },
    {
      "productSlug": "phoenix-b2b-integration-hub",
      "displayName": "DBIS B2B Integration Hub",
      "entitlementKeys": ["B2B_HUB_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "PLATFORM_SERVICES",
      "manifestRef": "config/b2b-integration-hub-marketplace.v1.json",
      "onboardingRunbook": "docs/03-deployment/B2B_MARKETPLACE_TENANT_ONBOARDING_RUNBOOK.md",
      "deployScript": "scripts/deployment/deploy-b2b-integration-stack-from-marketplace.sh",
      "verifyCommand": "pnpm b2b:validate",
      "catalogSkus": ["b2b-hub-lab", "b2b-hub-dedicated", "b2b-stack-bundle"],
      "fulfillmentMode": "operator_provisioned",
      "surfaces": {
        "productPath": "/marketplace/products/phoenix-b2b-integration-hub",
        "managePath": "/marketplace/entitlements/phoenix-b2b-integration-hub"
      }
    },
    {
      "productSlug": "phoenix-peppol-hosted-connector",
      "displayName": "PEPPOL Hosted Connector",
      "entitlementKeys": ["PEPPOL_HOSTED_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "PLATFORM_SERVICES",
      "manifestRef": "config/peppol-hosted-marketplace.v1.json",
      "onboardingRunbook": "docs/03-deployment/B2B_MARKETPLACE_TENANT_ONBOARDING_RUNBOOK.md",
      "catalogSkus": ["peppol-hosted-connector"],
      "fulfillmentMode": "operator_provisioned",
      "surfaces": {
        "productPath": "/marketplace/products/phoenix-peppol-hosted-connector",
        "managePath": "/marketplace/entitlements/phoenix-peppol-hosted-connector"
      }
    },
    {
      "productSlug": "phoenix-ebics-banking-gateway",
      "displayName": "EBICS Banking Gateway",
      "entitlementKeys": ["EBICS_GATEWAY_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "FINANCIAL_MESSAGING",
      "manifestRef": "config/ebics-gateway-marketplace.v1.json",
      "onboardingRunbook": "docs/03-deployment/B2B_MARKETPLACE_TENANT_ONBOARDING_RUNBOOK.md",
      "catalogSkus": ["ebics-gateway-dedicated"],
      "fulfillmentMode": "operator_provisioned",
      "surfaces": {
        "productPath": "/marketplace/products/phoenix-ebics-banking-gateway",
        "managePath": "/marketplace/entitlements/phoenix-ebics-banking-gateway"
      }
    },
    {
      "productSlug": "phoenix-chain138-participant-onboard",
      "displayName": "Chain 138 Participant Onboarding",
      "entitlementKeys": ["CHAIN138_ONBOARD_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "BLOCKCHAIN_STACK",
      "manifestRef": "config/chain138-onboard-marketplace.v1.json",
      "onboardingRunbook": "docs/03-deployment/CHAIN138_ONBOARD_PORTAL_RUNBOOK.md",
      "integrationDoc": "docs/11-references/CHAIN138_ONBOARD_SANKOFA_MARKETPLACE_INTEGRATION.md",
      "catalogSkus": [
        "chain138-onboard-portal-dedicated",
        "chain138-besu-sentry-order",
        "chain138-besu-core-rpc-order",
        "chain138-besu-public-rpc-order",
        "chain138-besu-private-rpc-order",
        "chain138-besu-permissioned-rpc-order"
      ],
      "fulfillmentMode": "request_only",
      "surfaces": {
        "productPath": "/marketplace/products/phoenix-chain138-participant-onboard",
        "managePath": "/marketplace/entitlements/phoenix-chain138-participant-onboard"
      }
    },
    {
      "productSlug": "phoenix-x-road-interoperability",
      "displayName": "Phoenix X-Road Interoperability",
      "entitlementKeys": ["XROAD_INTEROP_ENTITLED"],
      "publisher": "phoenix-cloud-services",
      "category": "INTEROPERABILITY_SERVICES",
      "manifestRef": null,
      "programRef": "config/public-sector-program-manifest.json#x-road-global",
      "onboardingRunbook": "docs/11-references/X_ROAD_SANKOFA_ECOSYSTEM_INTEGRATION.md",
      "catalogSkus": ["x-road-interop-lab", "x-road-security-server-dedicated", "x-road-federation-connector"],
      "fulfillmentMode": "request_only",
      "status": "preview"
    },
    {
      "productSlug": "phoenix-aegis-vault-cti",
      "displayName": "AEGIS-VAULT by CyberSecur Global",
      "entitlementKeys": [
        "AEGIS_VAULT_ENTITLED",
        "AEGIS_VAULT_ESSENTIALS",
        "AEGIS_VAULT_PRO",
        "AEGIS_VAULT_ENTERPRISE"
      ],
      "tierEntitlements": {
        "aegis-vault-essentials": "AEGIS_VAULT_ESSENTIALS",
        "aegis-vault-professional": "AEGIS_VAULT_PRO",
        "aegis-vault-enterprise": "AEGIS_VAULT_ENTERPRISE"
      },
      "publisher": "phoenix-cloud-services",
      "partnerPublisher": "CyberSecur Global (AF-CSG-001)",
      "category": "SECURITY_SERVICES",
      "manifestRef": "config/aegis-vault-cti-marketplace.v1.json",
      "onboardingRunbook": "docs/03-deployment/AEGIS_VAULT_MARKETPLACE_TENANT_ONBOARDING_RUNBOOK.md",
      "deployScript": "scripts/deployment/deploy-aegis-vault-from-marketplace.sh",
      "verifyCommand": "pnpm aegis-vault:validate",
      "catalogSkus": ["aegis-vault-essentials", "aegis-vault-professional", "aegis-vault-enterprise"],
      "fulfillmentMode": "operator_provisioned",
      "surfaces": {
        "productPath": "/marketplace/products/phoenix-aegis-vault-cti",
        "managePath": "/marketplace/entitlements/phoenix-aegis-vault-cti"
      }
    }
  ]
}
