The single points

Capabilities held by one person, listed explicitly rather than left to be inferred.

The part

What it is

These are derived from the depth record but belong on their own list, because a risk that has to be calculated is a risk nobody looks at.

Each needs a decision rather than only a note: accept it, cross-train against it, or document the capability so it can be reconstructed.

The smallest level

The attributes it carries

Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.

Capability
Points back to the entry so the risk and the capability stay one record, not two.
Reference shared type
Mitigation status
Distinguishes a risk that has been consciously accepted from one nobody has looked at.
Status shared type
Owner
Without a named owner the list is an observation rather than a plan.
Person shared type