The Next Shape of the IT Business Capability Model: From Vendor Substrate to Owned Agentic Platforms

The IT business capability model has functioned for two decades as a procurement map. It enumerated the capabilities an enterprise required, and for each it named the commercial product that would supply it. The arrival of agentic artificial intelligence breaks the assumption beneath that map. Software is no longer a static tool that an enterprise rents and configures. It is becoming a learning system that encodes institutional knowledge as it operates, and that knowledge belongs to whoever owns the system. OAAD (Open-source software Agentic-AI Devsecops) is the platform thesis that responds: enterprises move from vendor substrate to owned agentic platforms, with OSS as the build substrate, agentic AI as the operational logic, and DevSecOps governance binding the two. The paper specifies the architectural posture, the phased adoption path, and the institutional implications. This deposit bundles the OAAD capability-model paper with the OAAD-Strategic-Brief-v5.pdf companion brief as supplementary material — the brief carries the OSS-replaces-COTS positioning argument in deck form. This paper is part of the AI-centric Digital Ecosystem (AIDE) corpus; see https://github.com/ologos-repos/aide-canon for the canonical home and related work.