Where should all master copies of controlled software and documentation be stored?

There is no ITIL concept called a 'definitive capacity library' - capacity-related data is managed within capacity management plans and the capacity management information system.

The Definitive Media Library (DML) is the designated secure library in ITIL for storing and protecting all master copies of controlled software items and associated documentation. It ensures that only authorized, integrity-verified versions are available for deployment and reference, directly supporting the Release and Configuration Management processes.

There is no ITIL concept called a 'definitive security library' - security artifacts and policies are managed under Information Security Management, not a library of this name.

There is no ITIL concept called a 'definitive production library' - production environment records are tracked through the CMDB and controlled via release and deployment management.