agent · AVC

Capabilities are explicit contracts.

Inputs, outputs, authority, risk, evidence and failure behavior are declared before use.

Capability	Authority	Risk	Evidence
research.execute	Execute reversible	R1	Research receipt
outreach.prepare	Prepare only	R2	Draft + rationale
outreach.send	Approved execution	R3	Approval + delivery receipt
policy.modify	Forbidden	R4	Blocked event

Field	Question	Example boundary
Subject	Who may act?	Named agent or workload identity
Purpose	Why is the grant issued?	One mission or product outcome
Scope	Which resources and actions?	Allowlisted repository, account or adapter
Environment	Where may it run?	Local, test or approved production target
Risk	What is the ceiling?	R0 through R3; ordinary grants exclude R4
Time	When does it expire?	Bounded validity window
Evidence	How is use reviewed?	Authorization, action and outcome receipts

Grant model

A capability is purpose-, scope-, environment- and time-bound.

The grant names the subject, resources, actions, risk ceiling, validity and revocation behavior.

Risk ceiling

R3 work requires independent approval, while R4 remains outside ordinary capability grants.

Revocation

The runtime must re-evaluate current authority before consequential transitions rather than assuming an earlier grant lasts forever.