Capability ID Registry

This document is the human-facing registry of capability IDs used across the Node <-> Node and Node <-> Seed Directory trust and discovery surfaces.

It is not the full solution capability matrix. It is a narrower artifact that:

• maps each capability_id to its semantic meaning,
• shows the corresponding role or runtime class,
• records the wire-visible name,
• helps keep orbidocs, node, and passport contracts in sync.

Scope

This registry covers capability IDs used as:

• identifiers in capability-passport.v1,
• identifiers in capability-advertisement.v1,
• routing or discovery predicates in the Node runtime.

Historically it excluded host-local capabilities such as recovery.sign or catalog.local.query. That boundary is now superseded: node/capability/capability-registry.v1.json is the enforced machine source of truth for both federated and host-local capabilities, and this document is its mechanically checked human-facing projection. The curated semantic table covers entries selected by docs.human-registry; the generated complete host-local catalogue covers all host capabilities.

Assertion Layers

Capability advertising and capability passports are related, but not interchangeable.

Use the following layers:

Layer	Artifact	Meaning	Trust basis	Examples
Protocol-native capability	capability-advertisement.v1 with a self-issued passport-form assertion	"this peer currently speaks this baseline protocol surface"	node signature, self-issued capability passport, and successful peer session	core/messaging, core/keepalive
Passport-backed capability	capability-passport.v1 carried in advertisement or indexed by Seed Directory	"this node is authorized or accepted for this capability profile"	profile-specific passport policy, issuer signature, revocation checks	network-ledger, seed-directory, escrow
Federation-recommended service	passport-backed capability plus federation policy	"this passport-backed capability is recommended or safe under this federation's policy"	high-assurance issuer, federation allowlist, local policy	approved ledger, trusted seed directory, certified offer catalog
Sovereign/private capability	sovereign capability id, optionally passport-backed	"this node offers an identity-anchored capability outside the global bare-name namespace"	anchor identity plus optional passport and local policy	audio-transcription@participant:did:key:..., ~audio-transcription@participant:did:key:...
Self-announced custom capability	capability-advertisement.v1 with a self-issued passport-form assertion	"this node says it can do this; verify by protocol use or local policy"	node signature plus self-issued passport; no federation endorsement unless separately attached	experimental plugin, non-critical discovery hint

Therefore:

• capability-advertisement.v1 is the live discovery and routing view and may be exchanged directly without Seed Directory,
• capability-passport.v1 is the durable authority, consent, or endorsement proof for capability profiles that require one,
• capability-schema.v1 is the optional machine-readable contract for a capability profile and is referenced by content-addressed schema/ref,
• the Seed Directory indexes passport-backed capabilities for network discovery,
• and consumers must apply local policy before treating any advertised capability as trusted.

Public Passport Classes

The registry distinguishes public network publication from closed deployment catalogs.

For publicly broadcast capability passports:

Class	Passport capability_id	Wire/query projection	Issuer expectation
Official / community-recognized	registered formal bare id, e.g. network-ledger, seed-directory, offer-catalog	stable mapped name such as core/network-ledger, role/seed-directory, role/offer-catalog	participant, organization, council, or federation key at the highest assurance required by the community policy
Compatible sovereign implementation	sovereign id without ~, e.g. offer-catalog@participant:did:key:..., plus capability_profile.compatible_with	sovereign/... plus anchor-aware filtering	the anchoring identity or delegated signer; consumers verify the compatibility claim against schema/profile evidence and local policy
Custom / operator-authored	sovereign id with ~, e.g. ~article-review@participant:did:key:... or ~article-review@org:did:key:...	sovereign/... plus anchor-aware filtering	the anchoring identity or delegated signer; consumers apply local endorsement and reputation policy; schema/ref describes the custom protocol

A public custom service MUST NOT mint a new unanchored bare formal capability_id and publish it as if it were a community-recognized capability. It should either use an existing registered formal id or use a sovereign identity-anchored id.

Closed operator-owned deployments are different. They may use a local Seed Directory as a deployment catalog for a known set of formal capabilities, with trust coming from explicit configuration, allowlisted node ids, and established peer sessions rather than public federation endorsement. Story-009 uses this closed-deployment rule for the offer-catalog passports on node B/C.

Sources of Truth

The source of truth is:

• node:capability/capability-registry.v1.json

This document, the legacy Rust projection in node:capability/src/lib.rs, and the passport/advertisement fixtures are checked against that source by orbidocs:scripts/check-capability-registry.py.

If any of the following changes:

• capability_id,
• wire name,
• capability semantics,
• eligibility flags,
• or the primary runtime owner,

then update the machine registry first and let the human projection follow it.

Capability Registry

The Passport in MVP column is an implementation/readiness note, not the machine registry status. Canonical machine status is active, deprecated, or reserved in node:capability/capability-registry.v1.json; reserved entries are visible here only to prevent namespace squatting and remain denied at admission.

capability_id	Wire name	Class	Semantic role	Typical runtime owner	Passport in MVP	Notes
core/messaging	core/messaging	protocol-native infrastructure	baseline encrypted peer messaging/session capability required for peer sessions	Node protocol / peer supervisor	self-issued advertisement/passport-form assertion	Mandatory baseline capability; peers lacking it are rejected by handshake/session validation.
core/discovery	core/discovery	protocol-native infrastructure	baseline peer discovery and advertisement exchange surface	Node protocol / discovery runtime	self-issued advertisement/passport-form assertion	Used for discovery and advertisement semantics; formal registry row keeps code constants and docs aligned.
core/keepalive	core/keepalive	protocol-native infrastructure	baseline keepalive/reconnect liveness surface	Node protocol / peer supervisor	self-issued advertisement/passport-form assertion	Protocol-native capability; not an attached service role.
network-ledger	core/network-ledger	infrastructure	remote settlement-ledger authority for other nodes	settlement-capable Node	yes	This capability means ledger authority, not merely one hold or one policy.
seed-directory	role/seed-directory	infrastructure	catalog of capability passports, revocations, and advertisements used for bootstrap and discovery	Seed Directory service or embedded Node service	yes	This capability covers trusted catalog publication and lookup semantics.
node-primary-operator	role/node-primary-operator	binding / governance	participant-issued authority binding naming the primary operator of a node	capability / Seed Directory / daemon acceptance path	yes	Binding-only capability; consumers must verify the node-operator binding artifact, not treat it as a generic service.
offer-catalog	role/offer-catalog	domain role	federated offer surface used for responder-side fetch and discovery	Dator on the supply side, Arca on the demand/discovery side	yes, when delegated by passport	The capability is domain-level; implementations may split supply and observed/discovery concerns across modules.
corpus.provider	app/corpus-provider	application reasoning role	topic-scoped Corpus reasoning provider eligible to receive corpus-reasoning-query.v1 and return corpus-reasoning-bid.v1	Corpus provider AD acceptor / Corpus-capable service offer	hard-MVP done	The capability authorizes the operational provider role; topic expertise remains in service-offer.v1 Corpus extension fields, never in the capability id.
contact-catalog	role/contact-catalog	domain role	opt-in contact discovery surface returning route candidates or invitation-required results for external contact handles	Contact Catalog middleware	yes	Seed Directory may advertise Contact Catalog providers, but it must not store raw people-directory mappings. MVP lookup is invitation-only with authenticated callers.
email-attestation	role/email-attestation	contact-control service role	service that challenges an email channel and orchestrates issuance of email-control@v1 passports	attestation service discovered through Seed Directory	yes	This capability authorizes an attestation provider role, not control of a specific email address.
phone-attestation	role/phone-attestation	contact-control service role	service that challenges a phone channel and orchestrates issuance of phone-control@v1 passports	attestation service discovered through Seed Directory	yes	This capability authorizes an attestation provider role, not control of a specific phone number.
email-control	proof/email-control	contact-control proof	proof that a subject currently controls one email address for selected purposes	attestation service discovered through Seed Directory	yes	This is contact-control evidence, not legal identity assurance. Contact Catalog admission treats it as freshness-bound input evidence.
phone-control	proof/phone-control	contact-control proof	proof that a subject currently controls one phone number for selected purposes	attestation service discovered through Seed Directory	yes	This is contact-control evidence, not legal identity assurance. Short TTLs and reassignment-aware policy are expected.
agora-vault	app/agora-vault	encrypted artifact storage	scoped authority to put, list, get, or delete opaque encrypted artifacts under an Agora Vault subject	Agora service / daemon host capability bridge	yes	Uses the agora-vault@v1 profile. Public lookup is by opaque artifact/id only; vault subjects, participants, nyms, topics, and plaintext metadata stay outside the public entry.
messaging.accept	app/messaging.accept	application advertisement	node advertisement that this node currently accepts messaging delivery using the canonical messaging-receive@v1 receive-consent profile	messaging middleware / Node capability advertisement	self-issued advertisement plus receive-profile evidence	Published only when the messaging service and inbound acceptor are ready. Route policy defaults to privacy = private-direct and lookup consumers may filter for this capability before sending contact requests.
messaging-receive	app/messaging-receive	application consent	narrow recipient-issued authority allowing one sender subject to deliver messages to one accepted route	messaging middleware / Contact Catalog contact-request acceptor	yes	Used by Story 010 as the concrete passport minted after accepting a contact request. It does not grant friend-class capabilities.
messaging-send	app/messaging-send	application authorship	participant-side authority to sign and enqueue outbound messaging envelopes for a local messaging client	messaging middleware / Node signing host	yes	P097 local preparation selects messaging-local-send@v1 or the bounded legacy module class; per-peer inac-push@v1 and signing/messaging-send are separate. Stage A adds truthful read selection; execution enforcement/migration is Stage B. Receive consent remains messaging-receive.
room.open	app/room.open	application coordination	authority to open a durable Room skeleton and initial room policy projection	Room primitive / daemon room host	planned	This is a room-domain capability, not a transport adapter grant. WSS and Matrix live-plane adapters consume the resulting room projection.
room.join	app/room.join	application coordination	authority to request or accept membership in an existing Room under its policy	Room primitive / daemon room host	planned	Join authority is evaluated against room policy, grants, expiry, and attested membership; it does not imply live-message send authority by itself.
room.membership-query	app/room.membership-query	application query	authority to request signer-backed Room membership or grant attestations	Room primitive / daemon room host	yes	Implemented as authenticated agora-service projection queries backed by the local host signer; middleware does not mint attestations directly.
sensorium.workbench.terminal	sensorium/workbench.terminal	local actuation	bounded PTY/session capability for Sensorium Workbench	Sensorium Workbench connector	partial	Solution owner: Solution 042 Sensorium Workbench. High-risk effect surface; terminal remains disabled by factory config, then allows bounded PTY sessions and structured argv only after explicit grants and exact or bounded-prefix command profiles validated through the Rust actuation bridge. Raw input, resize, signal, and cancel are operator-confirmed paths. Registry flags allow both host-route visibility and supervised middleware dispatch for this handler.
sensorium.workbench.file	sensorium/workbench.file	local actuation	bounded file snapshot/read surface under leased workspace roots	Sensorium Workbench connector	partial	Solution owner: Solution 042 Sensorium Workbench. The connector implements allowlisted host-local and managed-copy snapshot/read with capped request/read bytes, Rust path admission, and traversal, root-self, symlink, oversized-file, and invalid-root refusal; it is not ambient filesystem authority. Registry flags allow both host-route visibility and supervised middleware dispatch for this handler.
sensorium.workbench.patch	sensorium/workbench.patch	local actuation	bounded patch application surface under leased workspace roots	Sensorium Workbench connector	partial	Solution owner: Solution 042 Sensorium Workbench. The connector implements artifact-backed patch apply behind digest/size checks, workspace containment, explicit grants, and operator confirmation for host-local or managed-copy roots; verified artifacts can be handed off explicitly to Artifact Delivery and/or metadata-only Memarium provenance. Since P094-021 the supervised Workbench also stages and installs policy-admitted patches, so the registry admits dispatch; each call is still decided by the Workbench's patch_enabled, the grant, operator confirmation and, for task packs, P094 HIL and the patch policy.
sensorium.workbench.env	sensorium/workbench.env	local actuation	bounded environment/sandbox lifecycle surface for Workbench sessions	Sensorium Workbench connector	partial	Solution owner: Solution 042 Sensorium Workbench. The connector reports host-local environments and implements bounded fixture-copy.v1 allocation, artifact export, persisted lifecycle, and operator-confirmed teardown while refusing PTY without process isolation. Container and microVM backends remain future. Registry flags allow both host-route visibility and supervised middleware dispatch for this handler.
sensorium.interface.read	sensorium/interface.read	observation	bounded one-shot read of one explicitly granted Sensorium Interface	Sensorium Interfaces runtime	yes, sensorium-interface@v1	Solution 046 owns the implemented operation; every invocation remains scoped to an exact interface resource, remote node where applicable, classification ceiling, batch caps, current host policy, and revocation evidence. Generic support advertisement exposes no descriptor or grant.
sensorium.interface.subscribe	sensorium/interface.subscribe	observation	create, renew, consume, and close one bounded caller-bound interface lease	Sensorium Interfaces runtime	yes, sensorium-interface@v1	Subscription authority is separate from one-shot read authority and is implemented with exact interface, caller, lease, cursor, classification, batch, and current revocation constraints.
sensorium.interface.remote-feed	sensorium/interface.remote-feed	host coordination	initiate one bounded authenticated peer egress feed on behalf of a local caller	Sensorium Interfaces runtime	no; host-local only	This grant permits recipient-side peer egress but carries no source authority. Every remote operation still requires a separate current sensorium.interface.subscribe Passport scoped to the exact remote node and interface.
sensorium.interface.invoke	sensorium/interface.invoke	actuation	invoke an exact method on one explicitly granted actuation interface and coordinate its bounded shared or exclusive control	Sensorium Interfaces runtime	yes, sensorium-interface-actuation@v1	The implemented P083 foundation binds every effect to the authenticated caller, exact interface, method, classification, opaque source generation, grant and limits; exclusive effects additionally require the current lease, epoch, and caller sequence. Observation, Room membership, and carrier attachment confer no invoke authority.
sensorium.interface.manage	sensorium/interface.manage	host control	source-local observation and actuation publication, lifecycle, grant, revocation, inspection, metrics, and policy-driven preemption	Sensorium Interfaces runtime	no; host-local only	The implemented capability is non-advertisable and Passport-ineligible. Its authorization policy enumerates a closed action set, including control.preempt; authenticated caller binding, an active exact invoke grant for an operator lease, immutable management facts, and restart reconstruction remain mandatory.
http.fetch.bounded	host/http.fetch.bounded	host network effect	one bounded HTTP(S) fetch admitted for an exact middleware consumer, action, origin policy, and destination class	daemon bounded HTTP fetch host	no; host-local only	Implemented as a reusable daemon-owned primitive with P084 as its first consumer. It resolves and classifies every address, pins the selected connection, revalidates same-origin redirects, enforces intersected byte/time/concurrency limits, and returns only bounded bytes or an Artifact Delivery pointer. It is not a public proxy and grants no Sensorium observation or publication authority.
inference.policy.evaluate	host/inference.policy.evaluate	data-only assessment	bounded evaluation of explicit receiving policy against declared or realized evidence	inference provenance core through daemon	no; host-local only	Returns admit, warn or deny for exact subjects. Does not authenticate source assertions, install policy, dispatch inference or authorize effects.
operator.task-pack.offer.admit	host/operator.task-pack.offer.admit	host admission	approves an exact task-pack offer draft against current host-owned bindings and policy	operator task-pack host approval and current admission	no; host-local only	Authenticated local operator approval is distinct from Dator signing and Agora publication. It grants no federated discovery or Passport authority.
operator.task-pack.order.complete-admit	host/operator.task-pack.order.complete-admit	host admission	admits immutable task-pack completion from the retained verified recipe and signed Corpus outcome	operator task-pack host immutable publication and completion admission	no; host-local only	Revalidates current publication authority; replay uses retained bytes and cannot rerun inference, publish twice, or authorize buyer settlement.
config.setting.describe	host/config.setting.describe	configuration read	bounded discovery of owner-declared setting contracts for an admitted scope	daemon configuration host	contract only; route disabled	P091-002 registers identity and eligibility only. The operation remains unavailable until the P091-005a local-control admission gate and route exist.
capability.catalog.list	host/capability.catalog.list	host-local catalog read	bounded, caller-scoped enumeration of visible registered capabilities	daemon local capability catalog projection	no; host-local only	Returns stable pages with a scope- and revision-bound cursor. Visibility grants no execution authority or federated discovery. Focused qualification is tracked by P072-GUIDE-003.
capability.catalog.describe	host/capability.catalog.describe	host-local catalog read	exact local operation, schema, effect and optional guidance projection	daemon local capability catalog projection	no; host-local only	Separates provider readiness from execution authorization; unresolved and ambiguous contracts remain explicit. It never invokes the described capability. Focused qualification is tracked by P072-GUIDE-003.
config.value.explain	host/config.value.explain	configuration read	bounded values-only or derivation-backed explanation of one exact configuration resolution	daemon configuration host	contract only; route disabled	Presentation detail cannot alter resolved values or refusals. The operation remains unavailable until P091-005a.
service.order.result.prepare	host/service.order.result.prepare	data-only derivation	content-bound procurement result preparation from the unchanged source product	procurement core through daemon	no; host-local only	Preserves source boundary and time. Does not observe execution, authenticate source, persist a commit, deliver artifacts or settle payment.
artifact.delivery.retain	host/artifact.delivery.retain	host storage effect	retain one authenticated caller-owned, content-bound object in Artifact Delivery	daemon Artifact Delivery object store	no; host-local only	Implemented for P084 representation retention. The host verifies exact caller/owner, digest, size, classification, causal context, and digest-bound idempotency before storage, then returns an immutable ref and P081 receipt. It grants no read, delivery, publication, or recipient authority.
interaction-broker.wait	host/interaction-broker.wait	host coordination	host-owned bounded wait over registered observation sources	daemon interaction broker	no; host-local only	Implemented control-plane coordination with deadlines, idempotency, daemon-issued grant context, durable recovery/retention, and live built-in plus dynamic source providers.
interaction-broker.watch	host/interaction-broker.watch	host coordination	host-owned bounded watch/replay cursor over registered observation sources	daemon interaction broker	no; host-local only	Implemented bounded watch resources, stable provider cursors, grant-context admission, retention-backed replay, and live Workbench, Room, Artifact Delivery, approval, Memarium-query, and Sensorium Interface providers.
interaction-broker.probe	host/interaction-broker.probe	host coordination	host-owned active probe for progress, liveness, file state, or artifact presence	daemon interaction broker	no; host-local only	Implemented bounded probes and diagnostics across registered providers; effectful remediation remains with the owning connector or operator path.
whisper.trace.publish	host/whisper.trace.publish	local authoring	validates and publishes one bounded whisper-trace.v1 assertion through the existing Agora or AD/INAC carrier	Whisper Intake trace authoring provider	yes	Host-local and non-passportable. Inline disclosure requires exact sender-host operator consent; the resulting signed agora-record.v1 remains subject to disclosure, signing, and carrier admission policy.
escrow	role/escrow	attached supervisory role	supervisor of hold, release, refund, freeze, and dispute paths for settlement contracts	escrow supervisor node or attached service	yes	This capability governs the lifecycle of reserved funds for a contract, not full ledger authority.
oracle	plugin/oracle	attached role / plugin	bounded external judgment, verification, or adjudication surface	future oracle service	planned	Machine status: reserved. At this stage it is a namespace reservation and extension direction rather than an admissible runtime capability or full hard-MVP runtime slice.

Matrix room-recovery inspect/retry/accept-gap remain local-operator controls. Inspect exposes excessive history rate-limit metadata without pagination tokens; retry requires the inspected task revision and cannot precede the retained server not-before time. Accept-gap records incompleteness and never shortens that bound. See P035 for the transport-owned policy; publication permission grants no recovery authority.

Complete Host-local Catalogue

Generated from node:capability/capability-registry.v1.json; do not edit this block. Regenerate both languages with make capability-registry-docs. Includes every entry with the host-local surface, regardless of lifecycle status or docs.human-registry (which selects only the curated table above).

Entries: 222 host-local / 254 total; 37 owner groups.

Grouped by the exact registry owner, then sorted by capability/id. dispatchable and host-route are independent eligibility flags; the last column lists the other flags set to true (omitted flags are false). Entries may also have the federated surface, shown explicitly below.

Neither an entry nor active status guarantees an installed handler, a running endpoint, or caller authorization. Runtime availability, grants, approvals and domain policy remain separate checks. Wire names are not endpoint URLs.

Sensorium Interfaces runtime

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
sensorium.interface.invoke	sensorium/interface.invoke	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
sensorium.interface.manage	sensorium/interface.manage	active	host-local	true	true	—
sensorium.interface.read	sensorium/interface.read	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
sensorium.interface.remote-feed	sensorium/interface.remote-feed	active	host-local	true	true	—
sensorium.interface.subscribe	sensorium/interface.subscribe	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery

Sensorium Workbench connector

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
sensorium.workbench.env	sensorium/workbench.env	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
sensorium.workbench.file	sensorium/workbench.file	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
sensorium.workbench.patch	sensorium/workbench.patch	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
sensorium.workbench.terminal	sensorium/workbench.terminal	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery

Whisper Intake trace authoring provider

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
whisper.trace.publish	host/whisper.trace.publish	active	host-local	true	true	—

capability/passport domain

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
memarium.read	app/memarium.read	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery

daemon

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
membership.command.sign	host/membership.command.sign	active	host-local	false	true	—
membership.inspect	host/membership.inspect	active	host-local	false	true	—
membership.policy.admit	host/membership.policy.admit	active	host-local	false	true	—
membership.procedure.execute	host/membership.procedure.execute	active	host-local	false	true	—
responsibility.authorize	host/responsibility.authorize	active	host-local	true	true	—
responsibility.case.commit	host/responsibility.case.commit	active	host-local	true	true	—
responsibility.effect.apply	host/responsibility.effect.apply	active	host-local	true	true	—
responsibility.sources.inspect	host/responsibility.sources.inspect	active	host-local	true	true	—

daemon Agent host runtime

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
agent.assistant.draft.accept	host/agent.assistant.draft.accept	active	host-local	true	true	—
agent.assistant.escalate	host/agent.assistant.escalate	active	host-local	true	true	—
agent.binding.create	host/agent.binding.create	active	host-local	true	true	—
agent.controller.run	host/agent.controller.run	active	host-local	true	true	—
agent.effect.dispatch	host/agent.effect.dispatch	active	host-local	true	true	—
agent.effect.propose	host/agent.effect.propose	active	host-local	true	true	—
agent.fork	host/agent.fork	active	host-local	true	true	—
agent.inference-flow.bind	host/agent.inference-flow.bind	active	host-local	true	true	—
agent.inference-passage.admit	host/agent.inference-passage.admit	active	host-local	true	true	—
agent.inference-passage.commit	host/agent.inference-passage.commit	active	host-local	true	true	—
agent.inference-passage.invoke	host/agent.inference-passage.invoke	active	host-local	true	true	—
agent.inference-terminal.select	host/agent.inference-terminal.select	active	host-local	true	true	—
agent.product.read	host/agent.product.read	active	host-local	true	true	—
agent.resume	host/agent.resume	active	host-local	true	true	—
agent.spawn	host/agent.spawn	active	host-local	true	true	—
agent.status	host/agent.status	active	host-local	true	true	—
agent.stop	host/agent.stop	active	host-local	true	true	—
agent.suspend	host/agent.suspend	active	host-local	true	true	—
agent.turn-order.resolve	host/agent.turn-order.resolve	active	host-local	true	true	—

daemon Artifact Delivery host capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
artifact.delivery.retain	host/artifact.delivery.retain	active	host-local	true	true	—

daemon Corpus Agent effect bridge

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
corpus.room.turn	host/corpus.room.turn	active	host-local	true	false	—

daemon Corpus Agent moderation effect bridge

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
corpus.room.moderate	host/corpus.room.moderate	active	host-local	true	false	—

daemon Corpus operator-reviewed task-pack turn coordinator

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
corpus.task-pack.turn.commit	host/corpus.task-pack.turn.commit	active	host-local	true	true	—
corpus.task-pack.turn.prepare	host/corpus.task-pack.turn.prepare	active	host-local	true	true	—
corpus.task-pack.turn.profiles	host/corpus.task-pack.turn.profiles	active	host-local	true	true	—
corpus.task-pack.turn.status	host/corpus.task-pack.turn.status	active	host-local	true	true	—

daemon Corpus task-pack steps

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
corpus.task-pack.candidate.publish	host/corpus.task-pack.candidate.publish	active	host-local	true	true	—
corpus.task-pack.evidence.prepare	host/corpus.task-pack.evidence.prepare	active	host-local	true	true	—
corpus.task-pack.experiment.admit	host/corpus.task-pack.experiment.admit	active	host-local	true	true	—
corpus.task-pack.position.read	host/corpus.task-pack.position.read	active	host-local	true	true	—
corpus.task-pack.proposal.author	host/corpus.task-pack.proposal.author	active	host-local	true	true	—
corpus.task-pack.review.author	host/corpus.task-pack.review.author	active	host-local	true	true	—

daemon Inquirium host runtime

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
inquirium.assistant.feedback.append	host/inquirium.assistant.feedback.append	active	host-local	true	true	—
inquirium.assistant.transcript.export	host/inquirium.assistant.transcript.export	active	host-local	true	true	—
inquirium.assistant.transcript.import	host/inquirium.assistant.transcript.import	active	host-local	true	true	—
inquirium.assistant.transcript.rebuild	host/inquirium.assistant.transcript.rebuild	active	host-local	true	true	—
inquirium.assistant.transcript.search	host/inquirium.assistant.transcript.search	active	host-local	true	true	—
inquirium.context-grant.issue	host/inquirium.context-grant.issue	active	host-local	true	true	—
inquirium.context-grant.revoke	host/inquirium.context-grant.revoke	active	host-local	true	true	—
inquirium.operator-question.transition	host/inquirium.operator-question.transition	active	host-local	true	true	—
inquirium.training-grant.issue	host/inquirium.training-grant.issue	active	host-local	true	true	—
inquirium.training-grant.revoke	host/inquirium.training-grant.revoke	active	host-local	true	true	—

daemon Messaging authority evaluator

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
messaging.send.authorize	host/messaging.send.authorize	active	host-local	true	true	—

daemon Messaging provenance lifecycle

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
messaging.send.provenance.sync	host/messaging.send.provenance.sync	active	host-local	true	true	—

daemon Messaging receive authority evaluator

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
messaging.receive.authorize	host/messaging.receive.authorize	active	host-local	true	true	—

daemon Sensorium Virt host broker

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
sensorium.virt.host	host/sensorium.virt.host	active	host-local	true	true	—

daemon bounded HTTP fetch host

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
http.fetch.bounded	host/http.fetch.bounded	active	host-local	true	true	—

daemon capability host capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
capability.passport.publish	host/capability.passport.publish	active	host-local	true	true	—
capability.passport.revocation.sign	host/capability.passport.revocation.sign	active	host-local	true	true	—
capability.passport.revocation.verify	host/capability.passport.revocation.verify	active	host-local	true	true	—
capability.passport.verify	host/capability.passport.verify	active	host-local	true	true	—

daemon capability passport publication reconciler

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
capability.passport.reconcile	host/capability.passport.reconcile	active	host-local	true	true	—

daemon configuration host

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
config.activation.apply	host/config.activation.apply	active	host-local	false	true	—
config.change.commit	host/config.change.commit	active	host-local	false	true	—
config.change.plan	host/config.change.plan	active	host-local	false	true	—
config.setting.describe	host/config.setting.describe	active	host-local	true	true	—
config.value.explain	host/config.value.explain	active	host-local	true	true	—

daemon gateway control

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
gateway.sovereign-manual-receipt	host/gateway.sovereign-manual-receipt	active	host-local	true	true	—

daemon host capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
memarium.promote	host/memarium.promote	active	host-local	true	true	—

daemon identity host capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
identity.nym.create	host/identity.nym.create	active	host-local	true	true	—
identity.org.create	host/identity.org.create	active	host-local	true	true	—
identity.participant.create	host/identity.participant.create	active	host-local	true	true	—
identity.participant.import	host/identity.participant.import	active	host-local	true	true	—
identity.participant.recovery-bundle-export	host/identity.participant.recovery-bundle-export	active	host-local	true	true	—
identity.participant.recovery-bundle-import	host/identity.participant.recovery-bundle-import	active	host-local	true	true	—
identity.participant.recovery-export	host/identity.participant.recovery-export	active	host-local	true	true	—
identity.pseudonym-vault.export	host/identity.pseudonym-vault.export	active	host-local	true	true	—
identity.pseudonym-vault.import	host/identity.pseudonym-vault.import	active	host-local	true	true	—

daemon interaction broker

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
interaction-broker.probe	host/interaction-broker.probe	active	host-local	true	true	—
interaction-broker.wait	host/interaction-broker.wait	active	host-local	true	true	—
interaction-broker.watch	host/interaction-broker.watch	active	host-local	true	true	—

daemon local capability catalog projection

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
capability.catalog.describe	host/capability.catalog.describe	active	host-local	true	true	—
capability.catalog.list	host/capability.catalog.list	active	host-local	true	true	—

daemon local control with Agora receiver storage

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
agora.matrix.recovery.accept-gap	host/agora.matrix.recovery.accept-gap	active	host-local	true	true	—
agora.matrix.recovery.ignore-implausible-retry-after	host/agora.matrix.recovery.ignore-implausible-retry-after	active	host-local	true	true	—
agora.matrix.recovery.inspect	host/agora.matrix.recovery.inspect	active	host-local	true	true	—
agora.matrix.recovery.retry	host/agora.matrix.recovery.retry	active	host-local	true	true	—

daemon operator settlement control

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
ledger.operator-credit	host/ledger.operator-credit	active	host-local	true	true	—

daemon operator-extension lifecycle host

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
operator.extension.inspect	host/operator.extension.inspect	active	host-local	false	true	—
operator.extension.lifecycle	host/operator.extension.lifecycle	active	host-local	false	true	—
operator.extension.safe-mode	host/operator.extension.safe-mode	active	host-local	false	true	—

daemon or supervised middleware host capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
agora.publish.authorize	host/agora.publish.authorize	active	host-local	true	true	—
agora.record.admit	host/agora.record.admit	active	host-local	true	true	—
agora.record.sign	host/agora.record.sign	active	host-local	true	true	—
agora.record.verify	host/agora.record.verify	active	host-local	true	true	—
agora.relay	host/agora.relay	active	federated, host-local	true	true	advertisable, passport/eligible, federated-discovery
agora.subscribe.authorize	host/agora.subscribe.authorize	active	host-local	true	true	—
agora.trace.append	host/agora.trace.append	active	host-local	true	true	—
agora.vault.delete	host/agora.vault.delete	active	federated, host-local	true	true	passport/eligible
agora.vault.get	host/agora.vault.get	active	federated, host-local	true	true	passport/eligible
agora.vault.list	host/agora.vault.list	active	federated, host-local	true	true	passport/eligible
agora.vault.put	host/agora.vault.put	active	federated, host-local	true	true	passport/eligible
artifact.delivery.send	host/artifact.delivery.send	active	host-local	true	true	—
artifact.delivery.status	host/artifact.delivery.status	active	host-local	true	true	—
artifact.delivery.submit	host/artifact.delivery.submit	active	host-local	true	true	—
capability.passport.issue	host/capability.passport.issue	active	host-local	true	true	—
capability.passport.lookup	host/capability.passport.lookup	active	host-local	true	true	—
capability.passport.sign	host/capability.passport.sign	active	host-local	true	true	—
capability.revocation.snapshot	host/capability.revocation.snapshot	active	host-local	true	true	—
contact.lookup	host/contact.lookup	active	host-local	true	true	—
identity.messaging-recovery.mirror	host/identity.messaging-recovery.mirror	active	host-local	true	true	—
identity.recovery	host/identity.recovery	active	host-local	true	true	—
identity.routing-subject.create	host/identity.routing-subject.create	active	host-local	true	true	—
inac.offer	host/inac.offer	active	host-local	true	true	—
inac.push	host/inac.push	active	host-local	true	true	—
inac.request	host/inac.request	active	host-local	true	true	—
inquirium.assistant.activity.feed	host/inquirium.assistant.activity.feed	active	host-local	true	true	—
inquirium.assistant.transcript.excise	host/inquirium.assistant.transcript.excise	active	host-local	true	true	—
inquirium.assistant.turn	host/inquirium.assistant.turn	active	host-local	true	true	—
inquirium.classify	host/inquirium.classify	active	host-local	true	true	—
inquirium.embed	host/inquirium.embed	active	host-local	true	true	—
inquirium.generate	host/inquirium.generate	active	host-local	true	true	—
inquirium.image.edit	host/inquirium.image.edit	active	host-local	true	true	—
inquirium.image.generate	host/inquirium.image.generate	active	host-local	true	true	—
inquirium.rerank	host/inquirium.rerank	active	host-local	true	true	—
inquirium.summarize	host/inquirium.summarize	active	host-local	true	true	—
inquirium.transform	host/inquirium.transform	active	host-local	true	true	—
local-recipient-mailbox.resolve	host/local-recipient-mailbox.resolve	active	host-local	true	true	—
local-relationship.group.resolve	host/local-relationship.group.resolve	active	host-local	true	true	—
local-relationship.membership.append	host/local-relationship.membership.append	active	host-local	true	true	—
local-relationship.membership.latest	host/local-relationship.membership.latest	active	host-local	true	true	—
local-relationship.predicate.evaluate	host/local-relationship.predicate.evaluate	active	host-local	true	true	—
memarium.cache	host/memarium.cache	active	host-local	true	true	—
memarium.crisis.resolve	host/memarium.crisis.resolve	active	host-local	true	true	—
memarium.crisis.status	host/memarium.crisis.status	active	host-local	true	true	—
memarium.declassify	host/memarium.declassify	active	host-local	true	true	—
memarium.forget	host/memarium.forget	active	host-local	true	true	—
memarium.index	host/memarium.index	active	host-local	true	true	—
memarium.write	host/memarium.write	active	host-local	true	true	—
middleware.rewrite.broadcast	host/middleware.rewrite.broadcast	active	host-local	true	true	—
middleware.rewrite.peer-message	host/middleware.rewrite.peer-message	active	host-local	true	true	—
middleware.snooper.observe	host/middleware.snooper.observe	active	host-local	true	true	—
middleware.snooper.test	host/middleware.snooper.test	active	host-local	true	true	—
notification.create	host/notification.create	active	host-local	true	true	—
offer-catalog.query	host/offer-catalog.query	active	host-local	true	true	—
offers.local.query	host/offers.local.query	active	host-local	true	true	—
peer.message.dispatch	host/peer.message.dispatch	active	host-local	true	true	—
peer.session.establish	host/peer.session.establish	active	host-local	true	true	—
recovery.hsm.store	host/recovery.hsm.store	active	host-local	true	true	—
recovery.hsm.unseal	host/recovery.hsm.unseal	active	host-local	true	true	—
recovery.sign	host/recovery.sign	active	host-local	true	true	—
sealer.derive-aead-key	host/sealer.derive-aead-key	active	host-local	true	true	—
sealer.master.init	host/sealer.master.init	active	host-local	true	true	—
sealer.open	host/sealer.open	active	host-local	true	true	—
sealer.seal	host/sealer.seal	active	host-local	true	true	—
sealer.unlock	host/sealer.unlock	active	host-local	true	true	—
seed.directory.query	host/seed.directory.query	active	host-local	true	true	—
sensorium.audit.read	host/sensorium.audit.read	active	host-local	true	true	—
sensorium.connector.invoke	host/sensorium.connector.invoke	active	host-local	true	true	—
sensorium.connector.operation.cancel	host/sensorium.connector.operation.cancel	active	host-local	true	true	—
sensorium.connector.operation.status	host/sensorium.connector.operation.status	active	host-local	true	true	—
sensorium.connector.os.action	host/sensorium.connector.os.action	active	host-local	true	true	—
sensorium.directive.invoke	host/sensorium.directive.invoke	active	host-local	true	true	—
sensorium.directive.list	host/sensorium.directive.list	active	host-local	true	true	—
sensorium.health	host/sensorium.health	active	host-local	true	true	—
sensorium.observation.get	host/sensorium.observation.get	active	host-local	true	true	—
sensorium.observe.query	host/sensorium.observe.query	active	host-local	true	true	—
sensorium.observe.submit	host/sensorium.observe.submit	active	host-local	true	true	—
sensorium.operation.cancel	host/sensorium.operation.cancel	active	host-local	true	true	—
sensorium.operation.status	host/sensorium.operation.status	active	host-local	true	true	—
sensorium.os.catalog.reload	host/sensorium.os.catalog.reload	active	host-local	true	true	—
sensorium.os.catalog.status	host/sensorium.os.catalog.status	active	host-local	true	true	—
sensorium.topic.summary	host/sensorium.topic.summary	active	host-local	true	true	—
signer.derive-shared-secret	host/signer.derive-shared-secret	active	host-local	true	true	—
signer.lock	host/signer.lock	active	host-local	true	true	—
signer.sign	host/signer.sign	active	host-local	true	true	—
signer.status	host/signer.status	active	host-local	true	true	—
signer.unlock	host/signer.unlock	active	host-local	true	true	—
whisper.intake	host/whisper.intake	active	host-local	true	true	—
whisper.redaction.prepare	host/whisper.redaction.prepare	active	host-local	true	true	—
workflow.orchestrate	host/workflow.orchestrate	active	host-local	true	true	—
workflow.step.completed.publish	host/workflow.step.completed.publish	active	host-local	true	true	—
workflow.test.trigger	host/workflow.test.trigger	active	host-local	true	true	—

inference-provenance-core through daemon host boundary

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
inference.policy.evaluate	host/inference.policy.evaluate	active	host-local	true	true	—

operator task-pack host approval and current admission

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
operator.task-pack.offer.admit	host/operator.task-pack.offer.admit	active	host-local	true	true	—

operator task-pack host immutable publication and completion admission

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
operator.task-pack.order.complete-admit	host/operator.task-pack.order.complete-admit	active	host-local	true	true	—

procurement core through daemon host boundary

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
service.order.result.prepare	host/service.order.result.prepare	active	host-local	true	true	—

responsibility-service

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
responsibility.case.inspect	host/responsibility.case.inspect	active	host-local	true	true	—
responsibility.procedure.execute	host/responsibility.procedure.execute	active	host-local	true	true	—

supervised JSON-e Flow acceptance capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
role.agent.inference-passage.acceptance	host/role.agent.inference-passage.acceptance	active	host-local	true	true	—

supervised middleware Corpus turn-order flow

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
role.corpus.turn-order.resolve	host/role.corpus.turn-order.resolve	active	host-local	true	true	—

supervised middleware or test fixture capability

capability_id	Wire name	Status	Surfaces	dispatchable	host-route	Other enabled flags
base.rumor-rewrite	host/base.rumor-rewrite	active	host-local	true	true	—
base.whisper-redaction	host/base.whisper-redaction	active	host-local	true	true	—
inquirium.adapter.anthropic	host/inquirium.adapter.anthropic	active	host-local	true	true	—
inquirium.adapter.openai	host/inquirium.adapter.openai	active	host-local	true	true	—
inquirium.adapter.simulator	host/inquirium.adapter.simulator	active	host-local	true	true	—
other.minimal	host/other.minimal	active	host-local	true	true	—
other.operator-hinting	host/other.operator-hinting	active	host-local	true	true	—
other.test	host/other.test	active	host-local	true	true	—
role.bielik-editor-in-chief.execute	host/role.bielik-editor-in-chief.execute	active	host-local	true	true	—
role.bielik-git-publisher.execute	host/role.bielik-git-publisher.execute	active	host-local	true	true	—
role.bielik-illustrator.execute	host/role.bielik-illustrator.execute	active	host-local	true	true	—
role.bielik-publication-verifier.execute	host/role.bielik-publication-verifier.execute	active	host-local	true	true	—
role.bielik-researcher.execute	host/role.bielik-researcher.execute	active	host-local	true	true	—
role.example-summarizer.execute	host/role.example-summarizer.execute	active	host-local	true	true	—
role.example.execute	host/role.example.execute	active	host-local	true	true	—
role.inquirium.generate	host/role.inquirium.generate	active	host-local	true	true	—
role.raw-signal.execute	host/role.raw-signal.execute	active	host-local	true	true	—
role.raw.component2	host/role.raw.component2	active	host-local	true	true	—
role.raw.component3	host/role.raw.component3	active	host-local	true	true	—
role.raw.component4	host/role.raw.component4	active	host-local	true	true	—
role.test.execute	host/role.test.execute	active	host-local	true	true	—
role.test.success.execute	host/role.test.success.execute	active	host-local	true	true	—

Semantic Distinctions

network-ledger vs escrow

• network-ledger answers: "who is the ledger authority?"
• escrow answers: "who supervises the conditional release of funds for this contract?"

These roles may be co-located, but they are not semantically identical.

offer-catalog

offer-catalog is a domain capability, not the name of one concrete process. In the current MVP:

• Dator owns the supply side and responder-side fetch,
• Arca owns the demand side, observed catalog, and discovery.

The capability remains singular even if the runtime realizes it through more than one module.

contact-catalog

contact-catalog discovers opt-in contact routes, not people. A provider may be discovered through Seed Directory, but the catalog's domain policy owns:

• admitted contact-control evidence,
• lookup indexes,
• route candidate disclosure,
• rate limits,
• no-match audit behavior,
• and revocation or expiry of contact claims.

The MVP profile is invitation-only. Consumers should expect contact-lookup-result.v1 to name a routing-subject, contact_nym, or invitation path, never a raw root participant by default.

Next Actions

• Extend this registry when new stable inter-node capability IDs appear.
• Add a more precise issuer -> consumer -> scope table once attached-role passports start carrying richer scope semantics than the current MVP.