59 capability areas, organized around six responsibilities. Explore the model without losing the boundaries.
Platform direction · release and integration qualification pending review
Try a broader term or a different pillar.
Discover and assign reviewed MCP servers, tools and versions. A catalog entry is not blanket action permission.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Review, release, pin and update skills and client-specific plugins with provenance and compatibility.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Manage supported model preferences and observed settings without pooling subscriptions or provider quotas.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Apply approved profiles across enrolled contexts while preserving unmanaged settings and independent authorization.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Pin artifact and profile revisions. Activate upgrades or rollbacks deliberately, not on every source edit.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Reuse reviewed runtime and deployment patterns with explicit prerequisites, ownership and approval.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Distribute managed settings and opaque credential references, never raw secrets in portable profiles.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Compare expected, approved, installed, loaded and observed state. Explain differences and precise unknowns.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Bound approved execution by qualified filesystem, network, credential, time and resource controls.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Identify agents through authenticated, server-bound principals rather than self-reported names.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Keep the authenticated human authorizer distinct from the client and executing agent.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Scope organization-owned identities for unattended workloads without permanent employee impersonation.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Limit operations and resources within the applicable tenant, project, application and environment.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Evaluate shared, versioned rules using trusted inputs. Distinguish observation, warnings, approval and enforcement.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Intersect policy, consent, delegated authority, resource permissions and plan eligibility.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Protect independently selected accounts and credentials, with scoped reauthorization and disconnection.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Grant bounded, expiring task or child-agent authority without widening the parent’s scope.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Preserve tenant and personal/business boundaries across reads, writes, sessions, caches and exports.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Apply organization-defined requirements through supported controls. Rules alone do not establish certification.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Check the exact actor, operation, target, connection and current authority before a protected effect.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Bind approvals to material inputs, resource, revision and expiry. Re-evaluate changed requests.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Constrain eligible tools and actions, and enforce those constraints on direct invocation.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Bound supported operations by concurrency, duration, size and rate at the actual execution point.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Track and constrain supported usage. Hard limits require enforceable reservations or provider controls.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Apply shared decisions through qualified adapters, including revocation and queued-work rechecks.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Bind effects to intended destinations and isolate owned execution resources from unrelated environments.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Preserve operation identity, reject material conflicts and avoid unsafe duplicate effects.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Retain scoped, attributable records of authority, relevant versions, execution state and bounded results.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Resolve an uncertain outcome using the original effect identity before considering a retry or recovery.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Correlate requests, decisions, approvals, attempts, workflows and receipts with scoped telemetry.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Inspect governed changes and actions through tenant-scoped history and declared retention.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Connect outcomes to source, release, permission basis and exercised enforcement boundaries.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Surface suspicious or unexpected patterns for review without turning risk scores into authority.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Reconstruct source-to-decision-to-effect lineage while preserving original evidence and privacy.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Inspect compatible history and simulate policy without repeating live external effects.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Read back actual state. A written configuration alone is not proof of synchronization.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Measure setup, adoption, drift resolution, action outcomes and approval burden.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Link investigation, scoped suspension and evidence-led recovery to appropriate authority.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Distinguish reachability, expiry, callable state, client freshness and observed runtime identity.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Track ownership, approved definitions, environment bindings and observed running state.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Separate editable drafts from approved, immutable revisions and their active consumers.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Establish supported resources and bindings through explicit ownership and verified enrollment.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Plan, review and activate changes with affected-consumer visibility and a rollback path.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Review governed releases and lifecycle transitions without granting blanket execution authority.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Replace supported credentials and bindings deliberately, accounting for consumer impact.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Pause intended governed use without deleting history or obscuring in-flight work.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Remove relevant authority, account for queued work and preserve independently authorized peers.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Identify affected consumers and supported replacements before retiring a version or integration.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Retire scoped resources while preserving required lineage and reconciling uncertain deletions.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Connect selected sources and deliberately publish and bind approved knowledge revisions.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Use scoped, derived retrieval indexes where needed. Stale or failed indexing cannot satisfy activation.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Carry sensitivity, ownership and intended-consumer labels into access and handling decisions.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Keep retrieval and context within declared boundaries. Separate sessions where isolation requires it.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Apply qualified redaction and data-handling controls without claiming perfect detection.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Check current grants, connection state, source permissions and release approval at retrieval boundaries.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Apply defined retention to each data class and verify supported deletion outcomes.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Trace released or retrieved context to its source, revision and transformation history.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Restrict supported outbound data paths and disclose what can actually be intercepted.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.
Share reviewed knowledge through explicit grants, purpose, audience and revision.
This capability is part of the platform direction. Availability, supported versions and enforcement mode must be qualified for the relevant release and integration. This catalog does not establish shipped status.