# RFC-0008: Capability & Guard Framework

**Status:** Draft \| **Updated:** 2026-02-17

## Principle

Control plane is deterministic. Privileged actions require explicit
capabilities and guards that validate structured evidence (ledger
events), not prompt text.

## Guarded actions

-   session_spawn (RFC-0011)
-   emit_guarded (RFC-0010)