340 B
340 B
RFC-0008: Capability & Guard Framework
Status: Draft | Updated: 2026-02-17
Principle
Control plane is deterministic. Privileged actions require explicit capabilities and guards that validate structured evidence (ledger events), not prompt text.
Guarded actions
- session_spawn (RFC-0011)
- emit_guarded (RFC-0010)