Capabilities
What she can reach, and the authority behind each capability.
Phase 10
Sandbox are not implemented
Memory search and owner correction already exist. Explicit registry authority and server manifests arrive after the Phase 4 gate; workers and sandbox follow later.