A capability's policy lives in a module a second caller can load — the entry point may detect, never invoke

Every capability in this project reaches its four declared surfaces — CLI, daemon,