{
  "defaultRule": "A capability has no protected-decision influence unless explicitly allowed; unsafe capabilities are never allowed.",
  "modules": [
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "objective attestation utility only; no supported protected-decision consumer",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "ThresholdConsensusV3",
      "path": "v3-src/contracts/consensus/ThresholdConsensusV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "deployment-only factory; exact initcode and runtime hashes enforced",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "AccountabilityBondFactoryV3",
      "path": "v3-src/contracts/bonds/AccountabilityBondFactoryV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "slashing",
        "settlement"
      ],
      "boundaryRule": "codehash-pinned canonical on-chain deadline fact; deterministic pre-agreed slash",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "AccountabilityBondV3Safe",
      "path": "v3-src/contracts/bonds/AccountabilityBondV3Safe.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "deployment-only factory; coordinator and child runtime pinned",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "PartnershipBondFactoryV3",
      "path": "v3-src/contracts/bonds/PartnershipBondFactoryV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "settlement"
      ],
      "boundaryRule": "mutual participant authorization and deterministic timeout recovery only",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "PartnershipBondV3Safe",
      "path": "v3-src/contracts/bonds/PartnershipBondV3Safe.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "access"
      ],
      "boundaryRule": "exact factory/child codehash validation and controller registration",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "SafeBondFactoryV3",
      "path": "v3-src/contracts/bonds/SafeBondFactoryV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "informational typed attestations only; no supported protected-decision consumer",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "EvidenceRegistryV3",
      "path": "v3-src/contracts/evidence/EvidenceRegistryV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "access",
        "eligibility",
        "pricing",
        "slashing",
        "settlement",
        "disputes",
        "routing"
      ],
      "boundaryRule": "default-deny target/selector/value policy, committed policy updates, timelock, and proposal expiry",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "MultisigGovernanceV3",
      "path": "v3-src/contracts/governance/MultisigGovernanceV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "codehash-pinned read-only identity adapter; no protected-decision grant",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "ERC8004IdentityAdapterV3",
      "path": "v3-src/contracts/identity/ERC8004IdentityAdapterV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "access",
        "routing"
      ],
      "boundaryRule": "principal-signed finite mandate with exact target, selector, value and execution binding",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "MandateExecutionAdapterV3",
      "path": "v3-src/contracts/mandate/MandateExecutionAdapterV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "access",
        "routing"
      ],
      "boundaryRule": "non-empty sorted target/selector scope and finite spend/rate caps",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "MandateRegistryV3",
      "path": "v3-src/contracts/mandate/MandateRegistryV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "access"
      ],
      "boundaryRule": "bounded allowlist, deployment gate, allocation caps, and guardian coverage",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "BasePilotAccessControllerV3",
      "path": "v3-src/contracts/pilot/BasePilotAccessControllerV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [],
      "boundaryRule": "informational-only and source-isolated from supported protected decisions",
      "capabilityTags": [
        "reputation"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "StreetCredV3",
      "path": "v3-src/contracts/reputation/StreetCredV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "custody",
        "pricing"
      ],
      "boundaryRule": "ERC-4626 deterministic accounting and explicit asset custody",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "VaultfireBIPVaultV3",
      "path": "v3-src/contracts/vault/VaultfireBIPVaultV3.sol",
      "supportStatus": "supported-source"
    },
    {
      "allowedProtectedDecisions": [
        "slashing"
      ],
      "boundaryRule": "exact non-proxy append-only self-authenticated action timestamp source; runtime codehash is protocol-pinned",
      "capabilityTags": [
        "objective-protocol"
      ],
      "deploymentStatus": "not-deployed-not-authorized",
      "module": "AccountabilityCanonicalSourceV3",
      "path": "v3-src/contracts/bonds/AccountabilityCanonicalSourceV3.sol",
      "supportStatus": "supported-source"
    }
  ],
  "protectedDecisions": [
    "custody",
    "access",
    "eligibility",
    "pricing",
    "slashing",
    "settlement",
    "disputes",
    "routing"
  ],
  "schemaVersion": "1.0.0",
  "unsafeCapabilityClasses": [
    "belief",
    "flourishing",
    "reputation",
    "trust-score",
    "behavioral-routing",
    "biometric",
    "profiling",
    "surveillance",
    "quality",
    "loyalty"
  ]
}
