avorelo 0.3.8 → 0.4.0-rc.2

package/scripts/lib/capability-kernel-registry.js

@@ -0,0 +1,566 @@
+"use strict";
+
+/**
+ * Capability Kernel Registry — static registry of all Avorelo capabilities.
+ *
+ * Each entry is a capability manifest following avorelo.capabilityManifest.v1.
+ * This registry is the single source of truth for the kernel audit layer.
+ * It does not rewrite capability internals — it maps them.
+ */
+
+const { buildManifest } = require("./capability-manifest");
+
+const CAPABILITIES = [
+  // ─── 1. Activation / Hook Readiness ───
+  buildManifest({
+    id: "activation.hook-readiness",
+    name: "Activation / Hook Readiness",
+    category: "activation",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "local_write",
+    triggers: ["session_start", "avorelo_activate", "avorelo_doctor"],
+    antiTriggers: ["no_claude_code_detected"],
+    inputSignals: ["host_detection", "hook_config_state", "adapter_readiness"],
+    allowedActions: ["detect_environment", "check_hooks", "repair_hooks", "write_activation_receipt"],
+    forbiddenActions: ["modify_user_code", "upload_data", "external_network"],
+    policy: {
+      defaultDecision: "allow",
+      requiresApprovalWhen: ["hook_write_to_user_config"],
+      blocksWhen: ["no_host_detected"],
+    },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "fixed", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    budgets: { maxFilesScanned: 50, maxFileBytes: 65536, maxContextRefs: 5, maxRuntimeMs: 3000 },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/activation-runner.test.js", "tests/hook-contracts.test.js", "tests/adapter-conformance.test.js", "tests/activation-proof-surfaces.test.js"],
+    docs: ["docs/Agent-Activation-Hook-Readiness.md", "docs/releases/agent-activation-hook-readiness-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/seamless-activation-self-healing-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_ACTIVATION", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 2. Product Home / Activation Receipt ───
+  buildManifest({
+    id: "surfaces.product-home",
+    name: "Product Home / Activation Receipt",
+    category: "surfaces",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "local_write",
+    triggers: ["activation_complete", "session_start"],
+    inputSignals: ["activation_state", "capability_reports", "outcome_evidence"],
+    allowedActions: ["build_receipt", "write_receipt_json"],
+    forbiddenActions: ["upload_data", "modify_user_code"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["receipt", "report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/product-home-receipt.test.js", "tests/activation-proof-surfaces.test.js"],
+    docs: ["docs/releases/activation-receipt-product-home-contract-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/activation-reality-qa-first-value-readiness-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_PRODUCT_HOME", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 3. Managed Updates / Safe Repair ───
+  buildManifest({
+    id: "activation.safe-repair",
+    name: "Managed Updates / Safe Repair",
+    category: "activation",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "local_write",
+    triggers: ["activation_run", "doctor_run", "version_mismatch_detected"],
+    antiTriggers: ["fresh_install"],
+    inputSignals: ["install_state", "legacy_state_detected", "hook_config_state"],
+    allowedActions: ["migrate_state", "repair_hooks", "backup_config", "write_repair_report"],
+    forbiddenActions: ["delete_user_data", "upload_data", "external_network"],
+    policy: {
+      defaultDecision: "warn",
+      requiresApprovalWhen: ["destructive_migration"],
+      blocksWhen: ["unknown_state_format"],
+    },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "fixed", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/safe-repair.test.js", "tests/activation-runner.test.js"],
+    docs: ["docs/Managed-Updates-Safe-Repair.md", "docs/releases/managed-updates-safe-repair-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/seamless-activation-self-healing-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_SAFE_REPAIR", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 4. Scope Repair Before Approval ───
+  buildManifest({
+    id: "orchestration.scope-repair",
+    name: "Scope Repair Before Approval",
+    category: "orchestration",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["pre_approval_check", "boundary_mismatch_detected"],
+    inputSignals: ["governed_action_exposure_report", "boundary_ids"],
+    allowedActions: ["detect_scope_mismatch", "recommend_scope_reduction", "write_scope_report"],
+    forbiddenActions: ["modify_user_code", "auto_approve", "upload_data"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "fixed", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/scope-repair-before-approval.test.js"],
+    docs: ["docs/Scope-Repair-Before-Approval.md", "docs/releases/scope-repair-before-approval-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/scope-repair-before-approval-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_SCOPE_REPAIR", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 5. AI Waste / Cost-to-Outcome Signals ───
+  buildManifest({
+    id: "efficiency.cost-to-outcome",
+    name: "AI Waste / Cost-to-Outcome Signals",
+    category: "efficiency",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["session_end", "outcome_evidence_available"],
+    inputSignals: ["token_usage", "model_usage", "workflow_signals", "outcome_evidence"],
+    allowedActions: ["compute_cost_signals", "build_cost_report"],
+    forbiddenActions: ["upload_data", "modify_billing", "claim_dollar_savings"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt", "proof"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/cost-to-outcome-signals.test.js", "tests/context-savings-engine.test.js", "tests/operating-value.test.js"],
+    docs: ["docs/releases/ai-waste-cost-to-outcome-signals-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/ai-waste-cost-to-outcome-signals-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_COST_SIGNALS", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 6. AI Work Efficiency / Routing ───
+  buildManifest({
+    id: "efficiency.ai-work-routing",
+    name: "AI Work Efficiency / Routing",
+    category: "efficiency",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["session_start", "task_inferred"],
+    inputSignals: ["task_type", "model_profile", "context_budget", "changed_files"],
+    allowedActions: ["infer_task", "compute_routing_plan", "build_efficiency_report"],
+    forbiddenActions: ["upload_data", "modify_billing", "claim_dollar_savings"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    budgets: { maxFilesScanned: 2200, maxFileBytes: 262144, maxContextRefs: 10, maxRuntimeMs: 2000 },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/ai-work-efficiency-routing.test.js"],
+    docs: ["docs/ai-work-efficiency-routing.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/smart-work-routing-worker-handoff-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_AI_ROUTING", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 7. Workflow Intelligence Radar ───
+  buildManifest({
+    id: "orchestration.workflow-radar",
+    name: "Workflow Intelligence Radar",
+    category: "orchestration",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["session_end", "capability_reports_available"],
+    inputSignals: ["scope_repair_report", "safe_repair_report", "next_run_report", "outcome_evidence", "production_confidence_report"],
+    allowedActions: ["collect_signals", "build_radar_report"],
+    forbiddenActions: ["upload_data", "modify_user_code"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/workflow-intelligence-radar.test.js", "tests/workflow-signals.test.js"],
+    docs: ["docs/releases/workflow-intelligence-radar-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/workflow-intelligence-radar-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_WORKFLOW_RADAR", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 8. Next-Run Continuity ───
+  buildManifest({
+    id: "continuity.next-run",
+    name: "Next-Run Continuity",
+    category: "continuity",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "local_write",
+    triggers: ["session_end", "capability_reports_available"],
+    inputSignals: ["all_capability_reports", "reentry_memory", "outcome_evidence", "browser_proof", "workspace_hygiene"],
+    allowedActions: ["collect_carry_forward", "build_next_run_report", "write_report_json"],
+    forbiddenActions: ["upload_data", "modify_user_code", "auto_inject_model_context"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/next-run-continuity.test.js", "tests/next-run-context.test.js"],
+    docs: ["docs/releases/next-run-continuity-evidence-routing-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/operating-loop-value-surface-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_NEXT_RUN", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 9. Reentry Memory / Context Continuity ───
+  buildManifest({
+    id: "continuity.reentry-memory",
+    name: "Reentry Memory / Context Continuity",
+    category: "continuity",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "local_write",
+    triggers: ["session_end_capture", "session_start_retrieval"],
+    inputSignals: ["tool_outputs", "session_context", "user_patterns"],
+    allowedActions: ["capture_reentry_items", "retrieve_candidates", "write_memory_store"],
+    forbiddenActions: ["upload_data", "store_secrets", "store_raw_prompts", "auto_inject_model_context"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: ["sensitive_content_detected"] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved"], reasonCodesRequired: true, claimSafetyRequired: true },
+    budgets: { maxFilesScanned: 100, maxFileBytes: 4096, maxContextRefs: 10, maxRuntimeMs: 1000 },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/reentry-memory.test.js", "tests/canonical-reentry.test.js", "tests/learning-memory.test.js"],
+    docs: ["docs/reentry-memory.md", "docs/internal/reentry-memory-continuity-closure.md"],
+    dogfood: { required: true, artifactPath: "artifacts/reentry-memory/reentry-memory-continuity-closure.v2.json" },
+    rollback: { disableFlag: "AVORELO_DISABLE_REENTRY_MEMORY", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 10. Runtime Boundary / Agent Security ───
+  buildManifest({
+    id: "security.agent-runtime",
+    name: "Runtime Boundary / Agent Security",
+    category: "security",
+    status: "active",
+    riskTier: "high",
+    sideEffectLevel: "local_write",
+    triggers: ["pre_tool_use", "post_tool_use", "session_start"],
+    inputSignals: ["tool_action", "file_write_target", "mcp_action", "package_action", "instruction_risk"],
+    allowedActions: ["evaluate_action", "enforce_policy", "write_security_report", "block_unsafe_action"],
+    forbiddenActions: ["upload_data", "bypass_policy"],
+    policy: {
+      defaultDecision: "warn",
+      requiresApprovalWhen: ["external_write", "destructive_action", "unknown_mcp_tool"],
+      blocksWhen: ["secret_exfiltration", "forbidden_file_write", "high_risk_instruction"],
+    },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "audit"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "fixed", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: [
+      "tests/agent-security-enforcement.test.js",
+      "tests/agent-security-file-write.test.js",
+      "tests/agent-security-mcp.test.js",
+      "tests/agent-security-package.test.js",
+      "tests/agent-security-instruction-risk.test.js",
+      "tests/agent-access-governance.test.js",
+    ],
+    docs: ["docs/Threat-Model.md", "docs/Security-Pack.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/agent-access-governance-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_AGENT_SECURITY", failBehavior: "fail_closed_policy" },
+  }),
+
+  // ─── 11. Browser Proof / Browser Capability Governance ───
+  buildManifest({
+    id: "governance.browser-proof",
+    name: "Browser Proof / Browser Capability Governance",
+    category: "governance",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["browser_action_detected", "ui_change_detected"],
+    inputSignals: ["browser_proof_report", "adapter_readiness"],
+    allowedActions: ["preflight_check", "build_browser_proof_report", "governance_check"],
+    forbiddenActions: ["upload_screenshots", "capture_user_data"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: ["external_browser_action"], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "receipt", "proof"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/browser-proof-governed-workflow.test.js", "tests/browser-proof-preflight.test.js", "tests/browser-capability.test.js"],
+    docs: ["docs/Browser-Proof-Governed-Workflow.md", "docs/releases/browser-proof-governed-workflow-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/cross-host-adapter-readiness-browser-proof-preflight-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_BROWSER_PROOF", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 12. Governed Capability Intake / Quarantine ───
+  buildManifest({
+    id: "governance.capability-intake",
+    name: "Governed Capability Intake / Quarantine",
+    category: "governance",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "local_write",
+    triggers: ["skill_install", "mcp_tool_added", "capability_source_change"],
+    inputSignals: ["source_trust_score", "capability_metadata", "intake_risk_signals"],
+    allowedActions: ["quarantine_capability", "evaluate_trust", "promote_capability", "write_intake_report"],
+    forbiddenActions: ["auto_promote_untrusted", "upload_data"],
+    policy: {
+      defaultDecision: "warn",
+      requiresApprovalWhen: ["untrusted_source", "high_risk_capability"],
+      blocksWhen: ["malicious_source_detected"],
+    },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report", "audit"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "fixed", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/capability-intake-quarantine.test.js", "tests/capability-registry.test.js", "tests/skill-intake-security.test.js"],
+    docs: ["docs/Governed-Skill-MCP-Intake-Quarantine.md", "docs/releases/governed-skill-mcp-intake-quarantine-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/mcp-least-privilege-tool-risk-governance-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_CAPABILITY_INTAKE", failBehavior: "fail_closed_policy" },
+  }),
+
+  // ─── 13. Production Confidence ───
+  buildManifest({
+    id: "production-confidence.aggregate",
+    name: "Production Confidence",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["session_end", "dashboard_build"],
+    inputSignals: ["all_sub_guard_reports", "outcome_evidence", "workspace_hygiene"],
+    allowedActions: ["aggregate_guard_reports", "build_confidence_report"],
+    forbiddenActions: ["upload_data", "modify_user_code"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/production-confidence.test.js", "tests/production-confidence-guard-suite-completion.test.js"],
+    docs: ["docs/production-confidence.md", "docs/releases/production-confidence-layer-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/prelaunch-intelligence-layer-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_PRODUCTION_CONFIDENCE", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 14. Data & Permissions Guard ───
+  buildManifest({
+    id: "production-confidence.data-permissions",
+    name: "Data & Permissions Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["source_files", "permission_patterns"],
+    allowedActions: ["scan_data_permissions", "build_guard_report"],
+    forbiddenActions: ["modify_user_code", "upload_data"],
+    policy: { defaultDecision: "warn", requiresApprovalWhen: [], blocksWhen: ["credential_exposure_detected"] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/data-permissions-guard.test.js"],
+    docs: ["docs/releases/data-permissions-guard-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/data-permissions-guard-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_DATA_PERMISSIONS_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 15. Deployment & Environment Guard ───
+  buildManifest({
+    id: "production-confidence.deployment-environment",
+    name: "Deployment & Environment Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["deployment_config_files", "environment_patterns"],
+    allowedActions: ["scan_deployment_config", "build_guard_report"],
+    forbiddenActions: ["modify_deployment", "upload_data"],
+    policy: { defaultDecision: "warn", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/deployment-environment-guard.test.js"],
+    docs: ["docs/releases/deployment-environment-guard-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/deployment-environment-guard-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_DEPLOYMENT_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 16. Supply Chain & Dependency Integrity Guard ───
+  buildManifest({
+    id: "production-confidence.supply-chain",
+    name: "Supply Chain & Dependency Integrity Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["package_json", "lock_files", "dependency_patterns"],
+    allowedActions: ["scan_dependencies", "build_guard_report"],
+    forbiddenActions: ["modify_dependencies", "upload_data"],
+    policy: { defaultDecision: "warn", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/supply-chain-dependency-guard.test.js"],
+    docs: ["docs/releases/supply-chain-dependency-integrity-guard-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/skill-hygiene-routing-guard-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_SUPPLY_CHAIN_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 17. Observability & Recovery Guard ───
+  buildManifest({
+    id: "production-confidence.observability-recovery",
+    name: "Observability & Recovery Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["source_files", "logging_patterns", "recovery_patterns"],
+    allowedActions: ["scan_observability", "build_guard_report"],
+    forbiddenActions: ["modify_user_code", "upload_data"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/observability-recovery-guard.test.js"],
+    docs: ["docs/production-confidence-guard-suite.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/launch-hardening-failure-recovery-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_OBSERVABILITY_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 18. Cost & Abuse Guard ───
+  buildManifest({
+    id: "production-confidence.cost-abuse",
+    name: "Cost & Abuse Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["source_files", "rate_limit_patterns", "abuse_patterns"],
+    allowedActions: ["scan_cost_abuse_patterns", "build_guard_report"],
+    forbiddenActions: ["modify_user_code", "upload_data"],
+    policy: { defaultDecision: "warn", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/cost-abuse-guard.test.js"],
+    docs: ["docs/production-confidence-guard-suite.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/cost-abuse-guard-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_COST_ABUSE_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 19. Webhook & Idempotency Guard ───
+  buildManifest({
+    id: "production-confidence.webhook-idempotency",
+    name: "Webhook & Idempotency Guard",
+    category: "production-confidence",
+    status: "active",
+    riskTier: "medium",
+    sideEffectLevel: "read_only",
+    triggers: ["production_confidence_run"],
+    inputSignals: ["source_files", "webhook_patterns", "idempotency_patterns"],
+    allowedActions: ["scan_webhook_idempotency", "build_guard_report"],
+    forbiddenActions: ["modify_user_code", "upload_data"],
+    policy: { defaultDecision: "warn", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/webhook-idempotency-guard.test.js"],
+    docs: ["docs/production-confidence-guard-suite.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/webhook-idempotency-guard-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_WEBHOOK_GUARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 20. Workspace Hygiene ───
+  buildManifest({
+    id: "governance.workspace-hygiene",
+    name: "Workspace Hygiene",
+    category: "governance",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["session_start", "dashboard_build"],
+    inputSignals: ["workspace_files", "skill_configs", "hook_configs", "mcp_configs"],
+    allowedActions: ["scan_workspace", "build_hygiene_report"],
+    forbiddenActions: ["modify_user_code", "upload_data"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 1, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/governed-workspace-hygiene.test.js", "tests/ai-workspace-hygiene.test.js", "tests/skill-hygiene.test.js"],
+    docs: ["docs/Governed-Workspace-Hygiene.md", "docs/releases/governed-workspace-hygiene-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/ai-workspace-hygiene-capability-registry-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_WORKSPACE_HYGIENE", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 21. Outcome Evidence / Receipts / Value Ledger ───
+  buildManifest({
+    id: "evidence.outcome-stack",
+    name: "Outcome Evidence / Receipts / Value Ledger",
+    category: "evidence",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "local_write",
+    triggers: ["session_end", "proof_receipt_created", "value_ledger_update"],
+    inputSignals: ["token_usage", "tool_outputs", "workflow_signals", "proof_receipts"],
+    allowedActions: ["build_evidence_stack", "write_evidence_items", "build_value_ledger"],
+    forbiddenActions: ["upload_data", "store_raw_prompts", "store_secrets"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: ["forbidden_import_key_detected"] },
+    evidenceRequirements: { minimumRefs: 0, allowedRefTypes: ["report", "receipt", "proof"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "saved_or_proved"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: true, teams: false },
+    tests: ["tests/outcome-evidence-stack.test.js", "tests/proof-receipt.test.js", "tests/value-ledger.test.js", "tests/micro-proof.test.js"],
+    docs: ["docs/Outcome-Evidence-Stack.md", "docs/releases/outcome-evidence-stack-v1.md"],
+    dogfood: { required: true, artifactPath: "docs/dogfood/value-proof-hardening-dogfood.md" },
+    rollback: { disableFlag: "AVORELO_DISABLE_OUTCOME_EVIDENCE", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 22. Status / Dashboard / Product Home Surfaces ───
+  buildManifest({
+    id: "surfaces.status-dashboard",
+    name: "Status / Dashboard / Product Home Surfaces",
+    category: "surfaces",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["cco_status", "cco_dashboard", "session_start"],
+    inputSignals: ["all_capability_surfaces"],
+    allowedActions: ["aggregate_surfaces", "build_compact_output"],
+    forbiddenActions: ["upload_data", "modify_user_code"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: [], blocksWhen: [] },
+    evidenceRequirements: { minimumRefs: 0, allowedRefTypes: ["report"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found"], reasonCodesRequired: false, claimSafetyRequired: true },
+    surfaces: { productHome: true, status: true, dashboard: true, nextRun: false, teams: false },
+    tests: ["tests/cco-dashboard.test.js", "tests/status-dashboard.test.js", "tests/dashboard-value-contract.test.js"],
+    docs: ["docs/Dashboard-Spec.md"],
+    dogfood: { required: false, artifactPath: "" },
+    rollback: { disableFlag: "AVORELO_DISABLE_DASHBOARD", failBehavior: "fail_open_advisory" },
+  }),
+
+  // ─── 23. Public Website / Articles / Claims ───
+  buildManifest({
+    id: "surfaces.public-website",
+    name: "Public Website / Articles / Customer-Facing Claims",
+    category: "surfaces",
+    status: "active",
+    riskTier: "low",
+    sideEffectLevel: "read_only",
+    triggers: ["claim_safety_audit"],
+    inputSignals: ["public_article_files", "website_content"],
+    allowedActions: ["scan_claims", "flag_unsafe_claims"],
+    forbiddenActions: ["modify_published_content_without_review"],
+    policy: { defaultDecision: "allow", requiresApprovalWhen: ["public_claim_change"], blocksWhen: ["unsafe_claim_detected"] },
+    evidenceRequirements: { minimumRefs: 0, allowedRefTypes: ["audit"], rawDataAllowed: false },
+    outputContract: { outcomeTypes: ["found", "needs_attention"], reasonCodesRequired: true, claimSafetyRequired: true },
+    surfaces: { productHome: false, status: false, dashboard: false, nextRun: false, teams: false },
+    tests: ["tests/avorelo-website-readiness.test.js"],
+    docs: ["docs/articles/ai-built-saas-safe-to-ship.md"],
+    dogfood: { required: false, artifactPath: "" },
+    rollback: { disableFlag: "", failBehavior: "fail_open_advisory" },
+  }),
+];
+
+function getCapabilityRegistry() {
+  return CAPABILITIES;
+}
+
+function getCapabilityById(id) {
+  return CAPABILITIES.find((c) => c.id === id) || null;
+}
+
+function getCapabilitiesByCategory(category) {
+  return CAPABILITIES.filter((c) => c.category === category);
+}
+
+module.exports = {
+  CAPABILITIES,
+  getCapabilityRegistry,
+  getCapabilityById,
+  getCapabilitiesByCategory,
+};