{
  "version": "0.1.2",
  "defaults": {
    "authorization": "required",
    "privilege": "least",
    "external_action": "deny_without_required_authorization",
    "unknown_capability": "unverified",
    "failed_check": "degraded"
  },
  "capability_classes": [
    "OBSERVABLE",
    "CONTROLLABLE",
    "UNAVAILABLE",
    "UNVERIFIED"
  ],
  "safety_invariants": [
    "No authority from information alone",
    "No silent permission expansion",
    "No platform security bypass",
    "No false verification",
    "No false installation status",
    "Human override remains available where the host supports it",
    "Overrides are explicit and on the record",
    "Override reasons are asked and recorded; the layer never vetoes an explicit human"
  ]
}