Give an agent exactly one permission at a time
one move: minimize authority
Open the code pane immediately, then use the Spec tab, optional design question, tests, and artifact when you want them.
Finish each move before carrying the artifact forward.
Capability security makes authority explicit: a tool receives a narrowly scoped token instead of ambient filesystem or network access.
Deliverable: State the system invariant in one sentence.Issue and verify a token containing action, resource prefix, expiry, and nonce; reject mismatched or expired capabilities.
Deliverable: Type the deterministic core.A token cannot be widened, reused after expiry, or applied to a different resource prefix.
Deliverable: Record a normal case and a boundary case.Change the path prefix, advance the clock, replay a nonce, and request an unlisted action.
Deliverable: Name the failure signal and its guard.A capability policy with denial reasons and a sandbox boundary diagram.
Deliverable: Save the contract, evidence, and handoff note.A token cannot be widened, reused after expiry, or applied to a different resource prefix.
Change the path prefix, advance the clock, replay a nonce, and request an unlisted action.
A capability policy with denial reasons and a sandbox boundary diagram.
Deriva-authored extension beyond the supplied PDF. The five moves are Deriva’s implementation contract for this project.