Unclassified
Capability Execution Evidence Matrix — 2026-08-13
Status: Evidence inventory for v2.2 integration.
Rule: A declarative CapabilityRef is not a claim that a provider action is live.
Required proof chain
Spine/context eligibility
→ connector + schema validation
→ tenant/principal policy decision
→ optional dry-run / scoped approval
→ bounded handler
→ receipt + audit/evidence
→ reconciliation and projection refresh
The integration branch must mark a capability bound only when the complete chain is evidenced in source and focused tests. Otherwise it remains declaration-only.
Priority inventory
| Priority | Capability / contract | Current source evidence | Handler-to-reconciliation evidence | Status | Integration action |
|---|---|---|---|---|---|
| P0 | sales.deal.create | v2.2 packages/workbenches/src/sales/capabilities.ts; provider binding crm.opportunity.create; policy allowed | No matching binding/handler reference found in the source inspection. | declaration-only | Do not market as live; add adapter contract/test only when a real connector path is selected. |
| P0 | sales.deal.close | Same Sales manifest; approval_required | No matching provider handler or scoped-approval-to-receipt flow found for this declaration. | declaration-only | Highest candidate for an approval/reconciliation proof once a real bounded handler exists. |
| P0 | sales.quote.generate | Sales manifest; approval_required; cpq.quote.create | No matching CPQ handler reference found. | declaration-only | Retain as product inventory only. |
| P0 | contextual proposal / approval | Existing contracts reference twin.propose and human.approve in packages/contracts/src/surfaces/chat.ts. | Requires a live route/handler and outcome reconciliation test before execution claim. | contract-present, runtime proof pending | Use as the first testable governed flow if the existing handler chain is verified. |
| P1 | MCP capability binding | Platform MCP client types and v2.2 Product Package contract describe tenant bindings/grants. | The incoming diff primarily modifies existing MCP code; no complete live binding-to-action proof was established by this audit. | contract-present, runtime proof pending | Verify one actual MCP server/binding path without external credentials before claims. |
| P1 | Workbench capability availability | v2.2 projection contract requires phase, connector, tenant policy and RBAC gating. | Domain capability files are declarative; no end-to-end registry resolution proof was found in the new package. | declaration-only | Add a deterministic in-process eligibility test against the real registry when selected. |
Test program order
- Run the already-present entry-host parser and Gateway CORS tests after the isolated-worktree dependency installation is complete.
- Identify one existing non-mutating or dry-run capability handler with no external account requirement.
- Add an end-to-end contract test that supplies tenant/context/connector capability inputs and proves: ineligible denial; dry-run has no side effect; approval-required cannot execute without a scoped artifact; receipt/audit is written; reconciliation is required before projection refresh.
- Add one MCP binding test that proves a binding/grant is context-scoped and cannot transfer provider credentials.
Non-claims
- No provider endpoint is invented or exercised by this evidence matrix.
- No external account, credential, or production action is required for the proposed tests.
- “Capability-first” means first-class product and contract treatment; it does not mean every listed action has a proven live handler today.