Signed Capability Manifest for Wallet and Tool-Server Method Exposure
A wallet or agent tool-server ships with a big list of methods, and the moment someone registers a new one on the server, it's live, whether or not anyone meant to expose it. There's no signed, checkable list of exactly which methods a given build actually allows, so an operator or auditor can't tell what surface they're exposing versus what quietly crept in. This makes it hard to reason about what an autonomous agent wallet can actually touch.
2026