{
  "id": "capability-security",
  "version": "1.0.0",
  "objective": "Enforce security and policy constraints across tools, prompts, and artifacts",
  "permissions": [
    "allow_file_io",
    "allow_shell_exec"
  ],
  "inputs": [
    {"file": "SCOPE.md", "critical": true},
    {"file": "RISKS.md", "critical": true},
    {"file": "HANDOFF.json", "critical": false}
  ],
  "outputs": [
    {"file": "SECURITY_REPORT.md", "validation_gate": "gate-security"}
  ],
  "failure_routing": {
    "missing_input": "BLOCK_AND_REQUEST_INFO",
    "gate_failure": "REVERT_TO_PREVIOUS_ROLE"
  }
}
