THE ROUTING PIPELINE
Enrich. Retrieve. Rank. Restrict.
Describe the capability
Name its inputs, outputs, side effects, data destination, cost, latency, and confirmation policy.
Retrieve only relevant candidates
Use task intent, objects, constraints, and context keywords rather than placing the entire registry in the model context.
Apply hard limits
Remove anything outside the allowed permissions, data boundary, budget, platform, or version.
Plan inside the remaining set
The model cannot choose a capability that governance has already blocked.
Governance comes before intelligence.
A capability that cannot safely participate should not become an option that the model is merely asked to avoid.