pub fn capabilities(_config: &BrainConfig) -> Vec<ToolDescriptor>Expand description
The capabilities this backend declares: read-only network diagnostics
(check/trace/cert). Always wired — they neither search nor fetch, so they
don’t track actions.web_search; egress consent is enforced at dispatch.