Struct Capabilities 

pub struct Capabilities {
    pub protocol: u32,
    pub verbs: Vec<String>,
    pub boundary_mode: String,
    pub state: String,
    pub reason: Option<String>,
    pub sentinel_min_interval_secs: u64,
    pub sentinel_hourly_budget: u64,
    pub syncer_version: String,
    pub boot: BootStamp,
}

.flint/capabilities.json (D11). Written atomically at EVERY run startup — after claim succeeds, before the first poll — and again during first checkout, so it exists the instant the agent may start.

The startup write is load-bearing on the live-tree restart row: checkout() returns at marker_present() without materializing anything, so pinning the marker write inside checkout would upgrade a fleet whose live workspaces never get it — sentinels dead on exactly the pods the upgrade targeted.

Fields

protocol: u32

verbs: Vec<String>

boundary_mode: String

state: String

“live” | “fenced” (D2). A fenced syncer advertises no verbs, so agents stop touching sentinels on a zombie.

reason: Option<String>

sentinel_min_interval_secs: u64

sentinel_hourly_budget: u64

syncer_version: String

boot: BootStamp

The rollback tell (D11): an agent that observes a syncer restart while this stamp is UNCHANGED is looking at a stale marker left by a downgrade — the safety catch painted green.

Trait Implementations

impl Clone for Capabilities

fn clone(&self) -> Capabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capabilities

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.