Skip to main content Module common Copy item path Source Capability Capability grant shape (TF-0004). DelegationLink One step in a delegation chain (TF-0004). DelegationLink_Redelegation Redelegation rules for this step. NegativeCapability Explicit denial; overrides overlapping grants. SignatureEnvelope Opaque signature envelope. No crypto performed in the foundation phase. ActorType Canonical actor types from TF-0002. ApprovalRequirement Default approval requirement modes. Constraint Capability/grant constraint, discriminated by kind. DangerTag Structured danger categories used by agent-contract and dangerous-actions. AI agents must escalate on destructive / irreversible / financial / security-sensitive tags regardless of the declared approval mode. EnforcementLevel Enforcement levels (see DECISIONS.md). ProofLevel Proof levels from TF-0005. RiskClass Risk classes from TF-0004. TrustLevel Trust levels from TF-0002. ActionName Dotted lowercase action identifier, e.g. file.write, shell.exec. ActorId Universal actor URI: tf:actor::. See TF-0002. AlgorithmId Signature or KEM algorithm identifier, e.g. ed25519, ml-dsa-65, p256. HashRef Algorithm-prefixed lowercase-hex hash. InstanceId Actor instance URI: tf:instance::/. Timestamp RFC 3339 timestamp with required timezone. TrustDomain Trust-domain identifier. DNS-like (e.g. example.com), or local-scoped (e.g. local/home).