Agent-Ready

Sites expose a Capability Manifest + HTTP tools. The agent acts on a versioned contract — not a database connection string.

Sensitive writes can require Decision. Scopes and idempotency belong in the contract, not a loose prompt.