# capabilities.rel — the capability policy, as shipped data.
#
# A program's tier bounds what it may call. This is policy that comes from
# OUTSIDE the program: a utility cannot be trusted to declare its own
# restrictions, because it would declare none. So unlike prohibits_outside,
# which a program declares about itself, this ships with the language and is
# editable without a compiler release.
#
# Previously: four functions and eighteen string literals inside codegen.el.
#
#   <kind> prohibits_within <comma-separated names>

service prohibits_within llm_call_agentic,llm_register_tool,dharma_emit,dharma_field

utility prohibits_within dharma_connect,dharma_send,dharma_activate,dharma_emit,dharma_field,dharma_strengthen,dharma_relationship,dharma_peers
utility prohibits_within llm_call,llm_call_system,llm_call_agentic,llm_vision,llm_register_tool,llm_models

# cgi is unrestricted: self-formation is what a cgi program is for.