dhp_require_capability
Verifies a handoff contract grants a domain and resource before network, filesystem, or external service access; audits every check to fail closed.
Instructions
Fail-closed capability check: verify the handoff's contract grants (domain, resource) before touching network, filesystem, or external services. Every check is audited.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| resource | Yes | ||
| worker_id | Yes | ||
| handoff_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |