Layer 4 of the spec: the capability-service runtime (publish, refresh, and discover CapabilityAdvertisements) and the shipped capabilities: push-sum aggregate, vote, the ordered-log (Raft) coordinator behind ORDERED takes, gossip-learning, semantic-discovery, and key-wrap (sealed group-key distribution).