A graph node never says which model to use. It says which capability it needs, with its constraints. The system decides what provides it.
From capability to execution
- The node carries a CapabilityRequest: the capability ID, its cognition level, a budget, and locality and trust constraints.
- The Cognitive Execution Router computes which execution forms are legal for that request. Policy, trust and locality filters run before any scoring, so an ineligible backend is never ranked.
- Among eligible forms it prefers the cheapest correct one: a deterministic backend before a decision head, a decision head before generation.
- The chosen implementation runs. Its identity is recorded in the receipt as execution evidence, not written into the graph.