Architecture contract
Produce aModelCapabilityProfileV1 and a ModelPoolEntryV1. Requests come as CapabilityRequestV1; the router returns an ExecutionPlanV1. Eligibility by sensitivity and trust is a policy check applied before any utility scoring. If no entry qualifies, the answer is an alternate implementation or a failure, never an invented model name.
Validate against the schema in spec/Contracts/kernel/v1/schemas/ before anything else. Receivers fail closed, so a document that does not validate is rejected, not repaired.