Agent registry

Every agent in the mesh, its declared capabilities, and its least-privilege permissions. No agent can sign transactions in this phase.