Isolated capabilities. Portable config. Auditable trust. A capability layer for AI dev tools — configure once, enforce everywhere.