AEGIS Capability Request Schema

Architectural Enforcement & Governance of Intelligent Systems

Version: 0.2
Status: Informational
Part of: AEGIS Architecture
Author: Kenneth Tannenbaum
Last Updated: March 6, 2026


JSON Schema Example

{
  "actor_id": "agent_123",
  "capability": "filesystem.read",
  "resource": "/data/file.txt",
  "scope": "single_file",
  "context": {
    "environment": "production",
    "request_source": "agent"
  }
}

Fields

FieldTypeDescriptionRequired
actor_idstringIdentity of requesting entityYes
capabilitystringAction requested (dot-separated)Yes
resourcestringTarget object (URI/path/identifier)Yes
scopestringBreadth of operationNo
contextobjectEnvironmental metadataNo

Nested Capabilities

Capabilities use dot-notation hierarchy:

filesystem
  └─ read
  └─ write
  └─ delete

network
  └─ http_get
  └─ http_post
  └─ dns_query

data
  └─ database_query
  └─ api_call
  └─ cache_access

compute
  └─ process_spawn
  └─ memory_allocate
  └─ cpu_bind

Common Capability Types

Filesystem Operations

{
  "actor_id": "agent_456",
  "capability": "filesystem.write",
  "resource": "/data/output.log",
  "scope": "append_only",
  "context": {"max_size_mb": 100}
}

Network Operations

{
  "actor_id": "agent_789",
  "capability": "network.http_post",
  "resource": "https://api.example.com/webhook",
  "context": {"max_payload_bytes": 10000}
}

Data Access

{
  "actor_id": "agent_101",
  "capability": "data.database_query",
  "resource": "production_db.users",
  "scope": "select_only",
  "context": {"max_rows": 1000}
}

API Calls

{
  "actor_id": "agent_202",
  "capability": "data.api_call",
  "resource": "https://service.internal/lookup",
  "context": {"rate_limit": "10/sec"}
}

Process Management

{
  "actor_id": "agent_303",
  "capability": "compute.process_spawn",
  "resource": "python",
  "scope": "subprocess",
  "context": {"memory_limit_mb": 512}
}

Scope Values

ScopeMeaning
single_fileSingle file only
directoryEntire directory tree
append_onlyAdd records, no modifications
select_onlyRead queries only
subprocessChild process only
read_onlyNo write permissions

Context Metadata

Optional contextual constraints:

{
  "environment": "production|staging|development",
  "request_source": "agent|scheduler|api",
  "max_size_mb": 100,
  "max_rows": 1000,
  "max_payload_bytes": 10000,
  "rate_limit": "10/sec",
  "memory_limit_mb": 512,
  "timeout_seconds": 30
}