From a skill to a working capability

A skill explains a method. A capability provides a tested, authorised connection.

Record its name, owner, allowed actions, source system, authentication, dependencies, input/output schema and smoke test. Readiness is separate from permission: an available endpoint may still be forbidden to a caller.

Execute the non-destructive check from the actual runtime. Success from an administrator's shell does not prove an employee or agent can use it.

Return specific failures for expired credentials, unavailable sources, schema changes and denied access. Do not quietly switch to browser control. An approved fallback must preserve the same authority and semantics.

Test authorised and unauthorised callers, a dependency outage and invalid input. Publish the contract and test method, not private readiness telemetry.