Start with the ordinary goal
Capability Factory sits behind an existing agent through an embedded software development kit or customer-local sidecar. The customer describes the result they need. They should not have to diagnose which integration is missing first.
Diagnose the exact gap
The system identifies the required action, target, inputs and observable completion criteria. The current system does this inside a trusted customer-local scope, rather than pretending to understand every possible business environment.
Separate capability from authority
A missing technical route is different from a missing credential, permission, approval, target detail or human judgement. Capability Factory may acquire the route. It must request missing authority precisely instead of manufacturing it.
Search before building
The order is retained capability, trusted existing source, bounded composition, smallest built manifest, isolated residual route, then bounded delegation. Existing tools should be reused when they fit. Rebuilding everything would make the system slower and less trustworthy.
Bind the complete capability bundle
A capability is more than generated code. Its bundle binds trusted runtime software, a constrained manifest, target, permissions, approvals, pre-use verification, external-outcome verification, recovery rules, provenance, scope and version. Customer credentials and payloads are not retained inside it.
Prove it before use
A candidate receives a bounded no-action or disposable-state probe. Unsafe, malformed or weakly observable routes fail closed before they are allowed to affect business state.
Execute inside exact authority
Trusted runtime code, not the language model, enforces which target, action, risk, approval and secret boundaries apply. A technically possible action still cannot exceed the authority the customer granted.
Read the real external state
An executor saying success is not proof. Separate read-only logic checks whether the intended business state actually exists. When several capabilities contribute to one goal, an additional aggregate check must prove the parent outcome.
Reconcile uncertainty
A write may commit even when its response is lost. Before retrying, the system reads the external state. Completed work is not repeated. Partial, incorrect and unknown results stay explicit, and risky capabilities can be quarantined.
Resume and retain
The climax is not capability creation. It is completing the original goal. A proven capability is retained with its scope and evidence so a fresh process can reuse it later.