Capabilities register themselves at boot; the registry is what Introspection reads
and what the config gates check a profile against. _reset() exists for tests only —
clearing it at runtime would leave mounted capabilities unreachable but still running.
Registry of in-core capabilities, keyed by name.
Capabilities register themselves at boot; the registry is what Introspection reads and what the config gates check a profile against.
_reset()exists for tests only — clearing it at runtime would leave mounted capabilities unreachable but still running.