Read-only by construction
Of the 4,778 capabilities under the contract, models can reach 4,574 — every one of them read-only. A write path is not blocked or configured away — it does not exist. Even the engine's escape hatch is unreachable from a model.
4,574 read-only · write path: none