Regeldriven tilldelning per RAG-003-RISK-TAXONOMY: L2=läsande, L3=mutation, L4=major/senior-approval, L5=legal/finansiell. PII per domän (fin0/pay0=high, konsument=medium, system=low/none). Konservativ L5/high-skeletten ersatt.
- surfaces detekterade ur filsystemet (openapi/bin/mcp-sdk/next/n0d-job/sdk-signaturer) - siax.surface: capabilityId+kind+entrypoint (authRequired=true per plattformspolicy) - risk-assignment = repoägarens domänbedömning (RW-005b, siax-standard REMAINING_WORK) - genererat av siax-standard packages/estate/bin/generate-capability-surfaces.mjs