Closed capability registry and admission boundary.

External protocol strings are matched against this static graph. They are never converted into modules, atoms, functions, or execution callbacks.