What can this agent do — right now?

Discovery isn't a static manifest. It's the live, policy-true answer: effective permissions computed from composed policies, current trust, and delegation depth.