message AgentCapability {  
  required bytes enclave_hash = 1;  // TEE identity  
  repeated string skills = 2;       // e.g., "predictive_maintenance_v3"  
  ComputeResource resource = 3;     // vCPU/RAM/TPU allocation  
}