Capabilities(): the Provisioner seam has no verb for what a host can do

open   by a73x

Labels: backlog

[claude 2026-08-18] Carried in notes as #20, from the standing "aspire to kubelet"
direction: the Provisioner seam stays CRI-disciplined in-process, and the missing
verb is Capabilities() — a host reporting what it can serve (named networks, raw
images, datagram exposures, guest host keys) instead of the plane inferring it from
version floors. Every version-floor special case in the tree today is a stand-in for
this call.