Skip to main content
Capabilities describe what an app can do. They are reviewed separately from the UI so a good-looking app cannot smuggle unsafe behavior into a package. The public capability primitives are:
  • json-render-ui
  • host-data
  • connector-read
  • room-state
  • collaboration-presence
  • safe-actions
  • sandbox-code
Use the smallest set that fits the app. Writes, external side effects, custom renderers, and sandbox code all need stronger review evidence than read-only JSON-render UI.