{
  "service": "ClawBridge",
  "version": "0.1.0",
  "transport": "GET-only capability URLs over Tailscale Funnel",
  "security": [
    "signed sessions",
    "tool allowlist",
    "schema validation",
    "workspace scoping",
    "one-time execution nonces",
    "replay-safe stored results",
    "audit log"
  ],
  "sessionRequired": true
}