Delegated Capability
Delegated or external action is an optional Runtime capability. It is not a prerequisite for Local AI, LocalAgent Conversation, Memory, Knowledge, voice, SDK use, Nimi Home, Avatar, or ordinary App capability execution.
Boundary
When a delegated capability is separately admitted, Runtime owns its gateway, authorization, output validation, approval decision, and audit projection. An external provider may propose typed input, but it cannot directly mutate Realm truth, create LocalAgent truth, or bypass the active session.
Provider-native payloads, tool schemas, credentials, and external execution state stay behind the Runtime boundary. Consumers receive only a typed, authorized result.
Failure behavior
An unavailable external capability reports its own typed unavailable or failed state. Runtime must not convert that state into LocalAgent failure or a global readiness blocker.
MCP, A2A, and other protocol-specific transports are future adapter choices, not current public product ontology. Apps, Desktop, Avatar, and SDK consumers must not instantiate those transports as a shortcut.