{
  "type": "hm://hyper.media/blob",
  "properties": {
    "type": {
      "value": "HM26Capability",
      "required": true,
      "description": "Provisional stored capability dispatch tag; not registered by the shipped daemon."
    },
    "delegate": {
      "value": {
        "type": "hm://hyper.media/principal"
      },
      "required": true,
      "description": "Single receiving key, provisionally; multiple-recipient grants remain open."
    },
    "subject": {
      "value": {
        "type": "hm://hyper.media/cid"
      },
      "required": true,
      "description": "Provisional authority subject: stable resource identity CID. Root/document/subtree scope and attenuation remain open."
    },
    "role": {
      "value": {
        "anyOf": [
          "reader",
          "writer"
        ]
      },
      "required": true,
      "description": "Exactly irrevocable-admin for the permanent variant; reader or writer for the revocable variant."
    },
    "proof": {
      "value": {
        "type": "hm://hyper.media/link",
        "target": "hm://z6MkiAKDcRSzQ4zPZfnJcS5HYx5MwgN6MU9foHihJGrhqNBj/hm26/capability"
      },
      "required": false,
      "description": "Optional exact immutable granting capability CID. Omission requires separately established root authority; it never proves authority by itself. Link target checking is advisory."
    }
  },
  "description": "DRAFT immutable signed reader/writer grant. Only an authorized same-scope admin may revoke its exact CID; issuers have no independent revocation authority. Delegation rights, scope representation, timing and cascading semantics remain open."
}