Capability profiles validate every action.
Sensor / Effector / Mover / Communicator / Commander officers can only emit verbs and parameter ranges declared on their immutable capability profile. Out-of-range orders are rejected before commit.
// Example: Sensor officer emits a radar fan
sensor.detect({
family: "radar_fan",
range_m: 32000, // validated against profile
bearing_deg: 184,
});