A map for responsible agent discovery

Discovery should expose capabilities and limits without exposing credentials or implying operator consent.