Open Max Treats Agent Capability as a File

Field notes

The harness keeps only its core schemas on the wire until an agent writes an extension into the project, then re-freezes the toolbox so the new capability is available on the next step. The page documents TOML tools, SKILL.md packages, hooks, permission rules, and prompt templates, along with openmax --check for validation and --spec for the authoring contract. Approval records are described as hash-chained, while the page explicitly distinguishes these gates from operating-system isolation.