Go
Go capabilities
Capabilities contracts and source references for Go.
An identity proves which principal is acting; a capability expresses the authority it has been granted. Validate token shape, time bounds, issuer trust, audience and scope according to the selected implementation. Narrow authority when delegating. Tool approval remains a separate gate; do not treat AutoApprove as capability verification.
Go reference
Each reference records the source path, hash and declaration inventory for this language. Start at the import boundary before using a symbol found in a deeper implementation file.