Goal
Define a narrow Jim-facing capability for requesting Echo-owned causal-anchor admission without making Echo know about ropes or copying Echo protocol semantics into Jim.
Acceptance criteria
- Jim validates checkpoint identity, worldline, rope head, checkpoint reason, and optional materialization-root roles before invoking the capability.
- The capability returns opaque Echo anchor, fact, and receipt identities.
- Jim does not derive Echo basis frontiers, identity algorithms, digest domains, receipts, WAL evidence, support policy, or retention policy.
- Operations that require anchor admission require explicit capability injection and fail closed when unavailable.
- The handwritten port is documented as a transitional single-operation seam to be replaced by a generated Edict client.
Goal
Define a narrow Jim-facing capability for requesting Echo-owned causal-anchor admission without making Echo know about ropes or copying Echo protocol semantics into Jim.
Acceptance criteria