Manifest and Security

Before Worka can safely attach a pack, it needs to know what that pack is allowed to do.

That is what the manifest and capability model are for.

This section explains:

• how aip.json describes the pack
• how capability declarations keep packs bounded
• how dependencies and connections are declared

Read these pages next

1. aip.json
2. Security Through Capabilities
3. Dependencies and Connections

These pages matter even if Forge generated most of the pack for you. Generated code still needs a clear runtime contract.