AgentPod 073: Add Windows capability descriptor schema

[EfeDurmaz16]

Objective

Complete issue 73 from the AgentPod productization plan: Add Windows capability descriptor schema.

Why This Matters

AgentPod is the primary product surface. This work moves Agentbox from a collection of runtime/control features toward a credible governed execution product with honest provider boundaries.

Scope

• Epic: Epic 8: Windows Native Path
• Area: runtime/windows
• Priority: P1
• Expected PR boundary: schema/types only

Out of scope: fake provider support, broad rewrites unrelated to this issue, or claims not backed by the verification gate.

Acceptance Criteria

• Behavior, documentation, or contract described by the issue exists.
• Tests, smoke checks, or docs validation cover the change where practical.
• Verification gate passes: descriptor records filesystem, process, network, credential, and evidence capabilities.
• Provider/support level remains honest; descriptor-only and prototype surfaces are not presented as shipped.

Verification

descriptor records filesystem, process, network, credential, and evidence capabilities.

Suggested PR Boundary

schema/types only

Source

Derived from docs/agentpod-productization-100-issues.md at commit 33d44f8.