feat: cognitive hints and safety block in capability contracts

Cognitive hints (3-layer resolution):
- vocabulary/cognitive_types.yaml: 15 semantic types, 7 roles
- 11 capabilities annotated with cognitive_hints (role, produces, consumes)
- validate_registry.py: cognitive_hints validation against vocabulary
- generate_catalog.py: cognitive_hints propagated to catalog
- CAPABILITIES.md: full cognitive_hints schema reference

Safety block (v2 enforcement):
- vocabulary/safety_vocabulary.yaml: trust_levels, data_classifications,
  failure_policies, allowed_targets, scope_constraints
- 5 side-effecting capabilities annotated with safety block
- validate_registry.py: safety validation + v2 enforcement (required for
  side_effects: true)
- generate_catalog.py: safety propagated to catalog
- CAPABILITIES.md: full safety schema reference

Documentation:
- LANGUAGE.md: safety block section in capability language spec
- VOCABULARY.md: safety vocabulary cross-reference section
- catalog regenerated with all artifacts

Author: gfernandf

capabilities/agent.plan.create.yaml

@@ -42,6 +42,16 @@ outputs:
       List of validation error strings found in the generated output.
       Empty list means the YAML is valid.
 
+cognitive_hints:
+  role: synthesize
+  consumes:
+    - Context
+  produces:
+    skill_yaml:
+      type: Plan
+    capabilities_used:
+      type: Context
+
 metadata:
   status: experimental
   tags:

capabilities/agent.task.delegate.yaml

@@ -15,6 +15,14 @@ outputs:
     type: boolean
     required: true
     description: Whether delegation was accepted.
+
+safety:
+  trust_level: elevated
+  reversible: false
+  requires_confirmation: true
+  allowed_targets:
+    - approved_connectors
+
 properties:
   deterministic: false
   side_effects: true

capabilities/analysis.risk.extract.yaml

@@ -64,6 +64,23 @@ outputs:
     description: >
       Brief note on methodology, gaps in available information, or caveats.
 
+cognitive_hints:
+  role: analyze
+  consumes:
+    - Artifact
+    - Context
+  produces:
+    risks:
+      type: Risk
+    assumptions:
+      type: Evidence
+    failure_modes:
+      type: Risk
+    mitigation_ideas:
+      type: Context
+    extraction_notes:
+      type: Summary
+
 properties:
   deterministic: false
   side_effects: false

capabilities/analysis.theme.cluster.yaml

@@ -51,6 +51,17 @@ outputs:
       coverage_ratio (fraction of items assigned), overlap_warnings
       (list of items assigned to multiple clusters).
 
+cognitive_hints:
+  role: analyze
+  consumes:
+    - Entity
+    - Context
+  produces:
+    clusters:
+      type: Entity
+    cluster_quality:
+      type: Score
+
 properties:
   deterministic: false
   side_effects: false

capabilities/code.snippet.execute.yaml

@@ -23,6 +23,15 @@ outputs:
     type: string
     required: false
     description: Standard error.
+
+safety:
+  trust_level: privileged
+  data_classification: internal
+  reversible: false
+  requires_confirmation: true
+  scope_constraints:
+    - sandboxed_execution
+
 properties:
   deterministic: false
   side_effects: true

capabilities/data.record.deduplicate.yaml

@@ -19,6 +19,15 @@ outputs:
     type: integer
     required: false
     description: Number of removed duplicates.
+
+cognitive_hints:
+  role: act
+  consumes:
+    - Entity
+  produces:
+    records:
+      type: Entity
+
 properties:
   deterministic: true
   side_effects: false

capabilities/decision.option.justify.yaml

@@ -106,6 +106,30 @@ outputs:
       consumption. Includes what was decided, why, key trade-offs, risks,
       and next steps.
 
+cognitive_hints:
+  role: decide
+  consumes:
+    - Score
+    - Option
+    - Tradeoff
+  produces:
+    recommendation:
+      type: Decision
+    alternatives_considered:
+      type: Option
+    confidence_score:
+      type: Score
+    confidence_level:
+      type: Score
+    uncertainties:
+      type: Uncertainty
+    failure_modes:
+      type: Risk
+    next_steps:
+      type: Plan
+    human_readable:
+      type: Summary
+
 properties:
   deterministic: false
   side_effects: false

capabilities/email.message.send.yaml

@@ -19,6 +19,26 @@ outputs:
     type: boolean
     required: true
     description: Whether sending succeeded.
+
+cognitive_hints:
+  role: act
+  consumes:
+    - Message
+  produces:
+    sent:
+      type: Artifact
+
+safety:
+  trust_level: elevated
+  data_classification: pii
+  reversible: false
+  requires_confirmation: true
+  allowed_targets:
+    - internal_only
+  mandatory_pre_gates:
+    - capability: security.pii.detect
+      on_fail: block
+
 properties:
   deterministic: true
   side_effects: true

capabilities/eval.option.score.yaml

@@ -66,6 +66,21 @@ outputs:
       Explicit trade-offs between top candidates. Each entry names the tension
       and what is gained/lost.
 
+cognitive_hints:
+  role: evaluate
+  consumes:
+    - Option
+    - Criterion
+  produces:
+    scored_options:
+      type: Score
+    criteria_used:
+      type: Criterion
+    comparative_summary:
+      type: Summary
+    tradeoffs:
+      type: Tradeoff
+
 properties:
   deterministic: false
   side_effects: false

capabilities/fs.file.read.yaml

@@ -19,4 +19,12 @@ outputs:
 
   bytes:
     type: object
-    description: Raw bytes (if mode is binary).
+    description: Raw bytes (if mode is binary).
+
+cognitive_hints:
+  role: perceive
+  produces:
+    content:
+      type: Artifact
+    bytes:
+      type: Artifact