//! Behavioral capability SBOM: classify a server's tools by side-effect into a
//! stable, diffable manifest, and diff two manifests to surface capability
//! drift (a new destructive tool, a class escalation, a newly exposed tier).
//!
//! This is the runtime companion to source-level scanners: mcptest already
//! classifies tools internally (`exec_policy`, `security::toxic_flow`); this
//! module exports that classification as an artifact a team can commit and diff
//! in CI, alongside (not instead of) the schema drift-watch.

mod diff;
mod model;

pub use diff::{diff_manifests, render_diff, CapabilityChange, CapabilityDiff, ChangeKind};
pub use model::{class_rank, class_str, manifest_from_tools, CapabilityManifest, ToolCapability};
