An explicit agreement about the versioned meanings and dependencies a capability uses and the conditions under which it was validated. It binds the declared operating model; it cannot certify every internal interpretation of a language model.