No external access
The organism can only request capabilities that are explicitly registered. Exactly one is, it performs no network, filesystem or system access, and it is in OBSERVE mode. 3 further capabilities are designed for and deliberately not registered.