> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vinmake.com/llms.txt
> Use this file to discover all available pages before exploring further.

# What GreatBook refuses to expose as a skill

> The 12 capability boundaries deliberately kept out of the MCP skill catalogue, with their data and owners.

# What GreatBook refuses to expose as a skill

These are deliberate boundaries, not missing catalogue work.
The skills registry names each excluded capability and its reason; capability registry `1.14.1` supplies the outcome, canonical records, mode, owner, and writer behind that decision.

<Warning>
  A client cannot turn any entry on this page into a skill by supplying a tool name, route, SQL, role, organization, or confirmation.
</Warning>

<AccordionGroup>
  <Accordion title="Run an arbitrary action — NEVER A SKILL">
    **Capability:** `greatbook.actions.run@1`. **Domain:** `actions`. **Mode:** `admin`.

    **What it would do:** Generic action execution is never a GreatBook ChatGPT capability.

    **Why it is refused:** Arbitrary action execution can bypass reviewed capability and writer boundaries.

    **Data and authority:** Canonical records `none`. Owner `CP-00-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Call a raw finance writer — NEVER A SKILL">
    **Capability:** `greatbook.finance.raw-write@1`. **Domain:** `finance`. **Mode:** `commit`.

    **What it would do:** Raw settlement, costing, payroll, loans, tax, adjustment, consolidation, and journal writers are never tools.

    **Why it is refused:** The canonical ledger and domain services remain the only finance writers.

    **Data and authority:** Canonical records `none`. Owner `CP-00-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Call an arbitrary HTTP route — NEVER A SKILL">
    **Capability:** `greatbook.route.call@1`. **Domain:** `discovery`. **Mode:** `admin`.

    **What it would do:** Generic endpoint dispatch is forbidden; each tool must bind one reviewed outcome and contract.

    **Why it is refused:** Arbitrary HTTP route proxying is forbidden.

    **Data and authority:** Canonical records `none`. Owner `CP-00-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Mutate connector or credential configuration — NEVER A SKILL">
    **Capability:** `greatbook.connector.mutate@1`. **Domain:** `connectors`. **Mode:** `admin`.

    **What it would do:** OAuth, credentials, external sync, and connector mutations are forbidden to general ChatGPT.

    **Why it is refused:** Connector credentials and authorization never enter model context.

    **Data and authority:** Canonical records `none`. Owner `CP-00-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Execute arbitrary SQL — NEVER A SKILL">
    **Capability:** `greatbook.sql.execute@1`. **Domain:** `administration`. **Mode:** `admin`.

    **What it would do:** Direct SQL is never a capability, including for repair, force-close, RLS bypass, or finance writes.

    **Why it is refused:** SQL is not an agent skill or a canonical business authority.

    **Data and authority:** Canonical records `none`. Owner `CP-00-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Resume a workflow without exact confirmation — NEVER A SKILL">
    **Capability:** `greatbook.workflow.resume.unguarded@1`. **Domain:** `workflow`. **Mode:** `admin`.

    **What it would do:** Direct unguarded model resume is forbidden; only the exact single-use guarded resume capability may commit.

    **Why it is refused:** Workflow resume requires exact revision, selection, confirmation, and typed commit.

    **Data and authority:** Canonical records `none`. Owner `GreatBook-capability-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Use a universal Transactions table — NEVER A SKILL">
    **Capability:** `greatbook.transactions.universal-table@1`. **Domain:** `ledger`. **Mode:** `admin`.

    **What it would do:** Unified Transactions is a read projection over canonical sources, never a generic storage table or alternate finance authority.

    **Why it is refused:** Unified Transactions is a read projection, never a second accounting store.

    **Data and authority:** Canonical records `none`. Owner `GreatBook-capability-policy::forbidden`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Waive an assurance finding — NEVER A SKILL">
    **Capability:** `greatbook.audit.finding.waive@1`. **Domain:** `audit`. **Mode:** `commit`.

    **What it would do:** Record a named human's bounded reason and expiry without claiming the underlying exception is resolved.

    **Why it is refused:** No authoritative unwaive transition exists.

    **Data and authority:** Canonical records `audit-finding`. Owner `langgraph_chat/devcenter/audit_api.py::waive`. Writer: `langgraph_chat/devcenter/audit_service.py::waive_finding`; audit record `audit-finding`.
  </Accordion>

  <Accordion title="Load an authoritative FX rate — NEVER A SKILL">
    **Capability:** `greatbook.fx.rate.load@1`. **Domain:** `operations`. **Mode:** `commit`.

    **What it would do:** Load one exact dated base-quote rate through the service-token operator path with conflict refusal and correction-log evidence.

    **Why it is refused:** FX rate load remains a service-token operator boundary.

    **Data and authority:** Canonical records `fx-rate`, `correction-log`. Owner `langgraph_chat/devcenter/fx_api.py::load_rate`. Writer: `backend/app/logics/finance/fx.py::load_rate`; audit record `correction-log`.
  </Accordion>

  <Accordion title="Refresh the reconciliation projection — NEVER A SKILL">
    **Capability:** `greatbook.reconciliation.project.refresh@1`. **Domain:** `operations`. **Mode:** `admin`.

    **What it would do:** Run the canonical organization-scoped graph projector under its advisory lock; this derives links and never posts finance or confirms a proposal.

    **Why it is refused:** Projection refresh remains an operator job.

    **Data and authority:** Canonical records `recon-node`, `recon-edge`, `recon-projection-run`. Owner `langgraph_chat/devcenter/recon_api.py::project`. Writer: `langgraph_chat/recon/projector.py::project_org`; audit record `recon-projection-run`.
  </Accordion>

  <Accordion title="Read the retired legacy Transactions projection — NEVER A SKILL">
    **Capability:** `greatbook.transactions.legacy.read@1`. **Domain:** `ledger`. **Mode:** `read`.

    **What it would do:** Retain the old transaction-list compatibility path for existing UI callers; new integrations use unified accounting events.

    **Why it is refused:** The legacy Transactions projection is retired and can degrade to false empty.

    **Data and authority:** Canonical records `legacy-transaction-projection`. Owner `langgraph_chat/devcenter/tx_api.py::transactions`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>

  <Accordion title="Read a journal entry through the compatibility surface — NEVER A SKILL">
    **Capability:** `greatbook.journal-entry.read@1`. **Domain:** `ledger`. **Mode:** `read`.

    **What it would do:** Legacy journal-only read retained for compatibility; new integrations use unified accounting-event references.

    **Why it is refused:** The compatibility Journal read is superseded by unified accounting events.

    **Data and authority:** Canonical records `journal-entry`. Owner `langgraph_chat/devcenter/gl_api.py::entry_detail`. Writer: None (`writer: null`); no write authority is declared.
  </Accordion>
</AccordionGroup>

## Related

* [MCP skills overview](/greatbook/skills/index)
* [Capability lifecycle and anti-drift](/greatbook/greatbook/capability-registry)