Control and commands

Draft — this page will cover: the command path from Viewer to agent, the permission required at each hop, capability declaration, and the failure modes.