requested:
->
', where '
' indicates the type of the managed parameter, such that for '(defcap FOO (bar:string baz:integer) @managed baz FOO-mgr ...)', the manager function would be '(defun FOO-mgr:integer (managed:integer requested:integer) ...)'. Any capability matching the 'static' (non-managed) parameters will cause this function to be invoked with the current managed value and that of the requested capability. The function should perform whatever logic, presumably linear, to validate the request, and return the new managed value representing the 'balance' of the request. NOTE that signatures scoped to a managed capability cause the capability to be automatically provisioned for install similarly to one installed with this function.
-```lisp
-(install-capability (PAY "alice" "bob" 10.0))
-```
-
-
-### keyset-ref-guard {#keyset-ref-guard}
-
-*keyset-ref* `string` *→* `guard`
-
-
-Creates a guard for the keyset registered as KEYSET-REF with 'define-keyset'. Concrete keysets are themselves guard types; this function is specifically to store references alongside other guards in the database, etc.
-
-
-### require-capability {#require-capability}
-
-*capability* ` -> bool` *→* `bool`
-
-
-Specifies and tests for existing grant of CAPABILITY, failing if not found in environment.
-```lisp
-(require-capability (TRANSFER src dest))
-```
-
-
-### with-capability {#with-capability}
-
-*capability* ` -> bool` *body* `[*]` *→* ``
-
-
-Specifies and requests grant of _acquired_ CAPABILITY which is an application of a 'defcap' production. Given the unique token specified by this application, ensure that the token is granted in the environment during execution of BODY. 'with-capability' can only be called in the same module that declares the corresponding 'defcap', otherwise module-admin rights are required. If token is not present, the CAPABILITY is evaluated, with successful completion resulting in the installation/granting of the token, which will then be revoked upon completion of BODY. Nested 'with-capability' calls for the same token will detect the presence of the token, and will not re-apply CAPABILITY, but simply execute BODY. 'with-capability' cannot be called from within an evaluating defcap. Acquire of a managed capability results in emission of the equivalent event.
-```lisp
-(with-capability (UPDATE-USERS id) (update users id { salary: new-salary }))
-```
-
-## SPV {#SPV}
-
-### verify-spv {#verify-spv}
-
-*type* `string` *payload* `object: