feat(caprock): add ocap proxy plugin

packages/caprock/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
+  "name": "caprock",
+  "version": "0.1.0",
+  "description": "Routes Claude Code tool invocations through an ocap-kernel permission vat (POLA enforcement).",
+  "repository": "https://github.com/MetaMask/ocap-kernel",
+  "license": "MIT"
+}

packages/caprock/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- Permission-tracker vat now supports `removeSection(provision)` so the TUI can revoke a previously-granted standing provision. Revocations are written to the caprock event log as `provision_revoke` events alongside the existing `provision_match` records consumed by `caprock:audit`.
+- Session state now records the hook binary's version (from `.claude-plugin/plugin.json`) and the permission-tracker vat's baked-in version, so a reader can tell which version(s) of the plugin produced a given session log. A `version_up` event is appended whenever the hook binary is upgraded mid-session; a downgrade aborts the hook with a "monotonic versioning violated" error.
+
+[Unreleased]: https://github.com/MetaMask/ocap-kernel/

packages/caprock/README.md

@@ -0,0 +1,15 @@
+# `@ocap/caprock`
+
+Claude Code plugin: routes tool invocations through an ocap-kernel permission vat (POLA enforcement)
+
+## Installation
+
+`yarn add @ocap/caprock`
+
+or
+
+`npm install @ocap/caprock`
+
+## Contributing
+
+This package is part of a monorepo. Instructions for contributing can be found in the [monorepo README](https://github.com/MetaMask/ocap-kernel#readme).