Hello. It will be noted at the beginning of the output resulting from the command below, whatever the option selected making possible the selection of capacities among a set of capacities, that for each type of key selected, the actions said to be possible and those said to be authorized are announced.

Illustration; output filtered:

# gpg --expert --full-generate-key
Please select what kind of key you want:
 (11) ECC (set your own capabilities)
Your selection? 11
Possible actions for this ECC key: Sign Certify Authenticate 
Current allowed actions: Sign Certify 
 (S) Toggle the sign capability
 (A) Toggle the authenticate capability
 (Q) Finished

It will then be unambiguously understood:

• by 'Possible actions', the explicit meaning of actions technically achievable, therefore supported by the OpenPGP standard.
• by 'Current allowed actions', the implicit meaning of currently achievable capabilities.
• options presented for selection directly after the line 'Current allowed actions: <capabilities>' are representative of the currently achievable capabilities.

It will be observed the following inconsistencies:

• 'Certify', which is a representative of a currently achievable capability, is however not presented for selection. The '(C) Toggle the certify capability' option is missing isn't it?
• The '(A) Toggle the authenticate capability' option, which is presented for selection, is however not a representative of a currently achievable capability.

What could have led to this state?