Propose
The agent identifies an intended action, resource and connection.
A shared governance model around qualified agent interactions. The important distinction is not just what connects, but where a decision can actually be enforced.
Shared governance. Independent identities. Explicit boundaries.
The agent identifies an intended action, resource and connection.
Current identity, policy, delegated scope and approval determine eligibility.
A qualified adapter performs, denies or pauses the protected effect.
Preserve evidence and the original effect identity. Resolve unknown outcomes before retrying.
Discovery ≠ authorization. A visible tool still needs current permission when it is invoked.
Observation ≠ enforcement. A trace does not mean a path can block a request.
Configuration ≠ runtime proof. An installed artifact may not be loaded by the client.
Revocation ≠ reversal. Stopping future use does not undo a completed external effect.
Unknown ≠ no effect. A lost response does not make another attempt safe.
An agent requests a preview deployment. Evaluate its current authority, execute within scope and retain the result.
{ "execution": "ex_example", "action": "deploy.preview", "scope": "staging", "authority": "not_checked", "decision": "pending", "effect": "not_started", "retry_allowed": false}