Action authorization
Check the exact actor, operation, target, connection and current authority before a protected effect.
View in the catalogGate consequential actions. Apply approvals and limits. Reconcile uncertainty, and keep an attributable receipt.
Discuss your use caseCheck the exact actor, operation, target, connection and current authority before a protected effect.
View in the catalogBind approvals to material inputs, resource, revision and expiry. Re-evaluate changed requests.
View in the catalogConstrain eligible tools and actions, and enforce those constraints on direct invocation.
View in the catalogBound supported operations by concurrency, duration, size and rate at the actual execution point.
View in the catalogTrack and constrain supported usage. Hard limits require enforceable reservations or provider controls.
View in the catalogApply shared decisions through qualified adapters, including revocation and queued-work rechecks.
View in the catalogBind effects to intended destinations and isolate owned execution resources from unrelated environments.
View in the catalogPreserve operation identity, reject material conflicts and avoid unsafe duplicate effects.
View in the catalogRetain scoped, attributable records of authority, relevant versions, execution state and bounded results.
View in the catalogResolve an uncertain outcome using the original effect identity before considering a retry or recovery.
View in the catalogWhen an external system may already have acted, preserve the operation identity and reconcile the original request. Do not turn an unknown outcome into a duplicate effect.
Controls apply at qualified execution boundaries. There is no blanket exactly-once guarantee.
An agent requests a preview deployment. Evaluate its current authority, execute within scope and retain the result.
{ "execution": "ex_example", "action": "deploy.preview", "scope": "staging", "authority": "not_checked", "decision": "pending", "effect": "not_started", "retry_allowed": false}