01 / The operating case
What changes in a real workflow?
A reviewer approves a production restart for a one-hour window; the agent executes three hours later.
- 01Authority origin
- 02Task and grant
- 03Current decision
- 04Observed outcome
02 / Decision contract
What the executor must check
Bind approval to canonical request and short expiry, recheck task and context at executor, consume the approval and deny after the window.
InputPrincipal · task · action · target
DecisionGrant ancestry · policy · current state
ResultEnforce · record · verify outcome
03 / Failure and evidence
What goes wrong, and what can be proven?
Failure mode
A valid historical approval is treated as timeless authority.
Evidence to retain
Keep approval time, expiry, attempted use, denial and observed resource state.
04 / Canonical scope
Why this reference stands alone
Approval binding describes all dimensions; this page owns temporal validation and delayed work.
Illustrative implementation artifact
Delayed action rule
if now >= approval.expiresAt: DENY
if hash(currentRequest) != approval.requestDigest: DENY
if task.cancelled or grant.revoked: DENY
else consume approval atomically before commitPrimary references