PROOFGRID
Request a Demo

Implement reduced agent operating modes

A degraded mode explicitly permits a smaller set of effects when current authority cannot be checked.

01 / The operating case

What changes in a real workflow?

An offline monitoring agent can keep collecting telemetry but must not shut down equipment.

Trace the authority boundary
  1. 01Authority origin
  2. 02Task and grant
  3. 03Current decision
  4. 04Observed outcome

02 / Decision contract

What the executor must check

Define a preauthorized read-only envelope with expiry and local audit, reject writes and reconcile queued observations after reconnection.

InputPrincipal · task · action · target
DecisionGrant ancestry · policy · current state
ResultEnforce · record · verify outcome

03 / Failure and evidence

What goes wrong, and what can be proven?

Failure mode

A general “offline allowed” switch unintentionally permits mutations.

Evidence to retain

Record mode transition, local grant, permitted reads, rejected writes and reconnect review.

04 / Canonical scope

Why this reference stands alone

Fail-closed decisions defines the default; this page specifies a bounded fallback.

Illustrative implementation artifact

Degraded mode state machine

NORMAL -> AUTHORITY_UNAVAILABLE -> LIMITED_READ
LIMITED_READ + write request -> DENY
LIMITED_READ + grant expiry -> STOP
reconnect -> RECONCILE -> NORMAL

Primary references

Read the underlying material

Architecture discussion

Choose one consequential action and make its boundary explicit.

Request a Conversation