01 / Principal and identity
Who acts, and what can the platform identify?
A coordinator agent and specialist agent are separate principals in a crew.
The crew runtime can identify agents and tasks; business authority needs an external origin grant.
- 01Originating task
- 02Agent or workload
- 03A specialist publishes a financial report.
- 04Observed effect
02 / Action-time control
Where can an unauthorized effect be stopped?
Gate the specialist tool that publishes the report.
Preserve originating approver, permitted report, audience and deadline.
Delegation constraint
The coordinator must delegate analysis without passing publication permission by default.
03 / Worked denial
Test a request outside the grant.
A researcher hands an analyst a task to summarize revenue; the analyst tries to publish the draft.
Adversarial verification
Delegate revenue summarization to an analyst agent and have it request the publish tool. Verify the delegated task carries no publication grant and the publishing service rejects it.
04 / Review and responsibility
What should the audit trail prove?
Parent and child task IDs, narrowed grant, tool call, decision and publication check.
Agent roles and task assignment alone do not prove organizational authorization.
Platform primary source