B22 · governance · Governance & fleet

Scoped Identity + Capability Contracts

Status

planned

Weeks

37–39

Permission gate

none

Depends on

B10 · B11 · B12

Page depth

outline

This is an outline, not a result.
Nothing here has been built. It states what the block is for, what it has to produce and what would make it a failure, so that the claim can be checked against the result later. Written 2026-09-01, and it will change.

Why this block exists

Scheduled here because it comes worth scoping once several heterogeneous agents exist. A forklift manufacturer is hiring someone whose entire job is this artifact.

What it has to produce

Every agent gets its own identity, its own permissions, and an auditable delegation chain.

01What it has to teach me

topiccapability-based security

topicshort-lived credentials

topicdelegation chains

topicleast privilege for agents

02Evidence this page will carry

emptyPrimary artifact

emptyMeasured result

emptyRejection record

2026-09-01Outline created from the AI Operations Roadmap (B10-B27).

← B21 Trace Attribution + MAST FrequenciesB23 Trust Boundaries →