The idea
One small control plane for identities and delegated permission across local agents, repositories, runtimes, and human operators.
Shape
Stable IDs identify actors. Short-lived grants describe what they may do, where, and until when. Parents can delegate only a bounded subset of their own grants. Revocation is checked at the gateway.
Human boundary
Agents work automatically inside policy. Exceptional requests bubble through parent agents to an authenticated operator approval page. Notification is separate from authority.
Storage
Live grants, approvals, and revocations belong in a transactional store. Durable policy and audit records can be mirrored to Git. The static starter contains discovery only and requires no secrets.