Permissions and trust

Permission requests, scope maps, human approval, audit rows.

PermissionRequest

Full permission gate: action description, scope pills, approve/deny controls, and risk context.

Includes: ApprovalActions, ApprovalCardBase

Approval card sent to a human reviewer: action summary, requester, evidence, and response controls.

Card prompting a user to authorize a third-party integration the agent needs.

Immutable row in a permission audit log: action, decision, actor, and timestamp.

Visual map of the permissions an agent holds, organized by scope category.

Request card for an agent to escalate its permission scope — shows current vs requested scopes.

Metered display of an agent's token budget: used, remaining, and an alert threshold.

Signed receipt confirming a sensitive action completed with a specific scope and actor.