7. Delegated Authority and the Agent Policy Passport

The Agent Policy Passport is the machine-readable contract of authority. A practical schema includes:

• principal and agent identifiers;
• role and purpose;
• legal entity and jurisdiction;
• permitted data classes;
• permitted MCP tools, APIs and wallet operations;
• permitted counterparties and networks;
• value limits per action and per period;
• asset limits;
• approval thresholds;
• permitted models/runtimes;
• memory and retention rules;
• emergency-stop and revocation paths;
• evidence requirements;
• version and expiry.

Policies are composable and deterministic. When multiple policies apply, the most restrictive relevant constraint should govern unless an explicit, authorized exception policy exists. The Policy Engine is fail-closed: missing policy, failed evaluation, stale risk data or missing evidence does not become implicit approval.

References

Whitepaper references