An agent credential lives at most 24 hours. Give each agent an enrollment secret: the agent uses it to renew its own one-hour credential (POST /v1/credentials/renew), and you can revoke it at any time. Every issue, renewal, refusal and revocation is recorded. The tenant’s PGM or the platform owner manages them.
What each agent may touch: named sets (matters, sites, well pads, practice group) and levels (clearance). Scope rules compare a request field to an agent’s attribute; a missing field or attribute is denied. An ethical wall (“agents of matter A may never act on matter B”) is a denial no rule can override. Widening — a value or level added, a rule or wall removed — is a proposal another Platform Manager approves on the Changes page. Narrowing applies at once. Exact values only.