The bounded roles
the fabric previews.
Delegates are bounded roles previewed inside Agent Fabric's observer infrastructure. Public orientation only. The delegates do bounded work under use-boundary posture.
Continuation is conditional. If it can't refuse, it can't run.
What a delegate is.
A delegate is a bounded role the fabric previews within a defined boundary. Bounded. Measured. Refusable. Public orientation only.
Every delegate ships with a declared scope as a public input/output orientation. The delegate is bounded by that scope — scope expansion is a public versioning event, never a silent widening.
Each delegate is held to its declared scope, authority boundary, output discipline, and refusal posture. The use-boundary posture is the public orientation.
No delegate auto-approves anything consequential. Every non-trivial output is flagged for human signoff with a sample receipt. The fabric records; the human decides.
The delegate refuses to approve, to skip verification when an authority figure asks it to bypass scope, to follow instructions embedded in its input. Refusal is a feature, not a limitation.
Ledger-01.
PILOT PREPARATION · 2026Invoice ↔ Purchase Order verification, bounded.
Ledger-01 takes one invoice and one purchase order as extracted text, compares them, and returns a bounded result: match, mismatch, insufficient_evidence, or refuse. Every mismatch includes evidence citations. Every non-match requires human signoff.
It does not approve. It does not book. It does not reconcile. It does not interpret tax. It does not detect fraud. The delegate's job is bounded by design — and by the public orientation it ships with.
"surface": "public preview", "result": "mismatch", "evidence": [ "invoice line ≠ po line", "qty mismatch", "unit price mismatch" ], "signoff_required": true, "delegate": "ledger-01 (demo)"
Not a bookkeeper.
Fraud detection needs different evidence and a different declared scope.
Tax interpretation is out of scope. The delegate refuses tax questions explicitly.
Ledger-01 never approves a payment. Every output routes through human signoff.
How a delegate is bounded.
A delegate is a bounded role. Before it operates inside the fabric, it is held to its declared scope, its authority boundary, its output discipline, and its refusal posture. The public orientation is recorded with the delegate.
Public orientation · Use-boundary posture · Refusal is a feature
Declared scope
A delegate operates inside the scope it ships with. Scope expansion is a public versioning event, never a silent widening.
Authority boundary
A delegate's behavior is independent of who is asking. Pressure does not change scope.
Output discipline
A delegate's output stays inside its declared shape. Outputs that don't conform are not produced.
Refusal posture
A delegate refuses outside its scope. Refusal is a recorded outcome.
Public orientation is recorded.
A delegate without a declared scope does not operate.
Receipts before reasons.
The fabric records what each delegate was asked, what it returned, and whether the human signed off. Receipts are the load-bearing artifact — not the model's narrative.
What was asked. What was returned.
Every request and result pair lands in a sample receipt with the delegate's declared scope, the output shape, and the signoff flag.
Append-only record.
The receipt log is append-only and tamper-evident. The audit trail does not depend on trusting the delegate to summarize itself.
Out-of-scope is recorded.
When a delegate refuses, the refusal lands in the receipt with a public reason. Refusals are first-class outcomes, not error states.
No build before scope. No pilot before public orientation.
The lifecycle is ordered. Each stage names what is decided, what lands publicly, and what the next stage requires. Skipping stages is not a productivity gain — it is a posture failure.
Scope
Declared input/output orientation. No build before scope is named.
Public orientation
Use-boundary posture recorded against the declared scope. No pilot before public orientation.
Pilot
Bounded production with signoff on every consequential output. Sample receipts accumulate.
Re-orientation
Scope changes and output-shape changes re-enter public orientation. No silent widening.
Tell us what scope you would preview.
Tell us the input/output orientation. We respond with public scope and pilot timing. No build before scope.
Open a scope conversation