agent-covenant

Tools

Token cost is the o200k count of the tools list JSON, including schemas, before any tool is called.

• grant_covenant

  Grant an agent a covenant: an explicit lease of authority. scopes support wildcards ('payments.*', '*'); budget_minor is the total spend ceiling in minor units; expires_at is ISO-8601. Returns

• check_act

  Check (and if allowed, record) a proposed act against a covenant. Deny-by-default. Idempotent on act_id — retries never double-consume budget. Every check lands on the audit chain.

• revoke_covenant

  Revoke a covenant immediately and terminally. All subsequent checks deny.

• covenant_status

  Current state, consumed/remaining budget, and check count.

• verify_audit

  Verify the tamper-evident audit chain of allowed/denied acts.

• list_covenants

  List covenants, optionally filtered by state (ACTIVE|REVOKED|EXPIRED) and/or the bound agent.

• describe_agent

  Fleet-standard self-description.