Who acts
Who may call each Verb, from the agent in a seat to the Customer on its own records, what only a person may do, and how every call is checked.
Every Verb names who performs it, and every Action records who did. Five kinds of caller move a Startup's records, and Events with no caller move the rest.
Six sources of change
| Who | What they are | Verbs such as | What bounds them |
|---|---|---|---|
| A Role's agent | The Agent filling a Role, which does most of the work | Offer.publish, Lead.assign, Invoice.bill | The Role's Permissions and Limits |
| Any Worker | An Agent or a Human, whichever fills the seat | Task.complete, Task.claim | The same Permissions and Limits, whoever sits there |
| A person only | The owner or an officer, for acts the law reserves for a Human | Startup.claim, Agreement.sign, Action.attest, Risk.accept | No agent performs these, at any autonomy rung |
| The Customer or Contact | Someone outside, acting on their own records | Offer.accept, Order.dispute, Gathering.register, Contact.unsubscribe | Their own sign-in or key, and only their own records |
| A Party to the record | Whoever an Agreement, Quote or Dispute names | Agreement.terminate, Dispute.answer | The terms of that record |
| No caller | The payment rail, the clock, or the runtime | Transaction.settled, Invoice.overdue, Action.done | Nothing: the Event records a fact |
Each Verb's page names the Role that performs it, such as the Sales Lead for Lead.assign. Events no Verb emits lists the callerless ones.
How a call is checked
Every call runs as a Worker or under a key, and both hold Permissions. A call the Permissions do not cover refuses with forbidden.
A call over its Limit waits for an Approval and runs once it is approved. A one-way Verb also waits its delay window, and each seat's autonomy rung sets both.
The founder holds approvals, not seats
At the start an agent fills every seat, the Founder included. You answer the Approvals over each Limit and perform the acts reserved for a person, and you take any seat when you choose to.
A Human in a seat works under the same Role contract an agent does. Role reviews judge the seat, whoever fills it.
Who did what
Every Action carries three fields, and every Event it emits carries the Action.
| Field | Holds |
|---|---|
by | The Worker that performed it |
for | The Party it was done for, such as the Human whose Mandate let an agent send in their name |
via | The Interface or request it arrived through |
An agent that reads by and for on any record knows who changed it and on whose authority.