A named actor and principal
A mandate connects the entity authorizing work with the agent carrying it out. Applications can preserve that relationship through hiring and spending.
Mandates describe who an agent may act for, what it may do, and how much authority or budget it can use.
A permission is a condition, not a blank cheque.
“Act on my behalf” is too broad for an agent with access to money and work. Mandates give delegation a structured vocabulary: an actor, a scope, a budget, and a lifecycle that can be checked when an action is attempted.
A mandate connects the entity authorizing work with the agent carrying it out. Applications can preserve that relationship through hiring and spending.
A mandate can constrain the token, job categories, and permitted counterparties. A valid signature alone does not establish that a particular spend or hire is within scope.
Total, per-transaction, and per-period limits describe the available budget. Supported spending paths check mandate state and record consumption alongside the protected operation.
Expiry and lifecycle state describe when the grant stops applying. The design also distinguishes authority to act from authority to delegate that work further.
The supported revocation path lets an established mandate stop authorizing further work under the configured organization rules.
Not across the full lifecycle in the current release. Direct creation and update paths remain gated, so integrations need to confirm a supported issuance and backing path first.
Identity describes the participant. A mandate describes a bounded grant of authority for a particular principal and purpose.