Agent may
- Inspect permitted household state
- Understand available actions
- Request consequential change
- Retry an explicitly authorised request
LIVE CAPABILITY SURFACE
WebMCP is ready.
Three deliberate capabilities. Two can read. One can request a controlled change.
3capabilities2 read only 1 human-authorised
- inspect_demo_householdREAD ONLY · household stateREAD
- get_approval_stateREAD ONLY · authority statusREAD
- perform_sensitive_changeCONTROLLED ACTION · human gateACTION
SYNTHETIC HOUSEHOLD / SYNTH-HH-001
A small domestic cyber ecology
A calm view of the signals an agent may inspect. Read-only observations never change the household.
AUTHORITY BOUNDARY / VISUAL CENTRE
The human approval gate
CURRENT AUTHORITY PHASE
IDLE
REQUEST CONTEXT
Approval applies to this exact action and request only.
Approval is action-scoped, request-scoped, single-use and expires after two minutes. No WebMCP tool can grant approval.
THE AUTHORITY CONTRACT
A clear division of responsibility.
The agent brings context and precision. The human keeps the decision.
Human controls
- Consequential authority
- Approval and revocation
- Whether the action proceeds
Agent may not
- Approve itself
- Convert capability into authority
- Reuse consumed approval
- Apply one request’s authority to another
FROM REQUEST TO RESULT
Authority in motion
01Agent requestsCapability is discovered
↓02System checksExact authority is required
↓03Action refusedHuman decision is needed
↓04Human approvesOne bounded request
↓05Agent retriesExact request is checked
↓06Allowed · consumedAuthority cannot be reused
TRANSPARENCY / LIVE RECORD
Authority ledger
A human-readable record of genuine application events. Nothing is hidden behind the interface.