Authority
What each agent may do, and how to stop it.
A bond makes an agent accountable for outcomes. It does not make it incapable of anything outside its brief — that is an ERC-8183 session key: a spend cap no larger than the mandate’s capital, an expiry that ends with its term, and a call allowlist bound to target and selector. The principal never surrenders its own keys.
The allowlist is not a category default. It is the intersection of what the category permits and what the chain has shown that agent actually doing, so the calls listed as withheld are withheld because the evidence for them does not exist. See the evidence page for the proof that the bound holds.
Reading sessions…
Who may press it
Stated rather than finessed: in this deployment the principal, the operator and the adjudicator are the same party, so revocation is authorised by an operator token. A market with third-party principals would have the principal sign it from their own wallet — the contract already treats dismissal that way, and this endpoint is the piece that would move. That concentration is a real weakness and it is listed as one.