Holder — passport
Receipts
Agent — agent:invoice-runner
Scripted intents only. Each click signs a request with the agent's own key and presents it to the verifier. The agent cannot widen its own authority.
a model proposes intents; the gate still decides
Verifiers — two surfaces, one gate
No request yet. Click an intent in the agent pane.