Evaluate one exact agent action and bind it to a single-use execution grant

The trusted runtime's context, entirely inside the canonical intent hash. Open by design, with three reserved keys. idempotency_key is required and carries the retry identity. enforcement_boundary and workload are what an enforcement boundary reports about itself and about the software that proposed the action; each is validated against its schema when present, and an absent signal is an answer rather than a placeholder, so a policy that requires provenance refuses on its absence. runtime_attribution is reserved for Decionis, which computes it from those reports, and a request that supplies it is refused.

Exact policy-routing vocabulary committed into the intent. Protocol adapters use it when their evaluated decision type differs from the executable action type; legacy generic callers may omit it.

Requests Decionis-owned Presence orchestration. This object is outside the canonical ExecutionIntentBinding hash and is included in request replay validation. It is valid only in ENFORCEMENT mode.

Who will carry out a granted action, and how it takes authority: a dispatch executor presents the execution token at the claim; a permit executor runs inside a platform that holds a single-use permit and reports its own native receipt. Delivery information only: never part of the canonical intent, its hash, or the grant's binding, and it changes nothing about the decision.

Non-authorizing status locator. It is not an ExecutionBinding, claim token, invitation, or executable capability.

The share-safe way to verify a Decision Dossier without an account: a page and an API URL carrying an expiring share-link capability (?sig=, &exp=) that gates access, and the pointers to the Ed25519 proof that establishes authenticity. The capability is an access gate, never proof; the signatures in the proof bundle are the proof.

Where an ESCALATE goes: which authority the policy requires (its kind and role, never a person) and who proves that person, by which method. The runtime holding the intent hands the cardholder's tap to the provider named here and resumes with the attestation; a bank role goes to Decionis Presence. Only a fresh evaluation with the proof as evidence can turn the hold into a grant.