# Delegation protocol: glossary

Draft, November 2026

## How these terms came about

The terms in this glossary came first from the work itself. We walked real policies one at a time and named what we kept running into: a point where a person used to decide, a fact only the person knows, a question no check can settle.

We then checked each term against language the rest of the world already uses: law, standards bodies, and the identity and authorization protocols this work sits beside. That matters for two reasons. We want to be discussing these things correctly, and many of them already have accepted names. Where a respected definition exists, the entry quotes it and says whether our use is the same, narrower, or different, and where the world already has a name for what we mean, we use that name.

Several terms come from agency law, the law of one person acting for another: Principal, Delegated Authority, Holder of the Power. We use them by analogy. The law does not treat an AI program as an agent in the legal sense. It treats the program as a tool of the person using it, and US federal law attributes what an electronic agent does to the person bound by it. So these terms describe the relationship correctly, but the agent itself holds no legal authority and owes no duties. The person stays responsible.

A few terms are our own. Each joins ordinary words into a single term with a specific meaning here. Forced Discretion is the clearest case. Discretion is a person's power to decide, and forced means the case is pushed to the person who holds that power because no check can settle it. Coined terms are marked as coined, and their entries say which established ideas they are closest to and how they differ.

Sources for the by-analogy paragraph: Duke Law and Technology Review abstract; 15 U.S.C. 7006(3) and 7001(h). The Restatement comment behind the Duke abstract was not fetched.

## Conventions

Bracketed variables: a noun phrase with no leading article; up to four words it is in Title Case (every word capitalized except a, an, the, and, or, of, in, on, to, for, by, with, per, at, from), five words or more only its first word is capitalized, and a hyphenated compound counts as one word.

Defined terms in prose: capitalized as listed below, except that check and checkpoint are written lowercase in running prose. Holder of the Power is written in full in running prose; the short form Holder survives only inside compound variable names such as [Formula Holder]. Lowercase record keeps its plain sense (any document or entry on file). Where a text means AAuth's AS, it says Access Server, not authorization server.

Each entry gives: the term and its part of speech; a one-sentence definition; an optional usage note; a reference (a verified outside definition copied exactly, with its source and link, or for a coined term the closest established idea); an example; and where the term is used. Text inside quotation marks is copied exactly from its source, and each quote was checked against that source. Names retired in this draft have one-line entries pointing to the new term.

Section references are to the four other documents in this set: operating principles, pattern review, agent cards (cards C1 to C46) and delegation terms (numbered by item).

---

## A

**Acceptable Use** (noun phrase)  
The set of rules saying what the agent may and may not be used for.  
Note: Who answers for misuse (delegation terms item 1.3) is a term of the agreement, not part of the definition.  
Reference: IETF RFC 2196, Site Security Handbook, § 2.1.2: "It should spell out what users shall and shall not do on the various components of the system, including the type of traffic allowed on the networks." https://www.rfc-editor.org/rfc/rfc2196.txt  
Example: Using the agent to hide a report from a regulator breaks Acceptable Use.  
Used in: delegation terms § 1 (items 1.1 to 1.3).

**Attestation**: see Signed Statement.

**Audit Trail** (noun phrase)  
The agent's dated log of each step it takes, kept so a case can be reconstructed later.  
Note: Kept to the legal standard that applies, so a mistake can be found between two checkpoints. Replaces Record in its step-log sense. In AAuth the authoritative log is kept by the Person Server, not the agent.  
Reference: RFC 4949, security audit trail: "A chronological record of system activities that is sufficient to enable the reconstruction and examination of the sequence of environments and activities surrounding or leading to an operation, procedure, or event in a security-relevant transaction from inception to final results." https://www.rfc-editor.org/rfc/rfc4949.txt  
Example: The agent acts only if it can write the step to the Audit Trail.  
Used in: pattern review §§ 1.7, 3.18, 3.24; agent card C12 and §§ 2, 12, 14; delegation terms items 2.1.4, 2.2.7.4, 3.4.6, 5.1.2 and the introduction to § 5.1.

**Authority Graph** (noun phrase)  
A map of who in an organization holds each power, including who answers each kind of open question.  
Reference: Coined here. Closest established idea: the approver-eligibility slot that the AuthZEN Access Request and Approval Profile leaves open, "This profile does not define an approval policy language." (section 13.4) https://openid.github.io/authzen/authzen-access-request-approval-profile-1_0.html  
Example: The Authority Graph shows the finance director approves refunds over the limit.  
Used in: operating principles § 3; pattern review §§ 2.3, 3.2, 3.20, 3.34; agent cards C13, C15, C44 and § 12; delegation terms items 3.1.1, 4.4.14, 4.4.15, 5.1.6.

**Autonomy Setting** (noun phrase)  
The setting for one checkpoint that says whether the agent may do it, must ask first, or must never act.  
Note: It applies only inside policy and never widens what the organization or the law allows. It is not risk tolerance and not clock-skew tolerance. In AAuth terms, do it is allow, ask first is ask, and never is deny. Replaces Tolerance; lowercase tolerance remains only where it means an allowed amount of variation.  
Reference: Coined here. Closest established idea: the approved autonomy level in a 2026 Oklahoma state standard, "The action authority envelope shall define the agent’s approved autonomy level, permitted action types, business rules, thresholds, systems, data access, escalation conditions and actions requiring additional approval before execution." https://oklahoma.gov/content/dam/ok/en/omes/documents/ai-agent-agentic-systems-std-UA.pdf Contrast (what it is not): NIST, risk tolerance, "The level of risk or the degree of uncertainty that is acceptable to an organization." https://csrc.nist.gov/glossary/term/risk_tolerance  
Example: The person's Autonomy Setting for hotel bookings is ask first.  
Used in: operating principles § 5; pattern review §§ 1.5, 3.13, 3.19, 3.20, 3.27; agent card C9 and §§ 13, 14; delegation terms § 0 and items 1.1, 4.2.1.

## B

**Behavioral Envelope** (noun phrase)  
The set of limits that one party (the AI model provider, the organization or the person) places on what the agent may do.  
Note: Always qualified, never written Envelope alone, because in the mission-bound authorization drafts an envelope is mostly a message wrapper. The three envelopes overlap rather than nest, and the agent stays inside all three. Close prior use with the same act, ask, escalate shape: delegation envelopes in arXiv:2604.25000, a preprint.  
Reference: ISO/IEC 10746-2, policy envelope: "set of acceptable policy values that can be applied at a particular policy declaration" https://pascal.computer.org/sev_display/search.action?search=checkpoint Prior use: the preprint's authors "define delegation envelopes as pre-authorized regions of action space" https://arxiv.org/abs/2604.25000  
Example: The purchase fits the person's Behavioral Envelope but not the organization's.  
Used in: delegation terms § 0 (scope and key terms). Its parts appear elsewhere as the Provider Floor, the organization's policies and the person's Autonomy Settings.

## C

**Check** (noun)  
A test the agent runs on a request against a rule, ending in allowed, not allowed, or not settled.  
Note: Allowed means continue, not allowed means stop and show the paths, and not settled means it goes to a person. A check runs at a checkpoint. Written lowercase in running prose.  
Reference: American Heritage, check, noun 1a: "The act or an instance of inspecting or testing something, as for accuracy or quality" https://ahdictionary.com/word/search.html?q=check  
Example: The receipt check was not settled, so it went to the manager.  
Used in: all four documents. Defined as [Check] in operating principles § 1; the checks themselves are pattern review Part 3 (§§ 3.1 to 3.36), with the three steps of Part 2 run before them; each agent card lists the checks it enables; delegation terms §§ 3 and 4 say what each item lets the agent check.

**Checkpoint** (noun)  
A point in a workflow where a check runs, usually where a person used to decide.  
Note: The organization or the person sets in advance what the agent does there: go ahead, ask first, hold, or hand the case to a named person. A workflow decision point, not saved program state and not a signed log snapshot. Written lowercase in running prose. Delegation terms § 0 and agent card C9 now use this same definition.  
Reference: American Heritage, checkpoint: "A point where a check is performed" https://ahdictionary.com/word/search.html?q=checkpoint  
Example: The refund checkpoint sits where the clerk used to approve refunds.  
Used in: operating principles §§ 4, 5; pattern review § 1.7 and the title of Part 3; agent cards C9 ([Checkpoint]), C12 and § 12; delegation terms § 0 (scope and key terms), the introductions to §§ 3, 4.2 and 5, items 2.3.3, 4.2.1, 4.2.8.

**Context Item** (noun phrase)  
A piece of information supplied to the agent so it can run particular checks.  
Note: Supplying it means consenting to its use for those checks. Each is written in the agent cards as a card. Not the same as AuthZEN's context or LegalRuleML's Context.  
Reference: Coined here. Closest established idea: an attribute, supplied by what NIST calls a policy information point, which "Serves as the retrieval source of attributes, or the data required for policy evaluation to provide the information needed by the policy decision point to make the decisions." https://csrc.nist.gov/glossary/term/policy_information_point  
Example: The person's travel limit is a Context Item for the expense check.  
Used in: agent cards, every card (C1 to C46) and §§ 11, 12; delegation terms §§ 3 and 4, where each item cites its card; pattern review § 2.3 ([Item]). The documents call each one a card or an [Item]; the phrase itself is this glossary's.

## D

**Declared Scope**: see Granted Scope.

**Delegated Authority** (noun phrase)  
The set of actions a Principal has expressly granted the agent, and nothing implied beyond them.  
Note: Used by analogy with agency law; for lawyers, express actual authority. A step outside it is held for the Holder of the Power. Apparent authority can still arise from the person's own conduct; that is outside what the protocol controls (operating principles § 3).  
Reference: the delegated-authority layer of the mission-bound authorization drafts: "It governs the approved task a delegate performs on a principal's behalf: its bounded authority, its lifecycle, the per-action check, and the evidence that binds back to it." (draft-mcguinness-mission-architecture, section 4.5) https://mcguinness.github.io/mission-bound-authorization/draft-mcguinness-mission-architecture.html Contrast (excluded here): implied actual authority covers actions "necessary, usual, and proper to accomplish" the agent's express responsibilities (Hossfeld, citing Restatement section 2.01 cmt. b) https://www.govinfo.gov/content/pkg/USCOURTS-ca7-25-01518/pdf/USCOURTS-ca7-25-01518-0.pdf  
Example: Booking the flight is within Delegated Authority; upgrading the seat is not.  
Used in: operating principles § 3. Pattern review § 1.4 uses delegated authority in its plain sense, in lowercase, in [Role].

**Designated Counsel** (noun phrase)  
The person or team an organization names to answer legal questions for the agent.  
Note: Replaces Legal Holder. It is the Holder of the Power for legal questions, and the name fits where that person or team is legal staff. Not the person who placed or holds a litigation hold.  
Reference: Coined here (no established meaning was found for Legal Holder). Contrast (the misreading the new name avoids): Federal Rule of Civil Procedure 37, Advisory Committee Note: "intervention in the routine operation of an information system is one aspect of what is often called a 'litigation hold.'" https://www.law.cornell.edu/rules/frcp/rule_37  
Example: The clause is unclear, so the agent asks Designated Counsel.  
Used in: agent card C14; delegation terms items 2.2.2, 2.2.7.1, 2.2.7.5, 3.1.4.

## E

**Envelope**: see Behavioral Envelope.

## F

**Forced Discretion** (noun phrase)  
The outcome in which a case no check can settle goes to the Holder of the Power to decide.  
Note: It is the Holder of the Power's discretion, not discretion the agent is forced to use. Forcing discretion is the act; it is the same concept. In AAuth it is carried by an ask decision.  
Reference: Coined here. No prior use was found in GovInfo, eCFR or the Federal Register. Closest established idea: the US federal discretion test, OFPP Policy Letter 11-01: "A function requiring the exercise of discretion shall be deemed inherently governmental if the exercise of that discretion commits the government to a course of action where two or more alternative courses of action exist and decision making is not already limited or guided by existing policies, procedures, directions, orders, and other guidance" https://www.govinfo.gov/content/pkg/FR-2011-09-12/html/2011-23165.htm  
Example: The policy is silent on gifts from family, so Forced Discretion applies.  
Used in: operating principles §§ 1, 3; pattern review §§ 1.8, 3.14 (forcing discretion); agent card C13; delegation terms § 0.

## G

**Granted Scope** (noun phrase)  
The set of records, systems and kinds of action granted to one Mission.  
Note: Nothing outside it is given to the agent. Replaces Declared Scope, which the mission-bound authorization drafts use for a deployment's own enforcement claim. Not least privilege unless it is also the minimum the Mission needs.  
Reference: RFC 6749 § 1.4: "Tokens represent specific scopes and durations of access, granted by the resource owner, and enforced by the resource server and authorization server." https://www.rfc-editor.org/rfc/rfc6749.txt  
Example: Payroll is outside this Mission's Granted Scope, so the agent stops.  
Used in: pattern review § 1.2; agent cards C2, C3 and §§ 11, 12; delegation terms items 0.4, 1.1, 5.1.1 and the introduction to § 5.1.

## H

**Higher Body** (noun phrase)  
A body, such as a board, a regulator, or a court or tribunal, that alone holds a particular power.  
Reference: 8 Del. C. section 141(a): "The business and affairs of every corporation organized under this chapter shall be managed by or under the direction of a board of directors, except as may be otherwise provided in this chapter or in its certificate of incorporation." https://delcode.delaware.gov/title8/c001/sc04/index.html  
Example: Selling the building needs the board, a Higher Body.  
Used in: operating principles § 3.

**Holder**: see Holder of the Power; the short form is now used only inside compound variable names, such as [Formula Holder] and [Duty Holder].

**Holder of the Power** (noun phrase)  
The person or body that a Source of Authority names to answer a question no check can settle.  
Note: Written in full in running prose, because a bare holder is a token holder in AAuth and a possessor of an instrument under the UCC. Compound variable names keep the short form ([Formula Holder], [Amendment Holder], [Duty Holder]); a Duty Holder holds a duty, not a power. Forced Discretion goes to the Holder of the Power, not to any human nearby. In the governed-agent oversight draft its answer is an Approver's decision.  
Reference: American Heritage, holder: "b. A possessor or occupier: the holder of an Olympic record; the holder of a cabinet post." https://www.ahdictionary.com/word/search.html?q=holder  
Example: The refund went to the Holder of the Power, the finance director.  
Used in: operating principles §§ 1, 3, 6; pattern review §§ 1.5, 1.8, 3.4, 3.9, 3.11, 3.12(h), 3.17(g) to 3.17(j), 3.18, 3.20, 3.23, 3.25, 3.28, 3.31, 3.33, 3.34, with compound names in most other sections; agent cards C11, C13, C14, C15, C20, C44 and § 12; delegation terms § 0 and items 2.2.2, 3.1.2, 3.1.3, 3.1.4, 3.5.1, 3.7.4, 4.3.1, 4.4.1.

## I

**Inherently Human** (adjective; also used as a noun for the category)  
Describing a judgment that a rule or policy reserves to a named person, such as whether conduct was reasonable.  
Note: The agent prepares the facts and the named person makes the call. The basis is a rule or policy, as with inherently governmental functions in US federal law.  
Reference: Coined here. Closest established idea: FAR 2.101: "Inherently governmental function means, as a matter of policy, a function that is so intimately related to the public interest as to mandate performance by Government employees. This definition is a policy determination, not a legal determination." https://www.ecfr.gov/api/versioner/v1/full/2026-11-04/title-48.xml?part=2&section=2.101  
Example: Whether the gift was improper is Inherently Human, so the agent lists the facts.  
Used in: operating principles § 7; delegation terms § 0 and item 0.2. The same idea is the check in pattern review § 3.24.

## L

**Legal Determination**: see Legal Guidance.

**Legal Guidance** (noun phrase)  
The legal team's written view of what the law requires for a kind of request.  
Note: The agent follows it and does not interpret the law on its own. It is advice, not a determination in the legal sense. The organization's policies are named separately. Where the documents mean both grants of power and the legal team's input, they write Sources of Authority and Legal Guidance.  
Reference: Coined here. Contrast (why not determination): Black's Law Dictionary, as quoted by the Delaware Court of Chancery, defines a determination as "the act of deciding something officially; esp[ecially], a final decision by a court or administrative agency." https://courts.delaware.gov/Opinions/Download.aspx?id=318100  
Example: Legal Guidance says these records are kept for two years.  
Used in: operating principles § 6; agent card C14 and §§ 12, 14; delegation terms items 0.1, 1.2.3, 2.2.1, 2.2.2, 2.2.4, 2.2.7.1, 2.2.7.4, 2.2.7.5, 3.1.4, 6.10 and the introduction to § 2.2.

**Legal Holder**: see Designated Counsel.

## M

**Mission** (noun)  
The approved task the agent carries out for its Principal.  
Note: The agent proposes it and the person approves it. The Granted Scope is granted against it. The mission-bound authorization drafts call the task before approval the Mission Intent.  
Reference: "Missions are proposed by agents and approved by the PS and person." (draft-hardt-oauth-aauth-protocol-11, section 3).  
Example: The Mission is to book travel for the March conference.  
Used in: pattern review §§ 1.1, 1.2, 1.3, 3.17(l); agent card C2 and 18 other cards, mostly in their Held by lines, and §§ 12, 13; delegation terms items 3.2.2, 4.1.1, 5.2.4 and the introduction to § 4.1.

**Mission Agent** (noun phrase)  
The agent that carries out one Mission and holds only the context that Mission needs.  
Note: An AAuth Agent bound to a single Mission; where an AAuth agent owns several missions, each Mission Agent here is one of them. It is not LegalRuleML's Agent, which usually means the author of the rule model. The other three documents call it the agent.  
Reference: Coined here. Closest established idea: AAuth's Agent, "An HTTP client ([RFC9110], Section 3.5) acting on behalf of a person." (draft-hardt-oauth-aauth-protocol-11, section 3).  
Example: Each trip gets its own Mission Agent.  
Used in: agent cards § 11, the Held by line of 38 of the 46 cards, and §§ 12, 13.

**Mission Record** (noun phrase)  
The written entry that names the Principal and the Mission.  
Note: Replaces [Record] in pattern review § 1.1. With no Mission Record on file, the agent takes no action of any kind.  
Reference: Coined here. No outside reference is given.  
Example: No Mission Record is on file, so the agent stops.  
Used in: pattern review § 1.1.

**Mutual Non-encroachment** (noun phrase)  
The rule that neither the person nor the organization may use the agent to reach into the other's affairs.  
Reference: Coined compound. American Heritage, encroach: "2. To advance beyond proper or former limits" https://www.ahdictionary.com/word/search.html?q=encroach  
Example: Mutual Non-encroachment stops the employer asking the agent for medical history.  
Used in: operating principles § 8.

## P

**Principal** (noun)  
The individual on whose behalf the agent acts and who answers for its actions.  
Note: Used by analogy with agency law. It maps to AAuth's Person when that Person is an individual, and to the Subject in the mission-bound authorization drafts. It is not an AAuth or Cedar principal, which can be an agent. Not the service that acts for the person.  
Reference: Restatement section 1.01, as quoted by the Seventh Circuit: "Agency is the fiduciary relationship that arises when one person (a 'principal') manifests assent to another person (an 'agent') that the agent shall act on the principal's behalf." https://www.govinfo.gov/content/pkg/USCOURTS-ca7-25-01518/pdf/USCOURTS-ca7-25-01518-0.pdf  
Example: Only the Principal can widen what the agent may do.  
Used in: operating principles §§ 2, 3, 6; pattern review §§ 1.1, 1.6, 3.8; agent card C1 and 19 other cards, and §§ 12 to 14; delegation terms items 4.1.1, 4.1.3.

**Provider Floor** (noun phrase)  
The minimum set of restrictions an AI model provider places on its models.  
Note: The organization and the person may add to it but never weaken it. The provider is the AI model provider, not AAuth's Agent Provider; each document writes AI model provider on first use.  
Reference: Coined here. American Heritage, floor, noun 8: "A lower limit or base" https://ahdictionary.com/word/search.html?q=floor  
Example: No organization setting can lower the Provider Floor.  
Used in: pattern review § 1.9; agent card C46; delegation terms § 0 and items 0.5, 2.1.3, 2.2.4.

## R

**Record**: see Audit Trail (the agent's step log) and Mission Record (the entry naming the Principal and the Mission); lowercase record keeps its plain sense.

## S

**Signed Statement** (noun phrase)  
A statement a person signs to vouch for a fact only they know.  
Note: It settles a check only where the organization accepts Signed Statements for that kind of fact, and it grants no new right. The agent accepts it and does not investigate. The verb form is signs a statement. Replaces Attestation, which security readers take as machine evidence about software or a device.  
Reference: Closest established idea, self-attestation, in NIST EO 14028 guidance: "If the software producer itself attests that it conforms to secure software development practices, this is known by several terms, including first-party attestation" https://www.nist.gov/system/files/documents/2022/02/04/software-supply-chain-security-guidance-under-EO-14028-section-4e.pdf  
Example: The traveler gives a Signed Statement that the trip was for business.  
Used in: operating principles §§ 6, 8; pattern review §§ 3.4, 3.18, 3.19(e), 3.32; agent cards C11, C22, C35, C43, C44 and §§ 11, 12, 14; delegation terms § 0 and items 3.9.4, 3.10.1, 4.3.1. The verb form appears in operating principles § 6, pattern review §§ 3.7, 3.17(i), 3.18, 3.20, 3.24, 3.30, 3.32, agent cards C11, C14, and delegation terms items 0.3, 2.2.2, 2.2.7.5, 4.3.1.

**Source of Authority** (noun phrase; plural Sources of Authority)  
A document, such as a charter, bylaws, a delegation or a contract, that grants a power.  
Note: The plural means only more than one Source of Authority. The legal team's input is Legal Guidance, so where both are meant the documents write Sources of Authority and Legal Guidance. The authority_source of the mission-bound authorization drafts is the nearest term on the AAuth side.  
Reference: LegalRuleML LegalSource (ours is narrower): "a source of one or more Legal Norms formulated in any format and endorsed by an Authority." (LegalRuleML Core Specification, section 3.4, non-normative text) https://docs.oasis-open.org/legalruleml/legalruleml-core-spec/v1.0/os/legalruleml-core-spec-v1.0-os.html  
Example: The bylaws are the Source of Authority for board approvals.  
Used in: operating principles §§ 1, 3 (singular) and § 6 (plural); pattern review §§ 2.3, 3.14; agent cards C14, C15 and §§ 12, 14; delegation terms items 0.1, 1.2.3, 2.2.1, 2.2.4, 2.2.7.1, 3.1.4, 6.10 and the introduction to § 2.2 (each a plural, with Legal Guidance).

**Standing Terms** (noun phrase)  
The terms of the agreement that apply in every deployment without either side supplying anything.  
Note: Not standing authority or standing consent. Delegation terms item 2.4.1 now says the Standing Terms, not some of them, are accepted before deployment, which matches this definition.  
Reference: American Heritage, standing, adjective 4: "Remaining in force or use indefinitely: a standing invitation." https://ahdictionary.com/word/search.html?q=standing  
Example: Standing Terms apply even when the organization provides no context.  
Used in: delegation terms § 2 (items 2.1 to 2.4), cited throughout §§ 0, 3, 4 and 6.

**Supervising Agent**: see Supervisor.

**Supervisor** (noun)  
The layer that decides each Mission's scope and holds the state that spans Missions.  
Note: In AAuth terms the Person Server grants what the Supervisor decides. By default the Supervisor is the person, or a supervision server the person or organization chooses. Replaces Supervising Agent, which the governed-agent oversight draft (draft-mcguinness-oauth-governed-agent-oversight) uses for a non-human decider.  
Reference: AAuth Supervision: "The PS does not decide in the SS's absence. It asks the person or it waits." (AAuth Supervision, editor's copy, Unavailable Supervisor section).  
Example: The Supervisor sees both trips and flags the overlapping dates.  
Used in: pattern review §§ 1.2, 3.17(l); agent cards §§ 12, 13 and the Held by line of 31 of the 46 cards; delegation terms items 3.2.2, 5.1.1, 5.1.4, 6.4, 6.6.

## T

**Tolerance**: see Autonomy Setting.

## U

**Universal Preconditions** (noun phrase)  
The conditions that must be true in every case before the agent may act.  
Note: If one is not met, the agent does not go ahead. After a role ends, § 1.4 is met only for acts the remaining duties need (pattern review, introduction to Part 1).  
Reference: American Heritage, precondition: "A condition that must exist or be established before something can occur or be considered; a prerequisite" https://ahdictionary.com/word/search.html?q=precondition  
Example: No Principal is on file, so a Universal Precondition fails.  
Used in: pattern review Part 1 (§§ 1.1 to 1.9).

---

## Open questions

1. ODRL adoption is not decided. The vocabulary comparison recommends ODRL 2.2 as the base vocabulary plus one delegation-protocol profile, citing LegalRuleML's definitions for legal-theory terms. Nothing in this draft is restructured around ODRL.
2. Mission. The new definition says the agent proposes the Mission and the person approves it, but agent card C2 and delegation terms item 4.1.1 still say the Principal states the Mission. The card line was not rewritten; agent cards open question 9 asks whether it should read approved by [Principal].
3. Legal Guidance and policies. Legal Guidance is defined as the legal team's view only, so the organization's policies are now named separately where the old text said the legal team and policies supply what the law requires (operating principles § 6, delegation terms § 2.2 and item 2.2.1, agent card C14). Confirm.
4. Universal Preconditions. Pattern review § 1.4(2) lets the agent act for remaining duties after a role ends. Rather than change § 1.4, the Part 1 introduction now says § 1.4 holds only for acts those duties need. Confirm this reading.
5. Supervisor. Card C3 still reads [Scope] granted to [Mission] through [Supervisor]; its [Supervisor] line now says the Supervisor decides and, in AAuth terms, the Person Server grants. Delegation terms item 6.4 now records the default and asks for confirmation.
6. Statements of the legal basis. Operating principles § 6, delegation terms items 2.2.2 and 2.2.7.5 and agent card C14 let the organization and the person sign a statement of the legal basis. A Signed Statement is defined as a person's statement of a fact only they know, so a statement by the organization about the law stretches the definition, as Attestation already did in an earlier draft. The documents use the lowercase verb form there, not the defined term.
7. Standing Terms. Delegation terms item 2.4.1 said Some Standing Terms are accepted before deployment; this draft says The Standing Terms, to match the definition (every Standing Term holds in every deployment). This changes the meaning of the draft; confirm, or say which terms were meant.