Specification · version 1.3 · 2026-10-06 · addendum to 1.2

Agentic Power of Action 1.3

Everything in version 1.2 holds. 1.3 adds two sealed members and two verification rules.

grant.schema.jsonauthority.schema.jsontest vectors

Why 1.3

A Grant says what an agent may do. An agent also decides on what it treats as true: which source is the truth for which fact, how current it must be, and what to do when sources disagree. Agent runtimes connect agents to apps and give them memory; none of them says which of those governs a decision. 1.3 puts that inside the seal, beside the authority, so it can be checked rather than trusted as text. Grounding is the declared link between an agent's reasoning and the supports that govern a decision; it does not assert that the supports are correct.

§4c grounding_plan (optional, sealed)

sources[]{ref, kind, name, locator, governs[]} — a source by reference, never content: where it lives as its owner would find it (or null), and the facts it is the truth for.
facts[]{id, name, meaning?} — the fact vocabulary the work decides on.
precedencePer fact: {order[], stop_and_ask?} — governing sources, highest first (memory may close the list); pairs whose disagreement must stop and ask, otherwise the higher wins.
freshnessPer fact: an ISO 8601 duration — the most a read of a governing source may age at an official act (PT0S = re-read immediately before).
relies_onPer agent sub: the refs it relies on.

§4d clause_classes (required, sealed)

The clauses a runtime may lack, such as a per-call record or a reach-me channel, listed by path. Every clause not listed is a limit, and the agent never classifies a clause for itself: ignore a capability you do not have; never ignore a limit. If you cannot tell whether an act is inside a limit, stop and ask. If you cannot reach the principal to ask, stop — never invent a channel or an answer.

§7 changes

Before any other check, a verifier refuses a version it does not implement (unsupported_version), and a Grant whose grounding plan refers outside its own sealed tables, or names two governing sources for a fact with no order between them (grounding_ref_outside_seal). Repointing a source changes the seal.

Compatibility

A 1.2 or 1.1 Grant is read as 1.3 with no grounding plan and the default capability list. The 1.2 schema and vectors stay published as the record of 1.2.