Agentz Entitlements

info

Active portfolio classification — 2026-07-25 [D]. Agentz Cloud is the public developer/operator control plane included with Skyzai Work; entitlement controls are a capability inside that package. Neither is an independent SKU, package, Person, signer, executor, or custodian. Agentz stages unsigned proposals only. Product, pricing, buyer-deck, access-form, commercial-page, and standalone-launch language below is preserved design history; linked routes do not prove deployment or a paid loop.

note

Current public-DAV authority boundary — 2026-07-12. Pre-launch target design; nothing here proves a live system. A public-DAV consequence may occur only when at least two natural-person councilors bind the exact consequence in a complete valid bound PRISM decision receipt. PRISM records and verifies that receipt only; it never serves as council, signatory, authority, or receipt producer. AI and caste seats stage unsigned proposals only; they never authorize or execute a public-DAV consequence. Constitution or membership adoption establishes constitution and membership only; it does not authorize a later consequence. Policy may constrain an unsigned proposal but never authorizes execution or substitutes for the complete consequence-bound receipt. Before receipt validity, consequence fails closed to read-only proposal, simulation, or deterministic sandbox; live evidence remains gated_pending_complete_valid_bound_receipt. Software deterministically carries out only the exact consequence bound to a complete valid bound PRISM decision receipt from at least two natural-person councilors binding that exact consequence.

Scope: capability inside the two buyer products (Skyzai Personal / Skyzai Work ✱) — not a standalone SKU. See The Product Family.

Surface: agentz.skyzai.com (declarative) Docs: skyzai.org/docs/agentz-entitlements (normative) Status: DESIGN · Phase 3 Evidence tier: [D] with [I] qualifier — design-stage spec, architecturally inferred (qualifiers never substitute for [B]/[E]) Canonical manifest: 02_SKYZAI/02_ORGANISM_COMMONS/NOOSPHERE/03_PRODUCTS/00_SKYZAI_COM_PRODUCT_MANIFEST.md

What Agentz Entitlements Are

Agentz Entitlements govern scoped agent capabilities through receipt-backed permission packets. The principle:

No packet, no action. Every agent capability requires an active OFN entitlement. Critical public-DAV actions require a valid natural-person PRISM quorum receipt; a private Natural Person authorizes their own act.

This is bounded autonomy — not ungated AI. Agents operate within explicitly granted scopes, with time-bounded permissions, and human oversight for high-stakes decisions.

Entitlement Lifecycle

┌─────────────┐     ┌─────────────┐     ┌─────────────┐     ┌─────────────┐
│   API Pay   │────▶│   OFN       │────▶│  Entitlement│────▶│   Agent     │
│   Receipt   │     │  Entitlement│     │   Grant     │     │   Action    │
└─────────────┘     └─────────────┘     └─────────────┘     └─────────────┘
                                              │                     │
                                              ▼                     ▼
                                        ┌─────────────┐     ┌─────────────┐
                                        │  Grant      │     │  EvoNet     │
                                        │  Expire     │     │  SHOULD NOT │
                                        │  Renew      │     │ Typed Auth  │
                                        └─────────────┘     └─────────────┘

Entitlement Packet Schema

{
  "entitlement_id": "ent_2026_abc123",
  "type": "agent_capability",
  "status": "active",
  "granted_at": "2026-05-09T12:00:00Z",
  "expires_at": "2026-06-09T12:00:00Z",
  "buyer": {
    "id": "org_abc123",
    "seat_id": "seat_001"
  },
  "capabilities": [
    {
      "id": "cap_data_analysis",
      "scope": "read_only",
      "resources": ["dataset_a", "dataset_b"],
      "rate_limit": "100/hour"
    },
    {
      "id": "cap_trade_execution",
      "scope": "bounded",
      "constraints": {
        "max_amount": "1000 USDC",
        "authority_mode": "typed_receipt_required",
        "allowed_pairs": ["USDC/ETH"]
      }
    }
  ],
  "restrictions": {
    "time_windows": ["09:00-18:00 UTC"],
    "blocked_jurisdictions": ["..."],
    "max_daily_spend": "5000 USDC"
  },
  "ofn_receipt": "ofn:2026:pay_abc123...",
  "renewal_policy": "auto_renew",
  "revocable": true
}

Capability Marketplace

Capability Structure

{
  "capability_id": "cap_example",
  "name": "Example Capability",
  "version": "1.0.0",
  "publisher": "skyzai",
  "verification_status": "verified",
  "scope_types": ["read_only", "bounded", "full"],
  "resource_types": ["data", "api", "contract"],
  "authority_mode": "none",
  "audit_trail": true
}

Verification Levels

Level	Meaning	Process
`community`	Published by community member	Basic schema validation
`reviewed`	Reviewed by Skyzai team	Code review, test passing
`verified`	Fully verified	Security audit, sandbox testing
`canonical`	Core Skyzai capability	Extensive testing plus independent evidence and applicable typed authority review

The exact superseded verification row follows as dated K3 provenance.

| canonical | Core Skyzai capability | Extensive testing, K2 ratified |

Runtime Governance

Monitoring

class AgentRuntimeMonitor:
    def check_entitlement(self, agent_id: str, capability: str) -> bool:
        entitlement = self.get_active_entitlement(agent_id, capability)
        if not entitlement or entitlement.expired:
            return False
        if capability in entitlement.capabilities:
            return self.check_constraints(entitlement, capability)
        return False

    def check_constraints(self, entitlement: dict, action: dict) -> bool:
        # Time window
        if not self.in_time_window(entitlement.restrictions.time_windows):
            return False
        # Rate limit
        if self.rate_limit_exceeded(entitlement):
            return False
        # Spend limit
        if action.amount > entitlement.restrictions.max_daily_spend:
            return False
        # Jurisdiction
        if action.jurisdiction in entitlement.restrictions.blocked_jurisdictions:
            return False
        return True

Audit Trail

Every agent action produces an audit record:

{
  "action_id": "act_2026_xyz789",
  "agent_id": "agent_001",
  "entitlement_id": "ent_2026_abc123",
  "capability": "cap_trade_execution",
  "timestamp": "2026-05-09T12:00:00Z",
  "input": {...},
  "output": {...},
  "authorization_receipt": "receipt:...",
  "evonet_clearance": true,
  "ofn_receipt": "ofn:2026:act_xyz789..."
}

API Specification

`POST /v1/entitlements`

Grant entitlement to a buyer/seat.

`GET /v1/entitlements/{id}`

Retrieve entitlement status and capabilities.

`POST /v1/entitlements/{id}/renew`

Renew entitlement (requires active payment).

`POST /v1/entitlements/{id}/revoke`

Revoke entitlement immediately.

`POST /v1/agents/{id}/action`

Submit agent action (entitlement-checked).

Evidence Tiers

Tier	Claim	Required Evidence
[I]	Entitlement architecture is defined	Design document
[E]	Entitlement gating works in test	Unit tests, local demo
[B]	External org uses Agentz Entitlements	Customer contract, runtime logs
[A]	Agent system audited for safety	External safety audit

Current status: [I] — design stage.

Safety Principles

No Ungated AI: Every capability requires an active entitlement
Time-Bounded: All entitlements expire; no perpetual permissions
Mortal authority for critical acts: every exact public-DAV consequence requires a complete valid bound PRISM decision receipt from at least two natural-person councilors binding that exact consequence; PRISM verifies only, while private Natural Persons retain their own authority
EvoNet Gate: All actions pass SHOULD NOT checks
Revocable: A Legal-Person entitlement follows that entity's lawfully delegated administrator path. A public-DAV entitlement grant requires a complete valid bound PRISM decision receipt from at least two natural-person councilors binding that exact grant. The grant authorizes no later consequence; each later exact consequence requires its own complete bound receipt. PRISM verifies only; agents stage unsigned proposals only and never sign or execute a consequence.
Audit Everything: Every action produces an OFN receipt

η = 0 Compliance

Chargeable	Not Chargeable
Entitlement runtime	Dispatch or coordination
Control plane	Model inference (pass-through)
Seat management	Capability discovery
Support	Basic monitoring

Cross-links

Package home: Skyzai Work
Developer/operator control plane: Agentz Cloud
Adjacent canon: API Pay (P0), OFN Receipts (P1), VMOSK-A — Agent Castes

Source markdown: 02_SKYZAI/01_NOOSPHERE/03_PRODUCTS/agentz_entitlements/WEBSITE.md

Refer to the current product-faces registry before projecting this historical capability source. Entitlements remain a Skyzai Work capability, never a standalone offer.

Historical standalone commercial routes — preserved for provenance

Product page: /products/agentz-entitlements/
Buyer deck: /products/agentz-entitlements/deck/
Resource room: /products/agentz-entitlements/resources/
Access form: /products/agentz-entitlements/access/
Adjacent canon: API Pay (P0), OFN Receipts (P1), VMOSK-A — Agent Castes
Source markdown: 02_SKYZAI/02_ORGANISM_COMMONS/NOOSPHERE/03_PRODUCTS/agentz_entitlements/WEBSITE.md

K3 public-DAV authority history — 2026-07-12

K3 historical reference — not active authority

note

Current public-DAV boundary — 2026-07-10. Pre-launch target design; nothing here is live. The active DAV is public and targets PRISM, with no K2 runtime, launch, genesis/bootstrap, or fallback dependency. Consequential authority requires at least two natural-person councilors; AI/caste seats stage unsigned proposals only. Before quorum, behavior fails closed to read-only/proposal, simulation, or deterministic sandbox, and a live decision receipt remains gated pending quorum.

No Ungated AI: Every capability requires an active entitlement
Time-Bounded: All entitlements expire; no perpetual permissions
Mortal authority for critical acts: public-DAV consequence requires ≥2-natural-person PRISM quorum; private Natural Persons retain their own authority
EvoNet Gate: All actions pass SHOULD NOT checks
Revocable: A Legal-Person entitlement follows that entity's lawfully delegated administrator path. A public-DAV entitlement requires a decision receipt from at least two natural-person PRISM councilors. No agent signs.
Audit Everything: Every action produces an OFN receipt

Agentz Entitlements

What Agentz Entitlements Are

Entitlement Lifecycle

Entitlement Packet Schema

Capability Marketplace

Capability Structure

Verification Levels

Runtime Governance

Monitoring

Audit Trail

API Specification

`POST /v1/entitlements`

`GET /v1/entitlements/{id}`

`POST /v1/entitlements/{id}/renew`

`POST /v1/entitlements/{id}/revoke`

`POST /v1/agents/{id}/action`

Evidence Tiers

Safety Principles

η = 0 Compliance

Cross-links

See Also

K3 public-DAV authority history — 2026-07-12

Skyzai

Skyzai is coming together.

What Agentz Entitlements Are​

Entitlement Lifecycle​

Entitlement Packet Schema​

Capability Marketplace​

Capability Structure​

Verification Levels​

Runtime Governance​

Monitoring​

Audit Trail​

API Specification​

POST /v1/entitlements​

GET /v1/entitlements/{id}​

POST /v1/entitlements/{id}/renew​

POST /v1/entitlements/{id}/revoke​

POST /v1/agents/{id}/action​

Evidence Tiers​

Safety Principles​

η = 0 Compliance​

Cross-links​

See Also​

K3 public-DAV authority history — 2026-07-12​

What Agentz Entitlements Are

Entitlement Lifecycle

Entitlement Packet Schema

Capability Marketplace

Capability Structure

Verification Levels

Runtime Governance

Monitoring

Audit Trail

API Specification

`POST /v1/entitlements`

`GET /v1/entitlements/{id}`

`POST /v1/entitlements/{id}/renew`

`POST /v1/entitlements/{id}/revoke`

`POST /v1/agents/{id}/action`

Evidence Tiers

Safety Principles

η = 0 Compliance

Cross-links

See Also

K3 public-DAV authority history — 2026-07-12