Authority, granted once.
A person or an agent holding a grant arms, runs and sends in real time, with no click per action. The grant names who, which units, which verbs and until when.

On every action
The grant is read at the very next action.
The check runs before anything is recorded or sent. A revocation or an expiry takes effect at once. A stop is always allowed.
A grant is a few lines of JSON.
A night-shift agent may arm, run and send G-code to cnc-01 of CommandAGI's shop for eight hours. We ran the real command in a scratch home folder; the agent's host credential it prints once is left out.
16:32:40.677 grant g-9418138bfa12 principal=agent:night-shift grantedBy=acct:user:user-commandagi world=cloud://home/user-commandagi/worlds/fleet/world.tsx units=[cnc-01] channels=[gcode] verbs=[arm, run, send] expires=2026-11-05T00:32:40.676Z note="night shift"
commandagi grant add --principal agent:night-shift \
--world cloud://home/user-commandagi/worlds/fleet/world.tsx \
--unit cnc-01 --channel gcode --verb arm --verb run --verb send \
--for 8h --note "night shift" --by acct:user:user-commandagiCommandAGI's own shop
92 units. None acts without a grant.
worlds/fleet/world.tsx in CommandAGI's production Drive is a physical world: our shop. Placing a unit grants nobody anything (case-studies/standing-grants/stats.json).
People and agents alike. An agent may make a grant, for itself or another principal, where its identity and its key allow. The record names who made it. Bounds a person does not police. Limits, minimum intervals and allowed verbs are enforced by the driver. The grant only says who may ask. A copy is not authority. A grant names a world by its address. A world copied elsewhere is another address, and needs its own grant.
- units in CommandAGI's physical shop world
- 92
- devices with channels, all uncommissioned
- 34
- proxies with no data interface
- 58
cloud://home/user-commandagi/worlds/fleet/world.tsxResultado case-studies/standing-grants/stats.jsonHerramienta scripts/sites/case-studies.mjs standing-grantsSe ejecutó en This computer (dell-gb10-1), reading the production DriveCuándo Hand the night shift to an agent.
Make the grant once. The agent runs the machine until it expires.