Standing grants

Authority, granted once.

A person or an agent holding a grant arms, runs and sends in real time, with no click per action. The grant names who, which units, which verbs and until when.

A simulated order on the ticket: with no market grant it is refused and the grant is offered; once granted, the order is recorded and filled, badged sim.
Recorded in the workbench: a simulated order is refused with no market grant, and the grant is offered.

On every action

The grant is read at the very next action.

The check runs before anything is recorded or sent. A revocation or an expiry takes effect at once. A stop is always allowed.

How a standing grant admits an actionAn account makes a standing grant, an explicit act recorded with who made it, naming a principal and a world by its absolute address, with units, channels, verbs and an expiry. When the principal sends an action, the host or the api worker reads the grants first. An action inside a live grant is recorded and then sent to the driver, which enforces the device's own bounds. Stop, disarm and close are allowed to any principal with any live grant on the unit.makesinside the grantAn account'sprincipala person or anagent; the act isrecordedThe standinggrantprincipal · worldaddress · units ·channels · verbs· expiresAn actionopen · arm · run ·sendRead thegrantsbefore it isrecorded or sentRecordedwith the principalthat sent itThe driverlimits, intervals,allowed verbsHow a standing grant admits an actionAn account makes a standing grant, an explicit act recorded with who made it, naming a principal and a world by its absolute address, with units, channels, verbs and an expiry. When the principal sends an action, the host or the api worker reads the grants first. An action inside a live grant is recorded and then sent to the driver, which enforces the device's own bounds. Stop, disarm and close are allowed to any principal with any live grant on the unit.makesinside the grantAn account's principala person or an agent; the act is recordedThe standinggrantprincipal · worldaddress · units ·channels · verbs ·expiresAn actionopen · arm · run ·sendRead the grantsbefore it is recorded or sentRecordedwith the principal that sent itThe driverlimits, intervals, allowed verbs

A grant is a few lines of JSON.

A night-shift agent may arm, run and send G-code to cnc-01 of CommandAGI's shop for eight hours. We ran the real command in a scratch home folder; the agent's host credential it prints once is left out.

16:32:40.677 grant g-9418138bfa12 principal=agent:night-shift grantedBy=acct:user:user-commandagi
             world=cloud://home/user-commandagi/worlds/fleet/world.tsx
             units=[cnc-01] channels=[gcode] verbs=[arm, run, send]
             expires=2026-11-05T00:32:40.676Z note="night shift"
~/.commandagi/grants.jsonreal output · commandagi grant add · 2026-11-04
commandagi grant add --principal agent:night-shift \
  --world cloud://home/user-commandagi/worlds/fleet/world.tsx \
  --unit cnc-01 --channel gcode --verb arm --verb run --verb send \
  --for 8h --note "night shift" --by acct:user:user-commandagi

CommandAGI's own shop

92 units. None acts without a grant.

worlds/fleet/world.tsx in CommandAGI's production Drive is a physical world: our shop. Placing a unit grants nobody anything (case-studies/standing-grants/stats.json).

People and agents alike. An agent may make a grant, for itself or another principal, where its identity and its key allow. The record names who made it. Bounds a person does not police. Limits, minimum intervals and allowed verbs are enforced by the driver. The grant only says who may ask. A copy is not authority. A grant names a world by its address. A world copied elsewhere is another address, and needs its own grant.

units in CommandAGI's physical shop world
92
devices with channels, all uncommissioned
34
proxies with no data interface
58
The units of CommandAGI's shop world
The numbers
The units of CommandAGI's shop world
UnitUnits
Devices with channels34
Proxies with no channels58
ProvenanceFile cloud://home/user-commandagi/worlds/fleet/world.tsxOutput case-studies/standing-grants/stats.jsonTool scripts/sites/case-studies.mjs standing-grantsRan on This computer (dell-gb10-1), reading the production DriveWhen

Hand the night shift to an agent.

Make the grant once. The agent runs the machine until it expires.