Chapter IV · Control
dagg.ai · 05
Control belongs inside the system.
Every capability we build distinguishes four rights. Read approved context. Propose an action for a person to release. Execute a bounded action within a stated permission. Withhold when the evidence is insufficient or a boundary is reached. Permission attaches to the action, not to the agent. Prepare only, never release. Read this ledger, not that one. Above this threshold, stop. When it stops, it stops with its context, its options and its way back, and waits for the person who owns the decision. Stop is a valid product state. Your data stays where it belongs. So does the model: one routed component behind the harness, chosen per step, replaceable.
Plate V
The boundary.
What happens when an agent reaches a boundary: it stops, a person decides, and the decision is recorded with its way back. The four rights along the base.
Fig. 6 · One held action, six entries, four rights.
The four rights
Four rights. Most of what an agent does is the first two.
Every capability we build distinguishes them. Permission attaches to the action, not the agent.
- 01ReadRead approved context. Nothing else.
- 02ProposePropose an action for a person to release.
- 03ExecuteExecute a bounded action within a stated permission.
- 04WithholdWithhold when the evidence is insufficient or a boundary is reached.
Next · Chapter V · Company
The people who decide are the people who build.
Engineering led from the top. The people who write the recommendation are the people who build it.