W4-011 · Condition 04 — The agent workforce
Scoped authority
Scoped authority is a bounded, explicit, revocable statement of what an agent may do, issued by an accountable principal and verifiable by a counterparty who does not trust the agent.
What an agent cannot do, it cannot do at any speed.
The instinctive control for autonomous software is monitoring: watch it and intervene. This fails on arithmetic. A fleet produces actions faster than any staffable review capacity, so monitoring degrades into sampling, and sampling catches the average case rather than the damaging one.
Scoped authority is the structural alternative. Authority is stated in advance, denied by default, expressed in terms a counterparty can check, and withdrawable at a speed that matters. It moves control from detection to prevention.
For a founder the practical consequence is that authority design is product design, not a compliance task to schedule later. A system built on inherited credentials cannot have scopes retrofitted, because there is nothing to attach them to.