The principal-signed grant that decides “was it authorized?”
The principal grants a bounded authority; the agent acts; any third party recomputes whether the action falls inside the grant — after the fact, from the record alone.
Three outcomes, not two. A budget it cannot compute is one it refuses to guess — INDETERMINATE, never a silent pass.
Ordered checks; the first that fails decides. Signature verification is omitted in this demo — the library reuses sm-arp’s Ed25519/JCS path.