mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-06 06:24:12 +00:00
revisão e complementação da documentação do projeto
This commit is contained in:
20
docs/adr/ADR-001-agent-privilege-ceiling.en-us.md
Normal file
20
docs/adr/ADR-001-agent-privilege-ceiling.en-us.md
Normal file
@@ -0,0 +1,20 @@
|
||||
# ADR-001: MaximumEntitlement Boundary at the MCP Client
|
||||
|
||||
**Status:** Accepted.
|
||||
**Source:** this ADR is the canonical record of this decision. For implementation and validation context, see `RI/docs/AS-BUILT.md` and, where applicable, the relevant contract in `RI/docs/interfaces/`.
|
||||
|
||||
## Context
|
||||
|
||||
Who defines the agent's privilege ceiling.
|
||||
|
||||
## Decision
|
||||
|
||||
MCP Client (authenticated identity) is the `MaximumEntitlement` boundary, never the agent/prompt.
|
||||
|
||||
## Alternatives Considered
|
||||
|
||||
Authorization by self-declared role of the agent.
|
||||
|
||||
## Consequences
|
||||
|
||||
All EP-01/EP-04 design revolves around the client's identity, not the agent's.
|
||||
Reference in New Issue
Block a user