mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-05 22:14:11 +00:00
627 B
627 B
ADR-001: MaximumEntitlement Boundary at the MCP Client
Status: Accepted.
Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.
Context
Who defines the agent's privilege ceiling.
Decision
MCP Client (authenticated identity) is the MaximumEntitlement boundary, never the agent/prompt.
Alternatives Considered
Authorization by self-declared role of the agent.
Consequences
All EP-01/EP-04 design revolves around the client's identity, not the agent's.