mcloh/Enterprise-MCP-Service-Bus
1
0
Fork 0
mirror of https://github.com/mcloh/Enterprise-MCP-Service-Bus.git synced 2026-11-06 06:24:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
f8d9b6cdcd04ce7d1ae533db92eccf1c860f14ae
Enterprise-MCP-Service-Bus/docs/adr/ADR-001-agent-privilege-ceiling.en-us.md
Marcos Lohmann f8d9b6cdcd revisão e complementação da documentação do projeto
2026-09-14 14:54:28 -03:00

627 B
Raw Blame History

ADR-001: MaximumEntitlement Boundary at the MCP Client

Status: Accepted. Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.

Context

Who defines the agent's privilege ceiling.

Decision

MCP Client (authenticated identity) is the MaximumEntitlement boundary, never the agent/prompt.

Alternatives Considered

Authorization by self-declared role of the agent.

Consequences

All EP-01/EP-04 design revolves around the client's identity, not the agent's.

Reference in New Issue View Git Blame Copy Permalink