mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-05 22:14:11 +00:00
21 lines
627 B
Markdown
21 lines
627 B
Markdown
# ADR-001: MaximumEntitlement Boundary at the MCP Client
|
|
|
|
**Status:** Accepted.
|
|
**Source:** this ADR is the canonical record of this decision. For implementation and validation context, see `RI/docs/AS-BUILT.md` and, where applicable, the relevant contract in `RI/docs/interfaces/`.
|
|
|
|
## Context
|
|
|
|
Who defines the agent's privilege ceiling.
|
|
|
|
## Decision
|
|
|
|
MCP Client (authenticated identity) is the `MaximumEntitlement` boundary, never the agent/prompt.
|
|
|
|
## Alternatives Considered
|
|
|
|
Authorization by self-declared role of the agent.
|
|
|
|
## Consequences
|
|
|
|
All EP-01/EP-04 design revolves around the client's identity, not the agent's.
|