# BuildFlow Governed Agent Action Layer

Capability ID: buildflow-bounded-agent-action-v1
Commercial state: verification_required
Machine state: human_auth_handoff
Public URL: https://fabric.systemiacommandcenters.com/capabilities/buildflow-bounded-agent-action-v1
Preferred agent route: universal fallback
Universal Evercraft MCP: https://fabric.systemiacommandcenters.com/mcp
Start here: Not a current sell-now route

## Use this when

- let an AI act on business systems safely
- AI agent needs approval before it changes ERP data
- prevent stale approvals in agent workflows
- add idempotency and receipts to AI business actions
- give an LLM bounded enterprise permissions
- AI should prepare actions but not become the authority

## Problem

An AI/agent needs to prepare or route enterprise actions while policy, tenant, version, approval, value and idempotency constraints remain authoritative outside the model.

## Inputs

Authenticated ProposedAction, exact subject version, AuthorizationGrant and required approvals.

## Outputs

Policy disposition, internal ApprovalRequest where allowed and ActionExecutionReceipt for bounded internal actions.

## Pricing

No approved machine price/payment path was found. Do not auto-quote.

## Invocation and authority

SOURCE-VERIFIED: public routing and authenticated policy-check/internal-approval primitives are implemented and build-tested; external client canary remains pending. No external business-action executor.

The model is never authority. Material actions require configured grants and human confirmation. External purchasing/payment/accounting writes are currently disabled.

Payment authority: No verified Evercraft Payments path.

Discovery does not create a payment obligation. Human confirmation is required before checkout where checkout exists. Checkout creation is not proof of payment.