The selected tools execute through Mandate with the caller’s delegated grant. Descendants inherit resource limits, prerequisites, expiry, revocation, and the shared budget.

All local harnesses use native tools and your local credentials by default. Native commands can access any path and resource available to your account. They run outside Mandate broker scope, invocation accounting and receipts. Responses API remains broker-only. A runtime event alone does not establish enforcement coverage.

Revocation blocks new covered actions and cancels affected sessions. It cannot undo effects already completed or cancel every external request in flight.