Choose the execution boundary
Name the target resource, environment, tool, action and accountable operator. Keep identity-provider credentials separate from action authority. The agent must not choose a weaker redemption mode.
Configure trust explicitly
Provision stable issuer trust, pinned receiver verification material, service identity and TLS. Private keys and service credentials belong in operator-managed secret storage. Public documentation cannot provision these values for you.
Prove refusals and rightful success
Test forged or expired grants, wrong tenant, changed parameters, replay, concurrent execution and unavailable storage. After refusal, demonstrate legitimate success with valid unspent authority. Reusing a spent grant does not test parameter binding.
Reconcile uncertain effects
For remote providers, persist execution identity and attempt state. A timeout may follow a committed effect. Read authoritative provider state before retrying or declaring failure; keep unresolved outcomes visible.