A production-grade pre-execution authority layer that binds AI agent identity to deterministic state. Standard IdPs (Entra ID, Okta, OIDC) issue passport to your Agent, predicate-authority issues/revokes "work permit" to your Agent based on intent & state