{
  "claims": [
    {
      "classification": "EMERGING_STANDARDS_DIRECTION",
      "id": "claim:ghosts:agents-as-workloads",
      "publicationTreatment": "Always call this an Internet-Draft/work in progress.",
      "sources": [
        "source:ietf-ai-agent-auth-02"
      ],
      "text": "Current IETF work models AI agents as workloads requiring identity, credentials, authorization and delegated context."
    },
    {
      "classification": "CURRENT_VENDOR_FACT",
      "id": "claim:ghosts:durable-agent-population",
      "sources": [
        "source:cloudflare-long-running-agents",
        "source:cloudflare-agents"
      ],
      "text": "Cloudflare agent identities can retain durable state and wake in response to work rather than requiring an always-on process."
    },
    {
      "classification": "CURRENT_VENDOR_FACT",
      "id": "claim:ghosts:secret-isolation",
      "sources": [
        "source:cloudflare-sandbox-egress"
      ],
      "text": "Cloudflare Sandbox outbound handlers can apply policy and attach credentials outside the sandbox so the workload need not receive the underlying secret."
    },
    {
      "classification": "DATED_CURRENT_VENDOR_FACT",
      "freshness": "2026-08-12",
      "id": "claim:ghosts:workflow-scale",
      "limitation": "Provider limits are mutable.",
      "sources": [
        "source:cloudflare-workflows-limits"
      ],
      "text": "Workers Paid documentation currently lists 50,000 concurrent Workflow instances and up to 300 new instances per second per account."
    },
    {
      "classification": "CURRENT_VENDOR_FACT",
      "id": "claim:ghosts:hyperscaler-identity",
      "sources": [
        "source:microsoft-entra-agent-id",
        "source:google-agent-identity"
      ],
      "text": "Microsoft and Google expose first-class agent identity constructs."
    },
    {
      "classification": "ARCHITECTURAL_INFERENCE",
      "id": "claim:ghosts:industry-convergence",
      "limitation": "Inference from current platform direction, not a standard or market-share claim.",
      "sources": [
        "source:cloudflare-agents",
        "source:microsoft-entra-agent-id",
        "source:google-agent-identity"
      ],
      "text": "Agent identity is becoming an infrastructure concern across major cloud platforms."
    },
    {
      "classification": "OWNER_ARCHITECTURAL_SYNTHESIS",
      "id": "claim:ghosts:inert-agent",
      "limitation": "Definition specific to this Work; phrase has prior unrelated use.",
      "sources": [
        "source:shareplane-platform-issue-426"
      ],
      "text": "Inert Agent denotes a quiescent non-human principal retaining sufficient persistent identity/state/mission/trigger relationships to resume autonomous execution without human reconstruction."
    },
    {
      "classification": "OWNER_ARCHITECTURAL_SYNTHESIS",
      "id": "claim:ghosts:capability-lease",
      "sources": [
        "source:shareplane-platform-issue-426"
      ],
      "text": "Capability Lease is the proposed generalized object for temporary, target-bound, mission-bound machine authority."
    },
    {
      "classification": "OWNER_PROPOSED_METRIC",
      "id": "claim:ghosts:sac",
      "limitation": "Not an industry standard or empirically normalized benchmark.",
      "sources": [
        "source:shareplane-platform-issue-426"
      ],
      "text": "Safe Agency Capacity measures how much consequential autonomous concurrency an architecture can sustain while preserving governance invariants."
    }
  ],
  "evidencePolicy": {
    "architecturalSynthesis": "Owner-proposed concepts must be labeled as synthesis rather than industry-standard terminology.",
    "currentTechnology": "Primary or official documentation required for material platform claims.",
    "emergingStandards": "Internet-Drafts and other work-in-progress must be identified as drafts, never as adopted standards.",
    "mutableLimits": "Provider limits are date-bound and must be reverified when reused after this evidence snapshot."
  },
  "issue": 426,
  "nonclaims": [
    "This Work does not claim Cloudflare is the only or first agent substrate.",
    "This Work does not claim the IETF Internet-Draft is an adopted standard.",
    "This Work does not claim invention of the phrase inert agent.",
    "Safe Agency Capacity is not presented as an industry benchmark.",
    "GhostMesh Agent Sovereignty is not presented as a completed universal control-plane implementation."
  ],
  "ownerAcceptance": "ACCEPTED",
  "priorArt": {
    "disposition": "PRIOR_USE_EXISTS_DIFFERENT_MEANING",
    "publicationRule": "Do not claim invention of the phrase. Claim only the infrastructure definition and architecture developed in this Work.",
    "term": "inert agent"
  },
  "productionAuthority": "GRANTED",
  "relationships": {
    "accepted": [
      {
        "label": "Foundation: the control plane is the durable product",
        "readerGroup": "foundations",
        "reason": "The earlier Work establishes the durable control-plane boundary; this Work generalizes it into machine-authority governance at population scale.",
        "target": "artifact:the-agent-is-not-the-product-the-control-plane-is",
        "type": "related_to"
      },
      {
        "label": "Companion: persistent system, temporary intelligence",
        "readerGroup": "companions",
        "reason": "The origin story explains durable continuity across replaceable workers; this Work explains authority for persistent software actors.",
        "target": "artifact:ghostmesh-was-waiting-for-its-technology",
        "type": "companion_to"
      },
      {
        "label": "Field evidence: the mesh became operational",
        "readerGroup": "field-evidence",
        "reason": "The operational crossing demonstrates claims, leases, exact identities, temporary credentials and receipts in practice.",
        "target": "artifact:the-mesh-is-no-longer-a-diagram",
        "type": "builds_on"
      },
      {
        "label": "Field evidence: bounded failure and recovery",
        "readerGroup": "field-evidence",
        "reason": "The field report shows why collision control, evidence, rollback and bounded authority matter under concurrent engineering pressure.",
        "target": "artifact:the-mesh-held",
        "type": "builds_on"
      }
    ],
    "deferred": [
      {
        "reason": "Documentary series is related but not yet a stable public Work target for reader navigation.",
        "target": "issue:shareplane-platform:386"
      }
    ],
    "rejected": []
  },
  "schemaVersion": "2.0.0",
  "sources": [
    {
      "boundary": "Internet-Draft; work in progress; not an adopted IETF standard.",
      "class": "PRIMARY_EMERGING_STANDARDS_WORK",
      "id": "source:ietf-ai-agent-auth-02",
      "locator": "https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/02/",
      "published": "2026-06-01",
      "publisher": "IETF Datatracker",
      "revision": "draft-klrc-aiagent-auth-02",
      "supports": [
        "agents-as-workloads",
        "unique-agent-identity",
        "delegated-context",
        "runtime-credentials",
        "agent-mission",
        "authorization"
      ],
      "title": "AI Agent Authentication and Authorization"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "id": "source:cloudflare-long-running-agents",
      "locator": "https://developers.cloudflare.com/agents/concepts/agentic-patterns/long-running-agents/",
      "publisher": "Cloudflare",
      "supports": [
        "durable-agent-identity",
        "durable-state",
        "wake-on-message",
        "not-always-on-process"
      ],
      "title": "Long-running agents"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "id": "source:cloudflare-agents",
      "locator": "https://developers.cloudflare.com/agents/",
      "publisher": "Cloudflare",
      "supports": [
        "local-sql-state",
        "scheduling",
        "recoverable-execution",
        "agent-runtime"
      ],
      "title": "Agents"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "id": "source:cloudflare-sandbox-egress",
      "locator": "https://developers.cloudflare.com/sandbox/guides/outbound-traffic/",
      "publisher": "Cloudflare",
      "supports": [
        "egress-policy",
        "credential-injection-outside-sandbox",
        "secret-isolation"
      ],
      "title": "Sandbox outbound traffic"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "freshness": "verified-2026-08-12",
      "id": "source:cloudflare-workflows-limits",
      "locator": "https://developers.cloudflare.com/workflows/reference/limits/",
      "observedValues": {
        "workersPaidConcurrentInstances": 50000,
        "workersPaidNewInstancesPerSecondPerAccount": 300
      },
      "publisher": "Cloudflare",
      "supports": [
        "workflow-concurrency",
        "workflow-creation-rate"
      ],
      "title": "Workflows limits"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "id": "source:microsoft-entra-agent-id",
      "locator": "https://learn.microsoft.com/en-us/entra/agent-id/what-are-agent-identities",
      "publisher": "Microsoft",
      "supports": [
        "distinct-agent-identity",
        "agent-governance",
        "delegation-and-audit-context"
      ],
      "title": "Microsoft Entra Agent ID: agent identities"
    },
    {
      "class": "PRIMARY_VENDOR_DOCUMENTATION",
      "id": "source:google-agent-identity",
      "locator": "https://docs.cloud.google.com/iam/docs/agent-identity-overview",
      "publisher": "Google Cloud",
      "supports": [
        "agent-principal",
        "runtime-bound-agent-identity",
        "resource-and-mcp-authentication"
      ],
      "title": "Agent Identity overview"
    }
  ],
  "status": "COMPLETE",
  "verifiedAt": "2026-08-12T20:00:00-07:00",
  "workId": "artifact:the-cloud-is-filling-with-ghosts"
}