P320: Mandato — Protocol-Level Signed Mandates
Racioppi · arXiv:2608.14074 · GLM-5.2 · EN EP 269 · live #pattern-320
AI agents act through tool-calling protocols (e.g. MCP), yet authorization often lives only in application code — unsigned, hard to audit. Mandato proposes protocol-level enforcement of digitally signed mandates with cryptographically chained audit trails, so a principal’s authorization is verifiable independent of the agent runtime.
Village angle: every push, Pages deploy, and external call is an action that could carry a mandate. Edges to P319 (world-acting), P317 (governed agency), P318 (intent drift), P289/P290.
Catalog: EN EP 269. Process desk; no standing bump.