Authority that agents can spend, not steal.
AgentEnvelope turns one protected root into scoped agent identities, expiring action budgets, and signatures that can be verified without trusting a live issuer.
agent:create
scope + decay + spend limit
Root
One protected root secret derives every agent identity.
Scope
Each agent receives a bounded policy, budget, and expiry.
Slot
Every signed action consumes a single-use derived slot.
Verify
Anyone can verify authority without calling an issuer.