{
      "id": "agent-authorization-lifecycle",
      "name": "agent-authorization-lifecycle",
      "domain": "AI & Agent Governance",
      "title": "Agent Authorization & Lifecycle",
      "description": "Audit scoped and revocable MCP tool grants: each tool carries an explicit scope, a revocation endpoint is configured, and token rotation posture is healthy (art-150) → validate the agent on-behalf-of (OBO) mandate: subject, bounded scope, intent, and non-expired validity window; mismatch or expiry returns REFUSE (art-151) → validate that the long-running task state transitions are legal per the new MCP specification state machine (art-152). Exports lifecycle attestation with execution_hash: final stage.",
      "composer_url": "https://ainumbers.co/chaingraph/chains/agent-authorization-lifecycle.html",
      "steps": [
        {
          "tool_id": "art-150-mcp-tool-scope-revocation-auditor",
          "handoff": "Scope and revocation audit feeds OBO mandate validator"
        },
        {
          "tool_id": "art-151-agent-obo-mandate-validator",
          "handoff": "OBO mandate verdict feeds task lifecycle validator"
        },
        {
          "tool_id": "art-152-mcp-task-lifecycle-validator",
          "handoff": "Exports task lifecycle validity with execution_hash — final stage"
        }
      ]
    }
