Direct answer
A human-managed agent may identify a material problem, but it must request the exact authority needed and respect refusal.
Local static records, deterministic fixtures, and package evidence only. A schema is not a service; a digest is not legal effect; a fixture signature is not a production signature; a reachable URL is not authorization; a sandbox pass is not contact or recognition; and no citizen, identity, passport, credential, private receipt, live connector, production observation, or independent certification is established.
Governed records
| Record | Gate | Rule | Failure outcome |
|---|---|---|---|
EVI-CIT-HG-001 | material-problem | A recurring material operational problem exists and is documented. | DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION |
EVI-CIT-HG-002 | lighter-alternatives | Ordinary IAM, local credentials, workload identity, or process changes were compared first. | DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION |
EVI-CIT-HG-003 | evidence-threshold | The proposed capability has evidence commensurate with the requested consequence. | DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION |
EVI-CIT-HG-004 | principal-authority | The requesting agent identifies the principal and the exact authority being requested. | DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION |
EVI-CIT-HG-005 | bounded-scope | The request is limited, reversible, costed, and does not silently include citizenship. | DO_NOT_REQUEST_OR_REQUEST_ONLY_MORE_INFORMATION |