hallpass

An auth-native substrate for organizing fleets of independently-credentialed agents: every agent is its own identity, capability is its scope, and the same layer that gates a single tool call also enforces and audits the whole organization. One idea runs the entire stack. The verify-and-gate that decides whether *this* caller may make *this* tool call is the same decision that governs who an agent may message, who may be spawned with what capability, and who may pull which task from a shared que