Action Passport

Where a mandate proves an agent generally may do something, an Action Passport proves one specific action was actually authorized. It's issued only when the Governance Engine returns allow or observe, bound one-to-one to that single authorization, and signed over the same decision digest the evidence trail already anchors — no separate hash of the request. Deliberately, it carries no amount, merchant or other raw payload: verifying it proves a decision with this digest was made and is, or isn't, still valid, without leaking the confidential detail behind it. Its companion, the Execution Receipt, closes the loop after execution — recording what was actually run against what was authorized, so payload match is something a verifier confirms, not something MetaMynd merely asserts. It's single-use by default: once consumed, it can't authorize a second action.