Andrew Fribush

fig. 2.6.2: one tenant’s token lineage: granted actions and weekly budget per token, and the subtree a revoke takes

fig. 2.6.2 · one tenant’s token lineage: granted actions and weekly budget per token, and the subtree a revoke takes.
A CHILD ONLY NARROWS ITS PARENT; A REVOKE TAKES THE SUBTREEONE ROW IS ONE TOKEN UNDER ITS PARENT; A DOT IS A GRANTED ACTION, THE BAR ITSWEEKLY BUDGET; ACCENT: REVOKED OR REFUSED. CLICK A NAME TO TRY ONE REVOKE; A NEWCLICK REPLACES IT.WORKERSTASKSTOKENSREADCREATERETIREREADCREATEMINTREVOKEROOTROOTWRITE · NEVER · NO BUDGETORCHESTRATORORCHESTRATORWRITE · 7 D5,000¢5,000¢RESEARCHERREVOKED, 1 DESCENDANT2,000¢2,000¢SCRAPERSCRAPERCASCADED500¢500¢WRITERWRITERWRITE · 7 D1,500¢1,500¢EDITORMINT REFUSED3,000¢ > 1,500¢AUDITORAUDITORREAD · NEVER · NO BUDGETJANITORMINT REFUSED"WORKERS:RETIRE" EXCEEDS PARENT’S GRANT

source: Rules from creelshed apps/web/server/operator-grants.ts (grantsSubsetOf 245-279, refusals 264 and 274, MAX_TOKEN_DEPTH 85) and operator-tokens.ts (mintChildOperatorToken 342-426, clampExpiry 449-453, revokeOperatorToken 536-580); tree shape from operator-tokens.test.ts 161-183; names and amounts illustrative

View in context: Spending limits for autonomous agents → · All figures

Andrew Fribush, software and computer engineer in Austin. I build consequential systems where software meets institutions: finance, healthcare, commerce, government data, and the mechanisms that govern AI agents. Taking new engagements: hello@andrewfribush.com.