agent1.countersign.eth: permission boundaries
This page describes the configured model. It does not attest that a particular role is currently granted. Consult the passport and executed permission evidence before relying on a permission.
Operational metadata
Scoped ENSv2 setter grants are intended for agent-endpoint[web] and agent-context. A record edit must pass the resolver’s onchain access control.
Financial policy
Owner-controlled policy records advertise the mandate. Spending authority comes from the Whitechain agent key, limits, epoch, signatures and merchant permissions. Editing ENS cannot raise those limits.
Revocation is not atomic across chains
Removing an ENS permission stops that delegated ENS write only after execution. Whitechain authority remains until an appropriate Whitechain transaction executes. Epoch revocation invalidates old signatures, but the current agent can sign new-epoch requests. Pause blocks protected payments while enabled; unpausing can revive unexpired signatures.
No live permission transaction is initiated from this page.
Inspect the read-only revocation plan