Interface AgentMeta

Automated entries the agent accepts. ABSENT OR EMPTY DENIES EVERY automated start and resume — a schedule, signal, provider, or delegating agent must be named here to reach this agent at all.

Declared on the metadata rather than injected at wiring time so the edge router and the thread host enforce it from the same catalog, and so an agent cannot become reachable by automation through a host that simply forgot to pass a policy.

Human roles permitted to start the agent over authenticated HTTP.

Server-derived permissions required to enter this agent. Semantics are explicitly ALL-OF: the principal must hold every listed identifier. Omission preserves the role/automation-only authorization path; a present list must be non-empty.