coordination.admitModule 01Decide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.
coordination.admit is the plane’s hot path. An agent sends its DID, the resource and the verb, and Intralock evaluates that intent against the compiled policy snapshot, quarantines and stop switches. The answer is an allow or a deny with a reason, with no network call and no LLM.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
actorDidresourceactionread, write, delete or a custom verb./docs/coordination-admitAPI referenceRoutes, bodies and status codes./docs/coordination-admitOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/fleet-mapStart freeCreate a workspace and admit your first intent./auth/signup
verdictallow or deny, as the kernel decided it.reasongrant on an allow; on a deny the code that explains it, such as quarantine or confirmation_required.enforcedenforce, so the verdict actually applied to the call.Post actorDid, resource and action to POST /api/v1/acp/coordination/admit before acting. A write or delete also carries a single-use confirmationToken.
A quarantined actor is refused with quarantine, and a stopped resource with resource_halted. A write without a valid token is refused with confirmation_required and lands in the approval queue.
The intent is checked against the compiled grants of the policy snapshot. The kernel is a pure function: same intent, same snapshot, same verdict.
A resource class runs at observe, advise, transform or enforce. Only enforce can deny; the earlier stages report what enforce would have decided and let the call through.
The decision is written after the response, never before it, so logging adds nothing to the hot path. A decision that went over its time budget is recorded as well.
world stands in for your workspace; nothing leaves this page. coordination.admit docs
Press Run (or ⌘/Ctrl + Enter) to decide the request on the left.
It runs in this browser: the plane’s own kernel, with no key, no account and no network call. Change an agent, a lease or a rule on the left and run it again to see the verdict move.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/coordination/admit Authorization: Bearer av_workspace_•••• Content-Type: application/json { "actorDid": "did:web:acme.example:agent:billing", "resource": "repo:payments/main", "action": "write" } → 200 { result: { allow, reason }, llm: false }
{
"result": {
"allow": false,
"reason": "confirmation_required",
"approvalId": "apr_7f3a"
},
"llm": false
}A release agent and a dependency bot both want repo:payments/main. Both declare first, so the second gets a reason and a holder to wait for, instead of a failed push.
An agent may read a table freely, but a delete needs a token. The refusal creates an approval request, and the agent resumes when someone signs.
Put one resource class at observe, read what enforce would have decided for a week, then raise that class alone.
The reason lets an agent take another route or stop and ask, rather than retry the same denied call in a loop.
coordination.lease to hold it.mcp.enforce or github.enforce in its path.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
enforce does not pass without a single-use confirmation token bound to that actor, resource and verb.detection.run.mandates.compile.The kernel's budget is 5 ms p99 of its own work and 15 ms across a request with Durable Object calls. Both are set in code and checked in tests; samples over budget are recorded.
Each resource class declares fail-open or fail-closed. If the kill-switch store cannot be read, the response says so in killSwitch.readable instead of hiding it.
KMS, identity, ledger and billing stay at enforce. The adoption ladder cannot be used to open them.
confirmation_replay.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/coordination/admitDecide one declared intent./api/v1/acp/coordination/confirmMint a single-use confirmation token for a write or delete.coordination.admitDecide one declared intent.coordination.confirmMint a confirmation token for a write or delete.coordination.lease02Resource leases and queuesHold a resource for one agent at a time, with a lease that lapses on its own and a queue for the agents that have to wait.mandates.compile03Mandate studio and replayWrite an agent's charter as code, see what it would change about who may do what, and apply it as the mandate's next version.coordination.approve05Human approval queueHold a risky write or delete until a signed-in person approves it, with the agent, resource and verb in front of them.civics.claims20Resource claims officeLet an agent state what it is about to work on before it takes a lease, and open a case when two claims collide.metering.snapshot21Metered usage by workspaceSee what the plane has counted for your workspace, meter by meter, and which billing meter each count feeds.dual-control.scopes22Two-person dual controlRequire two different administrators before the plane's most destructive actions run, and see whether the break-glass seal is intact.