coordination.quarantineModule 32Cut one agent off at admission, but only with the second person's approval or a ruling that names that exact agent.
coordination.quarantine adds an agent's DID to the quarantine set, so admission answers quarantine for it. The route is destructive and default closed: it needs a warrant, either a dual-control request another administrator approved or an adjudicated case at rung 3 or 4 that names the agent.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseThe coordination.quarantine action accepts only did, so it has no place for a warrant. Send the REST route with a warrant field, or use coordination.halt with scope: agent, which an administrator can call directly.
Plane module
didactorDid is accepted as an alias.warrantkind (dual-control or adjudicated) and the id of the request or case./docs/coordination-quarantineAPI referenceRoutes, bodies and status codes./docs/coordination-quarantineOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/opsStart freeCreate a workspace and admit your first intent./auth/signup
oktrue.kindincident.quarantine.whylift. A reason that goes into the coordination.lift event.quarantinedfleetmap response: the DIDs currently in the quarantine set.warrant: {kind: dual-control, id} where id starts dc_. One administrator files dual-control/request for the quarantine scope; a different administrator approves it.
warrant: {kind: adjudicated, id} where id is a case. The case needs a standing ruling at rung 3 or 4, a quarantine remedy, and this DID among the subjects it names.
File a dual-control request for the quarantine scope with this body, or have an arbitration case reach a ruling that orders quarantine for this agent.
quarantine takes did and the warrant. Without one the dispatcher refuses with 403 before the module runs.
The DID joins the quarantine set and is stored with the workspace's policy. The next admission for that agent answers quarantine.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. coordination.quarantine docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/coordination/quarantine Authorization: Bearer av_workspace_•••• Content-Type: application/json { "did": "did:web:acme.example:agent:billing", "warrant": {"kind":"dual-control","id":"dc_3a91"} } → 200 { ok, did, kind }
{
"ok": true,
"did": "did:web:acme.example:agent:billing",
"kind": "incident.quarantine"
}An arbitration case rules quarantine for one agent. The case is the warrant, and nobody has to repeat the decision with a second administrator.
One files the request, the other approves it with MFA. The quarantine route accepts the approved id as its warrant.
fleetmap returns the quarantined DIDs along with agents, leases and presence, so a console can show what admission will refuse.
lift removes the DID. Its administrator and reason are ledgered, which a bare quarantine call does not do.
coordination.halt, which needs a reason and ledgers itself, but no second person.arbitration.arbiter rules on cases; this route applies the outcome.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
quarantine, with no model call.enforce; protected classes always are.A gate that is not on the path protects nothing, so it sits in the dispatcher. A destructive route with no warrant is refused, not waved through.
A rung-3 ruling already has a case file, a ledger trail and an appeal, so it does not need two administrators to apply its own remedy.
A referral to a human, a fallback ruling and a reopened case are not warrants. A model ruling stands only where a detector or an administrator named the subject.
lift is for a signed-in administrator. fleetmap is a read and carries no role.
quarantine without did returns 400, and without a warrant it returns 403.quarantine scope and for this subject, or the call is refused.coordination.quarantine and coordination.lift actions take only did, so a warrant or a why cannot ride them.lift or unhalt.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/coordination/quarantineQuarantine an agent under a warrant./api/v1/acp/coordination/liftLift a quarantine and ledger who lifted it./api/v1/acp/coordination/fleetmapRead agents, leases, presence and the quarantine set.coordination.quarantineQuarantine from an action call; the action cannot carry a warrant.coordination.liftLift a quarantine from an action call.coordination.fleetmap.getRead the Fleet Map from an agent.coordination.halt06Emergency stop switchesStop one agent, one mandate or one resource at once, with a reason on record, and lift the stop when it is safe.coordination.admit01Intralock admissionDecide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.arbitration.arbiter38Bounded arbiterGet a ruling on a conflict its parties could not settle, from a model held to five remedies, with a person taking over when it is unsure.mcp.enforce04MCP gateway enforcementPut a front on an MCP server so each tool call is admitted like any other intent, and a refused call never reaches the server.github.enforce29GitHub write gateMake a commit's check go red unless the agent behind it holds the grant and, for a write, a human has confirmed.saas.admit30SaaS connector admissionAsk whether an agent may touch a SaaS source, and let it write through one only after the same check that gates everything else.lift takes did and an optional why. It is for administrators and ledgers coordination.lift with who lifted it and why.
iam.assume31