Your release agent and your cost agent both want the production deploy slot. Without a rule, the later write wins and nobody knows why. Intramedial grants one lease, refuses the other with a reason, and records both.
coordination.admit mandates.compile detection.run Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
A Trustvice Product
ledger.blameLogs can tell you that two agents collided. They cannot stop the second write, and by the time you read them the damage is in production.
Which of the two agents was allowed to write, and who decided that?
Why did the second agent keep going after the first had taken the slot?
Can we prove which agent held the resource at 09:12 last Tuesday?
The first two questions ask for a rule that runs before the action; the third asks for a record that cannot be edited. An exclusive lease and a ledger entry answer both, while the work itself stays with your agents.
AppliesSince 17 January 2025
Financial entities must keep ICT systems resilient and be able to show how they limit the effect of faults. Uncoordinated writes by automated actors are one such fault, and a documented control that refuses them is easy to explain to a supervisor.
Official text ↗AppliesOngoing
Most collisions are found by a person at night. A lease turns them into a refusal with a reason in the agent’s own log, and a queue position the on-call can read on the Fleet Map.
Legal references are summarised and dated as of October 2026. They are given so you can see where the need comes from, not as legal advice. Read the official text, and ask counsel how it applies to you. Intramedial does not make any organisation compliant with any law.
Before it writes, each agent calls coordination.admit with its identity, the resource it names and the action it wants. Nothing is executed yet.
Intralock checks the intent against every lease held and the compiled mandates. The first conflicting request wins an exclusive lease; the second is refused with the holder named.
The lease, the refusal and their reasons are written to the append-only ledger. An abandoned lease expires on its own and costs its holder trust.
On the Fleet Map the on-call sees who holds the slot and who waits. Later, blame on the resource lists each agent that held it, in order.
Each module decides one kind of thing. Open a module for its fields, limits and errors.
coordination.admitAdmits or refuses each intent and grants the exclusive lease, with the holder and queue shown on the Fleet Map.
Open module →mandates.compileCompiles the charter that says which agent may touch the resource at all, with a preview before it applies.
Open module →detection.runFiles a conflict, with evidence, if an agent acts on a resource it was refused.
Open module →ledger.blameBlames a resource to list every agent that changed it, in order, and replays any event.
Open module →Acme’s release agent takes the production deploy lock. When the cost agent asks for the same lock a moment later, the plane answers with the holder instead of letting both through.
curl -sS https://api.intramedial.com/api/v1/acp/coordination/lease \
-H "Authorization: Bearer $INTRAMEDIAL_KEY" \
-H "Content-Type: application/json" \
-d '{
"resource": "lock:deploy/production",
"actorDid": "did:web:acme.example:agent:release"
}'{
"ok": false,
"reason": "held",
"holder": "did:web:acme.example:agent:release"
}
// the first caller received { ok: true, lease: { … } } a moment earlierRequest fields as documented: /docs/coordination-lease
A ledger entry is evidence of a narrow fact: this decision was made on this input under this policy at this time, and the chain has not changed since. It is not a certificate, an audit or legal advice, and it does not by itself satisfy any legal obligation.
Let agents queue for a deploy slot, ship in checked stages, and keep an unqueued write from reaching the repository.
coordination.admit change-trains.list previews.list mcp.enforce Rehearse how your agents behave when they fight over the same ground, then settle real conflicts by negotiation, arbitration and a person.
drills.frt detection.run negotiate.propose arbitration.arbiter Put every MCP tool call through admission, see the callers nobody registered, and give agents cloud credentials only for the length of a lease.
mcp.enforce mcp.shadow ledger.blame coordination.admit The Try it terminal runs the real admission kernel on your machine. It needs no account and sends nothing, and each decision comes back with its reason.
