vigil_grant_lease
Grant a short-lived, Ed25519-signed LEASE authorizing an agent to perform an action until it expires. A customer-run gateway verifies the lease offline (fail-closed) before letting the action through. This is the guard on a money/data-moving action. Free tier: 1 active lease (guarded agent).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| lim | No | Optional limit string the gateway enforces, e.g. 'amount<=50usd'. | |
| agent | Yes | Identifier for the agent being authorized (1-128 chars). | |
| ttl_s | Yes | Lease lifetime in seconds, 5..604800. Keep it short; renew to extend. | |
| action | Yes | The action class this lease authorizes, e.g. 'stripe.refund' (1-128 chars). | |
| vigil_key | No | Legacy credential argument. Prefer the HTTP Authorization: Bearer header; omit this argument when that header authenticates the request. |