ConsentVaultU-PERM · live simulation

You own a clinic. Your AI receptionist agent 'recep-01' is a guest in your data — it holds no ambient authority. You mint it scoped, time-bound capability tokens. Then, when you choose, you take them all back.

P1 default-deny P2 attenuation P3 time-bounded P4 total revocation P5 legible purpose

① Grant builder

Capabilities are minted by you, the owner, and attenuated — each names exact resources and actions. Nothing more.

Issued capability tokens

No grants issued yet.

② Agent activity

Receptionist agent 'recep-01' attempts an action every ~2.5s. Each attempt is checked against your live grants.

⚠ Issue a grant to let the agent work — right now every attempt is denied.

③ Audit log

Append-only. Every issue, allow, deny, expiry and revocation is recorded with a timestamp.