Handoff and Authority
Hand reviewed plans to the Workbench and Host without bypassing authority.
The public site can describe a handoff, but it cannot execute one.
Agent -> Workbench review surface -> Host validation -> mutation ownerWorkbench owns authenticated context, review, and confirmation. Host owns local state, permission enforcement, Plugin lifecycle, credentials, mutation, and recovery. A handoff must preserve the Workspace, principal, draft identity, capability generation, expiry, and idempotency information.
How is this guide?