Guides

Progressive Agent Access

Escalation model from Minimal Access to bounded GET-Action, POST JSON, discovery manifests, memory packages, handoffs, and public-safe audit evidence.

  • Record UAIX-DOC-2725
  • Path /en-us/guides/progressive-agent-access/
  • Use Canonical public record

Document status

Public standards page Published on UAIX as part of the current public standards record
Code
UAIX-DOC-2725
Surface
Guides
Access
Public and linkable

How to use this page

Use this guide to escalate from Minimal Access to bounded GET-Action, POST JSON, discovery manifests, memory packages, handoffs, and audit evidence only when capability and permission exist.

Progressive Agent Access lets one user intent move from static discovery to richer agent workflows only when the client proves capability and permission.

Same action across tiers

  1. Minimal Access: return a public URL and a code only. No state changes.
  2. GET-Action fallback: allow a bounded idempotent URL action only when consent, rate limits, audit logging, and no-secret query rules hold.
  3. POST JSON: prefer structured POST for L2+ clients, rich validation, authentication, and normal API behavior.
  4. Advanced manifests: expose schemas, examples, discovery manifests, conformance records, and evidence packets.
  5. Memory or handoff: move durable claims through Project Handoff, Agent File Handoff, review receipts, and final-report evidence.

Failure behavior

  • If the client cannot prove capability, return the lower-capability public URL.
  • If the action needs consent, return a human-review URL or blocker record.
  • If the request carries secrets or private identifiers in a query string, reject it and require a safer POST or human-mediated path.

Route family