One shared surface serves two users without merging their authority.
The human interacts with a view while the assistant receives bounded state and invokes named tools.
Human view
- May
- Present state, collect decisions and expose consequences.
- May not
- Imply that a displayed control already executed a tool.
Assistant context
- May
- Receive the minimum structured state needed to reason.
- May not
- Read hidden client state or infer credentials from presentation.
Tool contract
- May
- Validate inputs and perform one declared server action.
- May not
- Expand scope beyond its schema or bypass authorization.
Evidence contract
- May
- Record request, approval, action and outcome references.
- May not
- Treat UI optimism as execution proof.