Skill 1
Recording Permission Leases
Use when an agent needs temporary tool authority tied to a specific task, subgoal, resource, operation, or data boundary.
Back to Skill Library
Agent governance workflow library
Agent Tool Permission Lease Review
Turn temporary agent tool authority into a lease record with expiry, closure, renewal routing, stale replay tests, revocation evidence, and audit gates.
This is a complete workflow library with 4 individual skills. Download the full library or pick the specific skill folder your team needs first.
Individual skills in this library
Use one skill at a time, or keep the full workflow together.
Some AI tools expect one skill folder per upload. Download the full library when you want the whole workflow, or download an individual skill when you only need one job done.
Skill 2
Mapping Expiry and Closure
Use when a permission lease needs deterministic time expiry, work-closure conditions, planner-state cleanup, or an earliest-end decision.
Skill 3
Testing Stale Authority Replay
Use when an expired, closed, or revoked permission handle must be tested for denial and non-effect before broader agent use.
Skill 4
Gating Revocation and Renewal
Use when a permission lease is being renewed, narrowed, widened, revoked, emergency-disabled, or reused after work closure.
Security fit check
Is the public Agent Tool Permission Lease Review library enough, or does this need deeper review?
Use the public library when the workflow is low-risk, the inputs are already sanitized, and a team member can review the output before it reaches a buyer or customer.
Do deeper review when this workflow touches real tools, data sources, role ownership, approval paths, or customer-facing output.
Tool authorizationAI OperationsSecurityPlatform EngineeringTooling OwnerWorkflow Owner
Good deeper-review trigger signals
- The workflow touches customer, prospect, CRM, proposal, security, pricing, or campaign data.
- Different teams disagree on the approved source of truth.
- The AI output could become customer-facing, revenue-impacting, or compliance-sensitive.
- You need reusable eval checks before asking more people to use the workflow.