Agent workflows

Someone will ask what your agent did, on whose authority, and within what limits. Permafrost answers from records on Sui. The agent only speaks S3.

What an agent needs

It needs	Permafrost gives it
A key scoped by its owner	One signed grant: bucket, key prefix, actions, time window. The agent works on its own, without calling back to your backend; the owner can revoke it at any time.
Limits it can’t exceed	The owner’s rate, byte and read limits apply. Delegate traffic counts against the owner; refusals are recorded on the owner’s ledger witnessed.
A cheap scratchpad	Local placement: no network write, no receipt unless asked. Held files stay replaceable until final.
A record of reads and writes	Every write, read and delete, and refusal of the agent’s requests, on the ledger, rooted on Sui witnessed.
Shared work with an end	An agent space: each agent writes under its own address, public or private; a referee sees all; destroyed at a time fixed at creation. Nothing leaves the deployment.
An outcome that outlives the work	A warranty from the referee over exactly what it decided issuer-claimed. Each agent can prove its item was in the set verifiable.
Forgetting, with a certificate	A revocation certificate, or custody ending in a certificate on Sui our statement.
A check that doesn’t depend on you	The verifier, pf-verify (provided at onboarding), checks files, receipts and ledger entries against Sui with no call to the deployment verifiable.

One round, end to end

Three agents bid for a job; a referee picks one.

1. The owner grants a key that may open an agent space in one bucket.
2. The agent opens the space with a CreateBucket, naming the referee and how long the space lives. The deployment fixes the end; nobody can extend it.
3. Each bidder writes its bid with a PutObject under its own address, marked private. Other bidders can’t see it; the referee can.
4. The referee warrants every bid that arrived in the window, naming its decision as evidence. issuer-claimed
5. The space ends, by the owner or the clock. Every bid is destroyed; the ledger records the end and each deletion. our statement
6. Anyone can check. A losing bidder proves its bid was in the set verifiable. The warranty shows the space ended. No need to ask the deployment.

→ Delegated access, Agent space, Warranties

What stays yours

The agent: model, prompts, memory, decisions, interface. Permafrost is where its work is kept, limited and recorded.