Actions and context

An action has a stable type and optional domain attributes. The type identifies the operation, while attributes carry values needed to make a policy decision.

{
  "type": "refund.create",
  "attributes": {
    "amount": 80,
    "currency": "GBP",
    "customer_id": "cus_123"
  }
}

Context is a flexible JSON object for immutable facts such as the customer, resource, session, or request history. Keep values deterministic and avoid silently enriching a test from mutable external systems.

The trusted server integration establishes the agent identity and workspace. Do not accept either value directly from an untrusted browser request without validation.