The system uses special digital contracts called “Mandates” and “Verifiable Credentials” to make sure a user gives clear permission for what an AI agent is doing on their behalf.