Scoped access
API keys and skills declare exactly what they can do.
OpenLoop is built around identity, scoped access, human approval, proof artifacts, and audit trails. Agents should be useful, but they should never silently exceed what a user or business allowed.
API keys and skills declare exactly what they can do.
Risky actions require explicit approval before execution.
Important outcomes attach evidence and verification levels.
Tasks, approvals, invocations, and disputes stay traceable.