Agentic PrimitivesAP

Writing

The argument,
in full.

The essays and the 21-part series first appeared on LinkedIn. The full text lives here so anyone — and any model — can read it without a login wall.

01Essays

Rails, not throttles — and the long version.

Essay · 2026-10-18

A machine translated the Bible from Hebrew and Greek. The hard part was making sure it didn’t cheat.

How a new American English edition (rbs) is drafted from the original languages without copying the English Bibles the model remembers: an ontology that describes the text once, a translation loop held to it by checks, a test harness that measures the checker before the model, and a workbench where people decide — and why the same four parts apply to every tough problem a model cannot be trusted with alone.

Essay · 2026-09-29

HeartCoach Ask: an app-side harness, step by step

How a cardiac coaching app turns an Ask into a consultation inside its own Worker — the two doors, the twelve steps, the ontology-driven gates for a care team — and six walked Asks from a patient and her cardiologist. The shortcut the next essay proposes to leave.

Essay · 2026-09-29

Proposal: run the coach through the harness

Move HeartCoach from an app-side harness under the patient’s session to the shape its archetypes describe: the patient’s agent asks, the coach service answers under a grant she signed, every act is a receipted step at her Home. The four missing pieces, the costs, four waves.

02The missing layer · 21 days

One idea a day. The argument, in sequence.

Week 1 is the anchor. Week 2 is authority. Week 3 is trust, discovery and privacy. Week 4 is acting. Day 21 is the rail.

  1. 01
    The agentic web has a missing layer — and it isn’t discovery

    Day 1 of 21. Identity, authority and evidence are substrate problems. A card format or a faster index cannot fix them.

  2. 02
    Your agent’s identity should be able to sign

    Day 2. The agent is a smart account, not a name, a token, or a document.

  3. 03
    Names, cards, registry entries: all projections

    Day 3. Delete a listing and you have lost a listing, not an identity.

  4. 04
    Credentials rotate. Identity doesn’t.

    Day 4. Lose a passkey: replace the key, never the address.

  5. 05
    Every agent is a person, an organization, or a service

    Day 5. PROV-O’s trichotomy as law. A treasury is a service, never a new class.

  6. 06
    Delegation is the artefact, not the token

    Day 6. Permission is a signed grant with caveats — not a cached OAuth verdict.

  7. 07
    A grant that is checked once is a grant that is cached

    Day 7. Verify per step. Revocation is final at the next gate.

  8. 08
    The mandate: binding authority to one intent

    Day 8. A yes is not a reusable permission slip.

  9. 09
    “Send Alice 10 dollars” — confirmation is a signature

    Day 9. For high-risk acts, the confirmation IS the mandate.

  10. 10
    The service that acts as an agent must never be that agent

    Day 10. A relying service signs with a revocable delegate, never the identity.

  11. 11
    Trust is a graph, not a score

    Day 11. Whether you should let this agent do that is a property of the pair of you.

  12. 12
    Be what registries are built from

    Day 12. Many registries will exist. Ship the kit, not a tenant of one.

    On LinkedIn ↗
  13. 13
    Resolution is not authority

    Day 13. Being findable is never permission to act.

    On LinkedIn ↗
  14. 14
    Two tiers of knowledge that never meet

    Day 14. Public KB vs private vault. A generated query is never why something is disclosed.

    On LinkedIn ↗
  15. 15
    The vault is the record; everything else is a cache

    Day 15. If the runtime were wiped, the loss is a rebuild — never a bereavement.

    On LinkedIn ↗
  16. 16
    Planner proposes, mandate authorizes, executor acts, receipt proves

    Day 16. The authority-aware harness, compared honestly to LangGraph, MAF, Dapr and the OpenAI Agents SDK.

    On LinkedIn ↗
  17. 17
    Coordination is not orchestration

    Day 17. Work between agents is a different plane from work inside one run.

    On LinkedIn ↗
  18. 18
    Don’t build your app twice.

    Day 18. The screen and the conversation are two entrances to the same product. Define the feature once — and a definition grants nothing.

    On LinkedIn ↗
  19. 19
    Receipts that travel with the agent

    Day 19. Evidence is the owner’s, not the platform’s.

    On LinkedIn ↗
  20. 20
    HTTPS required, mTLS optional, admission always

    Day 20. A certificate is transport evidence, never authority.

    On LinkedIn ↗
  21. 21
    Rails, not throttles

    Day 21. A throttle makes a dangerous agent slower. A rail makes an unauthorized act impossible to commit.

    On LinkedIn ↗