# Pattern C - Agent Tool Wrapper (Agentic Era)

1. Wrap agent tool calls so each privileged action triggers a governance decision before execution.
2. Bind delegation rules: scope, TTL, and non-negotiable blocks (no mid-run escalation of privilege).
3. On ESCALATE, pause execution and request a signed approval token from named authorities.
4. Resume run only inside the approved scope + TTL. If denied or timed out, degrade safely to read-only.
5. Mint evidence capturing attempted expansion, approvals, and enforced bounds.

Minimal contract (illustrative):

```json
{
  "intent": {"action": "request_prod_write", "scope": "payments-prod/*", "ttl": "30m"},
  "world": "Agentic Execution Governance",
  "context": {"secrets_in_scope": true, "blast_radius": "wide"}
}
```
