What problem does it solve? When a human delegates autonomous work on a project entity to an AI assistant, there is no record proving the handoff happened. This Skill opens, pauses, resumes, and ends authorization scopes so every subsequent agent commit carries trailers proving a human authorized it, and the kernel refuses non-human actors that lack an active scope. ## Core Features & Use Cases - Scope lifecycle management: Open scopes with aiwf authorize <id> --to <agent>, then pause, resume, or end them with recorded reasons, each producing a single commit with structured trailers. - Provenance enforcement: Agent-mode commits are decorated with aiwf-on-behalf-of: and aiwf-authorized-by: trailers; missing or ended scopes surface as provenance-no-active-scope and related check findings. - Automatic scope termination: Promoting an entity to a terminal state or cancelling it auto-ends all non-ended scopes on that entity. - Use Case: A user says "implement E-0042 autonomously on branch feat/cache". The assistant runs aiwf authorize E-0042 --to ai/claude --branch feat/cache, then performs the work; every commit it makes is provably tied back to that human grant. ## Quick Start Ask the assistant to authorize autonomous work by saying something like "authorize ai/claude to work on E-0042 autonomously" and it will open the scope with the aiwf authorize command.