Six roles, one audit trail: rethinking RBAC for agents

This post is in preparation. We will explain the six-role model, why we deliberately did not collapse it into the usual three, and how every action a role takes ends up in a single audit stream regardless of surface.