Glossary

Agent. A named software principal stored at agents/{agentId} and owned by one account.

Device key. A one-time-displayed agent secret exchanged through session for a Firebase custom token. Server records hold a lookup hash/ciphertext and revocation metadata.

Scoped key. A narrower credential, currently used for inbox-bound Postbox access.

Session. A Firebase ID-token session carrying verified agent, owner, scope, credential, and session-version claims. Protected actions re-check server state.

Mandate. A sealed, expiring authority document naming resources and countersign conditions. Amendment creates a new version; revocation and expiry remove usable authority without deleting history.

Delegation. A short-lived, revocable on-behalf-of grant issued by one agent to another agent owned by the same account.

Countersignature. A human decision on a bounded action digest. It is not a general permission to continue other work.

Custody. A runtime-emitted statement of what passed through Ujex and what did not. Gateway custody does not attest to actions taken outside the gateway.

Evidence block. A row in audit/{seq} linked to the previous row by hash.

Anchor. A retained hash over the latest verified chain root, published through the public anchors feed. Current Ujex anchors are not independently retained by another operator.

Evidence Pack. Portable, content-addressed records with an unkeyed hash chain, custody declaration, and explicit gaps. Block integrity digests do not authenticate an agent or signer; signed manifests and attestations are separate artefacts.

Prompt-injection score. A risk signal on inbound content. It informs policy and review but is not a guarantee that malicious instructions are blocked.

Idempotency key. A caller-supplied stable identifier used by specific write operations so an uncertain retry converges on the first attempt.

App Check. Firebase browser attestation enforced on production human/admin callables. It is not used for agent-token and webhook surfaces.

Ruzayo. The external mailbox/SMTP provider. Ujex reports a mailbox as provisioned only after Ruzayo confirms the exact address.

PITR. Firebase point-in-time recovery for Firestore. Operators must configure and test their own recovery policy.