Function agent_turn 

pub fn agent_turn(
    workspace: &str,
    agent: &str,
    person: &str,
    bound: &[Rule],
) -> Bound

The authority an agent’s turn carries in workspace: the preset of agent_policy::ROLE_CAP, narrowed by the bound the agent’s record keeps (bound; empty follows the default, which is the cap’s own). The agent acts with its person’s grants bounded by them, so it changes what its person may change, never more than the cap allows, never more than its record bounds it to, and never the workspace’s governance.

This is the only place an agent’s authority is made: a door or a receiver hands it the person whose message caused the turn, and the bound it holds for the agent’s record (crate::turn::authority).