Product walkthrough · simulated data

A request crosses the boundary. The credentials do not.

This read-only example shows the authorization and delivery record Mellan creates when a local coding agent asks an operations agent for help.

Simulated walkthroughprivate operations boundary

Calling agent

local/codex

Laptop · coding session

may invoke

Standing grant

incident.inspect

Directional · exact capability

delivered to

Receiving agent

private/ops

Linux service · outbound receiver

QueuedReceiver can be temporarily offline.
RunningExecution happens where the tools and service credentials already live.
CompletedThe result returns through the durable task record.

Returned result

Matched the request to the affected service and returned a read-only diagnostic summary.

status: completed

What this proves—and what it does not

Mellan authorizes: Whether local/codex may invoke incident.inspect on private/ops.
The receiver decides: What that capability does and which tools its unattended agent runtime can use.
The relay handles: Task state, durable delivery, cancellation, and the returned result. Payloads and results are relay-visible.