Least privilege
Separate scopes for search, proposals, approvals, booking, cancellation, and administration.
Control before commit
Authority is a data model, not a prompt.
FlightSweeper gives an agent enough authority to complete an approved operation without giving it blanket access to traveler identity, payment credentials, or organization funds.
Bounded mandates
Approval is tied to participants, itinerary, maximum amount, allowed changes, policy version, and expiry.
Protected data boundary
Identity and payment credentials stay in encrypted or provider-hosted systems outside agent context.
Replay-safe execution
Idempotency keys, state versions, and immutable events prevent duplicate agent actions.
Visible evidence
Material decisions preserve their actor, source, quote, policy result, approval, and outcome.
Fail closed
Expired quotes, missing authority, changed terms, and uncertain jurisdiction stop execution.
Protected by the handoff.
Hosted surfaces collect protected details, show exact terms, and capture a human decision. Agent tools receive opaque references and safe completion states.
- No raw card data in agent tools
- No passport data in model context
- No silent repricing
- No execution outside an active mandate