Agents

Each agent holds a session key that only works inside the policy your wallet wrote to its vault. Pausing and revoking are single transactions from your wallet.