The structured authority core inside the AgentCharter: act members bound to capability instances, gates, process steps, and execution tiers; read members with per-member semantic constraints; a strict purpose binding. The endpoint closure is derived — recomputed, never hand-maintained.
Server-side filter on the surface's charter reference.