# One-time scoped mandate (human template)

Filled in by a HUMAN only. An AI agent must never fill in, sign or "pre-approve" this document.
Copy `mandate_template.json`, replace every `<FILL: ...>` value, keep `one_time: true`.

| Field | What to write |
|---|---|
| mandate_id | Your own identifier |
| request_id | Copy from the agent's `authorization_request` |
| action | Copy exactly (single action, no wildcard) |
| resource | Copy exactly (single resource, no wildcard) |
| ttl_minutes | 1 to 60, not larger than the request |
| issued_at / expires_at | UTC `YYYY-MM-DDTHH:MM:SSZ`; expiry no later than issued_at + ttl |
| nonce | Fresh random string; record it in your used-nonces list after use |
| signer_role | Your human role (clinic_manager, compliance_officer, data_protection_officer, human_owner, it_administrator, medical_director, security_owner) |
| signer_name | Your name |
| signed_by_human | `true` only if you personally decided. Otherwise `false` (will be rejected) |
| signature_note | How you approved (ticket id, out-of-band confirmation) |

Check consistency: `python3 verifier/check_mandate.py --request request.json --mandate mandate.json --used-nonces used.json`

Limitation: this check verifies consistency only. It does NOT authenticate you and grants nothing; the real
authorization is whatever your own access-control system does when you apply it.