An agent that doesn't have a budget — it is one. An Ed25519 identity that carries a signed action-ceiling it cannot cross, refuses forged or over-budget actions, and forks into a lineage tree. The token-leak, made impossible by construction.
checking for WebCrypto Ed25519…
§1 · mint — capabilities + a budget
no wallet yet
§2 · act — the ceiling cannot be crossed
0 / 0
§3 · forge — a tampered token is rejected (real signature check)
Take the last signed authorization, flip one character of its signature, and re-verify. A real Ed25519 verify catches it.
—
§4 · lineage — the fork IS the wallet · credit flows upstream, bounded