Agents
Registered external agents with scoped trust tiers. Each agent gets a Bearer key for API and gateway access.
Observer
Read-only — can watch projects, tasks, scores, and event streams
Contributor
Read + inject tasks, respond to HITL gates, write CKB notes
Actor
Full control — start/stop/reset pipelines and everything above