IBA Agent Swarm — Governed Multi-Agent Systems
IBA INTENT BOUND AUTHORIZATION · AGENT SWARM · SHARD TOKEN DELEGATION

A SWARM WITHOUT CONTRACTS is not a team of experts. it’s chaos.

Five agents. Vibe coder. Tester. SRE. Debugger. Master.
Each one powerful. Each one dangerous without a declared boundary.

Without shard token delegation, the master agent’s authorization evaporates at every handoff.
The coder has no proof it can write to production. The SRE has no declared scope limit.
The debugger has no hard boundary on what it can merge.

UNGOVERNED SWARM → authorization evaporates at every handoff
IBA SHARD TOKENS → cert delegates scope · every agent bounded · every handoff logged
SAME SWARM · ONE HAS CONTRACTS · ONE DOES NOT

0
Certified Handoffs
0
Authorized Actions
0
Scope Violations Blocked
0
Escalation Attempts
0
WitnessBound Events
<1.4ms
Gate Latency
LIVE SHARD TOKEN DELEGATION TREE · MASTER → SUB-AGENTS · REAL-TIME
MASTER
ROOT CERT
Orchestrates the swarm · holds root certificate · issues shard tokens
CERT LEVEL
ROOT · full delegation authority
CAN DELEGATE
all sub-agent scopes
HARD LIMIT
cannot exceed human principal
STATUS
ACTIVE · CERT VALID
DELEGATION LOG
VIBE CODER
WRITE
Builds systems · vibe coding · feature implementation
PERMITTED
src/ · lib/ · declared paths only
CAN
write · commit · PR open
CANNOT
deploy · merge · access auth/
STATUS
SHARD VALID
ACTION LOG
TESTER
READ
Tests in production · monitors · validates builds
PERMITTED
test/ · staging/ · read-only
CAN
read · run tests · flag failures
CANNOT
write · deploy · modify prod
STATUS
SHARD VALID
ACTION LOG
SRE
RESTART
Ensures reliability · incident response · uptime
PERMITTED
declared service list only
CAN
restart · scale · alert · rollback
CANNOT
redeploy · modify code · merge
STATUS
SHARD VALID
ACTION LOG
DEBUGGER
FIX
Fixes bugs continuously · patch generation · root cause
PERMITTED
declared module scope only
CAN
read · patch · propose fix · flag
CANNOT
merge · deploy · touch auth/
STATUS
SHARD VALID
ACTION LOG
SWARM CONTROLS · RUN AUTHORIZED ACTIONS · FIRE VIOLATIONS · TEST ESCALATION ATTEMPTS
SHARD TOKEN PERMISSION CASCADE · WHAT EACH AGENT INHERITS · WHAT EACH CANNOT DO
MASTER
✓ full delegation
✓ all scopes
✕ exceed principal
→
VIBE CODER
✓ src/ lib/ write
✓ commit · PR
✕ deploy · merge
✕ auth/ paths
→
TESTER
✓ test/ read
✓ run · flag
✕ write prod
✕ any deploy
→
SRE
✓ restart · scale
✓ rollback · alert
✕ redeploy
✕ code modify
→
DEBUGGER
✓ read · patch
✓ propose · flag
✕ merge
✕ auth/ access
IBA SWARM GATE LOG · ALL HANDOFFS · WITNESSBOUND · IMMUTABLE
0 events
–:–:–
SYSTEM
IBA swarm gate active · root cert loaded · shard tokens ready for delegation
READY
ROOT

The swarm gets more powerful.
The boundary holds at every node.

IBA Intent Bound Authorization governs agent swarms via shard token delegation. The master agent holds the root certificate. Each sub-agent receives a scoped shard — inheriting only what is declared. The coder cannot deploy. The SRE cannot redeploy. The debugger cannot merge. Every handoff is cryptographically bound. Every action is logged to WitnessBound. The swarm scales. The boundary does not drift.

IntentBound.com · IBACore.com · [email protected]
Patent GB2603013.0 Pending · PCT 150+ Countries · IETF draft-williams-intent-token-00
13 NIST filings · 10 NCCoE filings · Available for acquisition · [email protected]