# Mandates

What a person authorised a machine to do — scope, ceiling, expiry, constraints — and the calls that issue, check, consume, read and revoke it.

A mandate is issued from a live capture, is immutable once written, and is the only reason an agent may act. Every mandate call sits under `https://api.sidaxis.com/functions/v1/` and carries `x-sidaxis-api-key`, `x-sidaxis-timestamp` and `x-sidaxis-nonce`.

| Call | Page | What it does |
| --- | --- | --- |
| GET mandate-scopes | scopes | The eight canonical scopes with human labels |
| POST mandate-issue | issue | Issue a mandate from a live capture |
| POST mandate-check | check | Advisory: would this action fit? Nothing moves |
| POST mandate-consume | consume | Authoritative: the only call that moves the ceiling |
| GET mandate-get | get | One mandate with its statement, or a list by status |
| POST mandate-revoke | revoke | Immediate, terminal revocation |

> Check is advisory and moves nothing. Consume is authoritative and is the only call that does. An allowed check is never authorisation to act.