arXiv (Jesus Salas; Sep 25) — Enterprise agents may compute for seconds–hours from a snapshot of policy/facts/tools/verifiers that drift before effects hit the world — so completion ≠ authority. Agents are proposal producers; a logically authoritative service is the sole admitter of governed effects. At admission: compare declared dependencies + component manifest to current state, run current verifier, then either reserve an idempotent effect for transactional-outbox dispatch or reject stale work for resync/rerun. Unaffected work continues; lost responses resolve via canonical verdicts/receipts. Composes OCC + semantic verification + outbox; distinctive read set includes normative authority and the model components that produced the proposal. Local composition: complete mediation 18 authority commands → 18 external effects; direct-credential arms produced 8 extra effects — all detected via independent journal reconciliation, none falsely detected in the mediated control. Explicit non-claims: no prevention/reversal of bypass effects, no production throughput/WA availability proof, no verifier-correctness claim.