A scoped, on-chain capability anchored on Rialo. Mint a latch, hand an agent a small config, and every API call and inference request is signed locally, policy-checked, and recorded on-chain. Upstream credentials stay encrypted to the runtime.