Agents that cite, or abstain
Twelve agents, each on a permission rung you set per tool and per tenant, each calling the same domain services the interface calls. Every answer carries the object revisions it read, and every action lands in the audit chain naming the agent and the tier it ran at.