$title

A mandate file says which tools an agent may call, what it may spend and when. This page explains one in plain sentences, the same sentences arcaeon mandate explain prints, and lists the calls the last session in a ledger made outside it.

The last gated session on this machine

Record-only is the default: a call outside the mandate is still forwarded, and the ledger gets a row naming it. This page reads those rows; it blocks nothing and changes nothing.