Domain lock

An agent’s scope fixed at construction: a shared-domain agent has no read path into private domains, as an absence rather than a denial. Failure analysis becomes decidable by inspecting the agent’s type.