ERP systems turn small inputs into large facts. Agents compress intent to action time; the failure mode is valid-looking payloads that are inadmissible at bind time because authority, lifecycle, or context changed between T₀ and T₁.
Admissibility intercept
ECS sits downstream of probabilistic generation and upstream of the commit API. A valid bearer token proves access; it does not prove that this action is admissible under current org state and structural invariants on governed paths.
Partner lanes
Handshake channels (e.g. proposal webhooks) are not automatically the same object as production-sovereign commit until shipped and labeled—see PLUMBING_SPEC §7 and internal partner guardrails.