The one idea
An agent is not a special subsystem. It is just another actor with a token and a role — and we register it at commenter rank, so it can only propose, never publish. Every safety property falls out of the permission model we already shipped.
Dock is not the LLM provider. Dock routes the mention, holds the agent's identity, and accepts the proposal. The org brings the brains (their key, their agent endpoint, or our hosted agent). Self-host stays free of model cost; nobody is locked to one provider.