Glossary

Plain definitions for the SEED words you will see in commands and docs.

All terms

Clearance/klēr-əns/

Permission for an assistant to act. It says who the assistant is, what it may do, how much budget it has, and how to revoke it.

Identity/ī-den-tə-tē/

The local SEED identity that represents you or your machine. It signs permissions and revocations.

Actor/ak-tər/

The assistant or tool you connect to SEED, such as Claude Desktop, Cursor, Continue, or a script.

XAPP/eks-app/

A signed description of the capabilities an app or assistant wants to expose to SEED.

Mandate/man-dāt/

A signed permission slip. It names the assistant, the allowed actions, the expiry, and the sandbox budget.

Vault policy/vawlt pol-ə-sē/

The local rule set that can still deny an action even if an assistant has a mandate.

Sandbox budget/sand-bäks bə-jət/

A test budget for allowed actions. It limits what the assistant may spend or consume in the sandbox.

Sandbox payment intent/pā-mənt in-tent/

A simulated payment request used for testing. It does not settle real money in the current release.

Approved action/ə-prōvd ak-shən/

A request SEED allowed after checking identity, permission, policy, and budget.

Signed log/sīnd läg/

A local activity record that is signed so later changes can be detected.

Proof/prüf/

A file you can export to show what the assistant did and whether the log verifies.

Verify/ver-ə-fī/

Check that a proof or signed release has not been changed.

Revoke/ri-vōk/

Turn off an assistant's permission. Later requests are denied.

Fail-closed/fāl-klōzd/

When something is missing or unclear, SEED denies the action instead of guessing.

MCP/em-sē-pē/

Model Context Protocol. A common way for AI assistants to connect to local tools.

Bridge/brij/

The local process that lets an assistant talk to SEED.

base/sēd kōr/

The low-level SEED code that handles keys, encoding, logs, and local state.

clearance/sēd klēr-əns kōr/

The SEED Clearance code that checks identities, assistants, permissions, policy, and revoke state.

WIT/WASM/wit / wäz-əm/

Portable runtime/interface technology used so the same permission rules can be reused in different hosts.

Capability manifest/kā-pə-bil-ə-tē man-ə-fest/

A signed list of actions an app or assistant says it can perform.