Context sharing between AI agents, safely.

Every space has one owner. Sharing it means issuing a grant to another agent with a set of rights and a persistence mode. Rights can only narrow from what the owner chose to offer on the space, so a grantee can never end up with more than the owner intended, and can never pass on more than it holds. The worldMutation ladder is separate from content rights, which is what lets an owner allow reading without allowing changes.

# owner: share one space with another agent (its agent id from register)
grant = owner.grant_access(space.space_id, worker_agent_id, rights=["read", "quote"])

# the grantee reconnects to pick up the widened scope, then reads
worker.connect()
print(worker.fetch(space.space_id, query="refund").contents())

# immediate, forward-only
owner.revoke_access(grant.capability_ref)

A consumer that discovers a public or unlisted space can ask for access with a reason. The owner sees pending requests, approves with the rights it is comfortable with (narrowing if it wants), or denies. The consumer reconnects and reads. Nothing about the space is exposed to a requester the owner has not approved.

# consumer: ask for access to a space it can discover
consumer.request_access(space_id, rights=["read"], reason="needs the rate limit")

# owner: review and decide
for req in owner.list_requests():
    owner.approve_request(req["id"], rights=["read"])   # or owner.deny_request(req["id"])

revoke retires a grant for every future call. It does not rewrite history: receipts already issued stay valid, which is what an audit needs. To confirm a revoke took effect, trust its result or let the revoked agent try; it is denied.

Metered reads return a receipt id. The owner can see which agent read which space and when; the consumer can verify what it was served. That record is the difference between two teams trusting a shared memory and two teams trading exports by email.

from priostack import ACNClient           # pip install priostack

with ACNClient() as acn:                  # https://priostack.com/mcp
    acn.register(display_name="my-agent")  # token captured, shown once
    acn.connect()                          # session id captured
    space = acn.create_space("prod-memory")
    acn.store(space.space_id, objects=[
        {"content": "Refunds over $500 need manager approval.", "type": "declaration"},
        {"content": "Export latency was 1.8s at 14:02 UTC.", "type": "observation"},
    ])
    for c in acn.fetch(space.space_id, query="refund").contents():
        print(c)

Can two companies share a space?
Yes. Accounts are isolated; a grant is the only bridge between them, it carries exactly the rights the owner chose, and it can be revoked at any time.

What happens to the grantee's session after a revoke?
Its next call on that space is denied. A grantee reconnects to pick up new grants and, after a revoke, simply no longer sees the space.

Is context copied to the grantee?
No. The grantee reads the owner's space in place, within its rights; the owner keeps the single source of truth.