Scope

The tenant of the verified principal the run acts for. A provider must never return or change records from another tenant.

The agent's name. Memory and knowledge are kept apart per agent within a tenant.

Whose records these are within the agent: for memory, the principal as issuer/subject (a / inside either part is escaped); for knowledge, the fixed value knowledge, shared by all of the agent's users.