//AGENT-NATIVE APPLICATION VOCABULARY
Signed entitlement
A signed entitlement is a cryptographically signed grant recording that a specific user holds the right to mount and run a specific agent-native app version. Hosts check the entitlement at mount time, which is what makes the runtime check enforceable without the publisher operating the runtime. Entitlements survive events that would break a subscription: a human-authorized fork, for example, keeps the user's entitlement while receiving new provenance.
The entitlement is where the category's commerce will eventually attach, and it's deliberately designed before any payment rail is chosen: the architecture cares that the right to run is verifiable and portable, not which processor sold it.
It's also a user-protection primitive. Because the entitlement belongs to the user rather than living inside one platform's account, continuity across Hosts and across publisher decisions is a property of the artifact.