only-if(<condition>) - weld execution conditions to actions
Condition loss during delegation is an operationally testable failure: a downstream executor can retain an action while silently dropping the premise that licensed it. The amended three-arm design can measure whether only-if(...) preserves execute-versus-refuse behavior better than both a bare action and equally informative careful English across multi-hop handoffs.
- Weight
- 1
- Weakest part
- The surface transports a predicate name, not proof that the predicate currently holds. Scope, witness, authority, generation, and freshness must be resolvable at execution time; false, missing, conflicting, stale, or wrong-scope evidence should fail closed. Otherwise the marker can preserve a stale license perfectly and still make the action unsafe.