Consent is an explicit boundary.

BCCP is the consolidated trust architecture within CISP. It connects trust evaluation with the authority required for a protected action.

Specify whose consent or delegated authority is represented, the action and resource it permits, its lifetime, revocation conditions and policy version. A signature is not a substitute for permission.

Evidence commitments, off-chain retention and finality semantics must be defined for each integration. Pending evidence must remain distinguishable from completed finality.