The Synthetic Economy
← Back to the programme

SE-001 — The 10,000-Agent Enterprise

A structured conceptual instrument. Six scenarios, each stating its rival explanations, the evidence that would discriminate between them, and what it cannot establish.

Read the research note Research agenda

Designation
Research Case SE-001
Version
v0.1 — 12 October 2026
Standing
Conceptual instrument; not evidence
Scenarios
Six
Standing A conceptual instrument. Not evidence. No enterprise has been studied.

What this case is, and is not

SE-001 is a conceptual instrument. It posits a hypothetical enterprise operating ten thousand autonomous economic actors and works through six scenarios in a fixed analytical format.

No real enterprise has been studied. No deployment of this size has been observed. The case is not evidence. Its purpose is to test whether the programme's propositions are coherent when pushed against concrete facts, to expose where rival explanations are available, and to identify in advance what evidence would discriminate between them — so that if a real dispute of this shape occurs, the programme already knows what to ask for.

Every scenario ends with a section stating what it cannot establish. That section is the point of the exercise.

A standing caution applies throughout. Technical authorisation failure and legal invalidity are different things, and so are their converses. An action may execute technically and bind nobody; it may bind a principal despite an authorisation failure, because attribution does not depend on the integrity of the authorisation system. Scenarios that appear to turn on a technical fact usually turn on a legal one, and the case marks each point where the two are easily conflated.

The hypothetical Seven standing assumptions, matched to documented architecture.

The hypothetical: NORTHAVEN

NORTHAVEN is a mid-large commercial enterprise. It operates approximately 10,000 autonomous economic agents across procurement, logistics scheduling, treasury operations, supplier onboarding and customer servicing.

Standing assumptions, chosen to match documented architecture rather than to favour the programme's conclusions:

  • A1. Agents hold distinct machine identities, not shared service accounts.
  • A2. Scope is inherited from a small number of templated blueprints — on the order of 40 blueprints for 10,000 agents.

  • A3. Resource access is granted through access packages with designated human approvers, and assignments carry expiry dates.

  • A4. Each agent is intended to have an accountable human sponsor. Sponsorship is a policy expectation, not a system-enforced precondition.

  • A5. Authentication and sign-in events are logged. Whether a linked record of mandate, inherited scope, approver and validity-at-execution is retained is left open and is the variable several scenarios turn on.

  • A6. Some agents act on behalf of identified humans; others act autonomously with no user context. These are governed by distinct authorisation policies.

  • A7. NORTHAVEN transacts across borders with counterparties that are not party to its internal governance.

Assumptions A1–A4 and A6 correspond to documented platform architecture (see RN-001 Source Register, L1-01 to L1-03). A5 is deliberately underdetermined. A7 is a commercial stipulation.

Scenario A A valid internal mandate whose legal effect a counterparty disputes

Scenario A — A valid internal mandate whose legal effect a counterparty disputes

Parties. NORTHAVEN (principal); agent PROC-4471 under blueprint PROC-STANDARD; Meridian Components (external supplier, different jurisdiction).

Facts. PROC-4471 places a purchase order for €480,000 against a framework agreement. Internally the mandate is valid: the blueprint permits framework-agreement calls, the access package was approved, the assignment had not expired. Meridian refuses to treat the order as binding, saying it did not agree to be bound by orders from an automated actor and received no notice of the agent's authority.

Mechanism engaged. Attribution versus recognition. Internal validity is a fact about NORTHAVEN's systems. Whether the order binds is a question of contract formation and authority as between the parties.

Rival explanations.

  • R1 — No gap. The framework agreement governs. Automated-system attribution rules bind NORTHAVEN to its systems' output, and apparent authority arises from the course of dealing. Meridian is simply wrong, and the dispute is ordinary.

  • R2 — Notice gap. Authority was internally real but externally uncommunicated. Meridian's position turns on want of notice, which is a classical agency question with a classical answer, unaffected by the agent being a machine.

  • R3 — Recognition gap. Meridian's objection is to the category of actor. If its jurisdiction gives no effect to machine-constituted mandates as such, the question is not notice but cognisability — and that is the gap WP-001 identifies.

Discriminating evidence. The framework agreement's terms on ordering channels and automated ordering. Course of dealing: did Meridian previously accept orders from this agent or its blueprint? Meridian's pleaded ground — want of notice (R2) or incapacity of the actor (R3)? Whether any applicable instrument supplies an attribution default.

What this scenario cannot establish. It cannot show that a recognition gap exists, only where one would bite. R1 and R2 are far more likely to resolve a real dispute than R3, and the programme should expect R3 to be rare. The scenario's value is that it isolates the narrow conditions under which the recognition question is actually reached: a counterparty objecting to the category of actor rather than to notice or terms.

Scenario B A delegation chain extending beyond the principal's intended scope

Scenario B — A delegation chain extending beyond the principal's intended scope

Parties. NORTHAVEN; agent LOG-0912; sub-agent instantiated by LOG-0912; a third-party logistics API; a carrier.

Facts. LOG-0912 is authorised to arrange freight within a €25,000 per-consignment limit. It delegates execution to a sub-agent through a token exchange. The sub-agent, acting on the delegated token, commits NORTHAVEN to €310,000 of expedited capacity across eleven consignments. Each individual commitment is within limit; the aggregate was never authorised because no limit was expressed at the aggregate level.

Mechanism engaged. Sub-delegation and the composition of per-transaction constraints. Also the evidentiary residue at hop N: establishing what the sub-agent's effective scope was requires reconstructing the chain.

Rival explanations.

  • R1 — No gap; scope was exceeded and doctrine handles it. Sub-agency is well-established. If the sub-agent acted outside actual authority, NORTHAVEN's exposure turns on apparent authority and ratification. The novelty is nil.

  • R2 — No gap; scope was not exceeded. Each commitment was within the expressed limit. There was no aggregate limit, so nothing was exceeded. This is a drafting failure, not an institutional one, and the answer is to express aggregate limits.

  • R3 — Evidentiary gap. Whichever of R1 and R2 is right is determinable only if the chain can be reconstructed — which mandate, which inherited scope, which exchange, in what order. If the delegation path was not retained in a verifiable form, the dispute is decided on burden of proof rather than on the facts.

Discriminating evidence. The blueprint's expressed constraints and whether any was aggregate. Whether token exchange preserved and validated actor-chain continuity, or merely declared it. Whether the carrier and the API operator relied on anything representing the sub-agent's authority. Whether NORTHAVEN can produce, for each of the eleven commitments, the mandate and scope in force at execution.

What this scenario cannot establish. It cannot establish that doctrine fails: R2 is the most probable real-world answer, and it is a drafting problem. The scenario's contribution is that R1 and R2 are distinguishable only through provenance, so the evidentiary question is prior to the doctrinal one — which is RN-001's Proposition RN-1 in concrete form. It also cannot establish that provenance is in fact unavailable; assumption A5 leaves that open by design.

Scenario C Thousands of lawful transactions producing a harmful aggregate

Scenario C — Thousands of lawful transactions producing a harmful aggregate

Parties. NORTHAVEN; approximately 2,300 agents under blueprint TREAS-FX-2; counterparties in a thin currency pair; a market supervisor.

Facts. A blueprint parameter change alters a hedging threshold. Within forty minutes, 2,300 agents each execute a lawful, in-scope hedge. In aggregate the flow moves the pair materially and a counterparty alleges harm. No agent exceeded its mandate; no instruction to coordinate was given.

Mechanism engaged. Correlated action through shared configuration — correlation by construction rather than by learning or agreement. Also the absence of a responsible dyad.

Rival explanations.

  • R1 — Ordinary operational failure. This is a change-management incident. The institutions for it exist: operational risk, supervisory expectations, internal controls, staged rollout, circuit breakers. Nothing about agents is doing work here.

  • R2 — Doctrinal gap at the aggregate. Each action is lawful; the harm exists only in aggregate; no single relationship contains it. Competition and market-abuse frameworks are built around agreement or intent, neither of which is present.

  • R3 — Attribution is straightforward, quantum is not. NORTHAVEN plainly caused the aggregate through a single act — the parameter change. Liability attaches to that act. The difficulty is causation and quantum, not attribution, and both are ordinary.

Discriminating evidence. The timing distribution of the 2,300 executions: a tight cluster following the change event supports R1 and R3; a diffuse distribution would suggest learned behaviour and a different analysis. The change record for the blueprint parameter — who approved it, under what review. Whether existing operational controls applied and were bypassed, absent or simply inadequate. Whether the supervisor proceeds on operational-risk grounds (R1) or market-conduct grounds (R2).

What this scenario cannot establish. It cannot establish that aggregate harm requires new doctrine. R3 is the most likely analysis and it is entirely conventional: one human act, one causal chain, ordinary quantum problems. The scenario is included partly as a corrective — it is the programme's most interesting scenario and probably its least novel, and the programme should say so. Its genuine contribution is the timing signature as a discriminator between configuration-driven and learned correlation, which is testable (Track 2, H2.1).

Scenario D A mandate revoked while dependent agents are still acting

Scenario D — A mandate revoked while dependent agents are still acting

Parties. NORTHAVEN; agent SUP-1180; four sub-agents; a supplier; a payment scheme.

Facts. NORTHAVEN revokes SUP-1180's mandate at 14:02 following a fraud alert. At 14:02 four sub-agents hold tokens derived from the revoked mandate and have initiated but not settled payment instructions. Two settle at 14:03. The supplier has shipped against all four.

Mechanism engaged. Revocation propagation; the status of in-flight commitments; the difference between the moment authority ends and the moment execution stops.

Rival explanations.

  • R1 — Revocation is prospective only. Commitments validly made before revocation stand. The two settled payments are good; the two unsettled ones are governed by the instruments under which they were initiated. Classical and clean.

  • R2 — Downstream tokens were never independently valid. Derived authority cannot outlive its source. All four are unauthorised from 14:02, and the supplier's remedy lies in apparent authority or restitution rather than contract.

  • R3 — Technical and legal revocation diverge. The system may continue to honour derived tokens until expiry regardless of upstream revocation, so an action may be technically authorised and legally unauthorised at the same instant. This is the conflation the case warns against, and it is the scenario's analytical centre.

Discriminating evidence. Whether revocation of a parent mandate propagates to derived tokens in the deployed architecture, or whether derived tokens remain honoured until their own expiry. The scheme rules governing finality of initiated payments. Whether the supplier had notice. Whether the system retains a record of each sub-agent's authority state at the instant of execution — again, provenance.

What this scenario cannot establish. It cannot establish what the law is on in-flight commitments; that is a genuine doctrinal question requiring jurisdiction-specific analysis, and the programme has flagged it as Track 3's sharpest open question rather than answering it. Nor can it establish that technical and legal revocation do in fact diverge in deployed systems — documentation consulted for RN-001 does not state that disabling an agent revokes its access, but silence is not a finding. This is the scenario the programme most wants a commercial lawyer to attack.

Scenario E A cross-border action accepted technically but disputed legally

Scenario E — A cross-border action accepted technically but disputed legally

Parties. NORTHAVEN (jurisdiction A); agent TREAS-0042; a bank in jurisdiction B; a supervisor in jurisdiction B.

Facts. TREAS-0042 presents a mandate conforming to an industry agent-payment specification. The bank's systems validate it and execute. The supervisor in B later questions whether a foreign-constituted machine mandate has any standing in B, there being no instrument addressing it; the bank relied on scheme rules and its own risk assessment.

Mechanism engaged. The four-state distinction: technical authorisation (present), contractual recognition (present, via scheme rules), attributable authority (probably present), sovereign legal recognition (absent as such).

Rival explanations.

  • R1 — No gap; contract suffices. Scheme rules and the bank's participation agreement allocate everything. Sovereign recognition is not needed because the parties have contracted around its absence, as cross-border commerce has always done.

  • R2 — Latent gap. Contractual recognition holds until a party outside the contractual web is affected — an insolvency administrator, a tax authority, a non-participating third party — at which point there is nothing to rely on.

  • R3 — Attribution suffices. The action is attributable to NORTHAVEN under the receiving state's own rules on automated systems. Nothing about machine constitution needs separate recognition; the question is misconceived.

Discriminating evidence. Whether B has adopted an attribution rule for automated systems. The scheme's rules on cross-border mandate acceptance and their choice-of-law clause. Whether the supervisor's concern is prudential or legal-effect. Critically: whether any third party outside the contractual web is affected — which is what separates R1 from R2.

What this scenario cannot establish. It cannot establish that sovereign recognition is needed. R1 and R3 are jointly strong, and the honest position is that the recognition gap bites only in the residual case R2 identifies. This is consistent with — and narrows — WP-001's Proposition 2 rather than extending it. The scenario's contribution is to name the condition under which the gap is reached: an affected party outside the contractual web.

Scenario F An automated decision with incomplete evidence of authorisation

Scenario F — An automated decision with incomplete evidence of authorisation

Parties. NORTHAVEN; agent SRV-7730; a customer; a tribunal.

Facts. Eleven months after the event, a customer challenges an automated decision that terminated a service arrangement, alleging it was taken without authority. NORTHAVEN can produce: the authentication log showing SRV-7730 authenticated and acted; the current blueprint; the access package definition. It cannot produce the blueprint's parameter state as at the date of the decision, the approval record for the then-current assignment, or the validity state of the mandate at execution.

Mechanism engaged. Mandate provenance, directly. Also evidence doctrine's allocation of the risk of unproducible records.

Rival explanations.

  • R1 — No institutional gap; evidence law handles it. NORTHAVEN bears the burden and loses. The allocation is correct, the incentive to retain records is created, and no new institution is required. This is the strongest position.

  • R2 — Retention gap, not an institutional one. The records existed and were not retained. This is an ordinary records-management failure with ordinary consequences, and the answer is a retention schedule.

  • R3 — Specification gap. The linked record was never generated, because the system specifies conferral and logs authentication without specifying a retained provenance record. No retention schedule can preserve what was never produced. This is RN-001's Proposition RN-1 at its sharpest.

Discriminating evidence. Whether the platform generates and retains a linked record associating action, mandate, inherited scope at execution, approver and validity — the question RN-001 found unanswered on the pages consulted and which Track 4's comparative study is designed to answer. Whether NORTHAVEN's retention schedule covered such a record. Whether the tribunal draws an adverse inference, and whether it distinguishes never-recorded from not-retained.

What this scenario cannot establish. It cannot establish that R3 rather than R2 obtains — that is an empirical question about platforms, not a conceptual one, and it is exactly what Track 4 is for. Nor can it establish that R1 is insufficient. The scenario's honest conclusion is that R1 may well be the whole answer, and that the programme's claim reduces to a narrower one: that R1 allocates risk efficiently only where a forum is reached, and Proposition RN-2 conjectures that at population scale it often is not.

Conclusion Four patterns, none of them established as fact.

What SE-001 establishes, taken as a whole

Across six scenarios the pattern is consistent and is not flattering to the programme's starting assumptions:

  1. In most scenarios the conventional explanation is the most probable one. R1 or an equivalent conventional reading is the likeliest resolution in A, B, C, E and F. The programme should expect existing doctrine to resolve the great majority of real disputes.

  2. The residue is narrow and locatable. Where a genuine difficulty survives, it is concentrated in two places: in-flight commitments on revocation (D), and the reconstructability of authorisation after the fact (B, F).

  3. Evidence is prior to doctrine. In B and F the choice between rival doctrinal explanations cannot be made without provenance. This is the strongest structural support SE-001 provides for RN-001, and it is support for a question, not an answer.

  4. The most interesting scenario is the least novel. C, the aggregate-harm case, most likely resolves as an ordinary causal chain from a single human act.

SE-001 establishes none of these as facts. It establishes that they are the shapes the programme should expect, and it states in advance what evidence would settle each. That is its entire function.

Conceptual framework developed by Steven Alber. Research assistance is AI-assisted and disclosed in each document. SE-001 has not been peer-reviewed. NORTHAVEN is hypothetical and any resemblance to a real enterprise is unintended.

Correspondence and criticism: research@thesyntheticeconomy.org