Every Sovereign Agent skill runs against a structured markdown prompt contract. The contract defines: what the skill is permitted to do, what output shape it must produce, what triggers human review, and what the escalation path is. Guardrails are human-readable, version-controlled, and testable. When behavior changes, the prompt contract changed - and you can read exactly what changed.
·Permitted actions scoped per skill - not global agent permissions
·Approval gate triggers defined in the contract, not inferred by the model
·Output shape contracts enable downstream validation and audit
·Markdown-structured prompts are readable by your team, not just the agent