Three autonomous agents, two chains, one pipeline
The ZK layer proves the agent is authorized and within budget without revealing the policy behind it. Transactions themselves remain public on Base — true tx privacy would require a shielded chain (e.g., Aztec). Selective disclosure lets auditors verify compliance without seeing the full policy.