Page stub. Full content lives in the
README — User Scope + Roles.
TL;DR
User is the per-request scope. Marks “this invocation acts on behalf of alice,
in role X.” Async context manager; pushes a fact-bearing Biscuit through the
agent runtime.
billing role’s policy, and
evaluates its constraints against each tool call.