Delegation, not impersonation
An autonomous actor acts for a member as a distinct, capped identity — subject, audience, actor — never by holding the member’s own login. A grant is policy, not a secret.
Notary is the household security-token service in Nexus: it mints short-lived {sub, aud, act} delegation tokens from member-consented grants so an agent runner or a scheduler
can act as a member at an internal provider — without ever holding the member’s login token. The
actor is a delegated principal, not a second human: its authority is derived from the member’s and
capped below it.
The same construction runs through the province’s connected-services rationale — consent and delegation enforced on one mediated exchange path — because it is the only one that keeps the audit trail honest about who did what, on whose behalf.