Scope grants

EIP-712 signed authorisations from customers. The agent will refuse any scan that doesn't map to an active grant.

Sign new grant (coming)

Customer signs a typed-data message (EIP-712) declaring what may be scanned, when, and how.
The signature + grant hash is anchored on GOAT for verifiable provenance.
Before any packet leaves the agent, it checks the request against the active grant locally.
Grants are revocable by the customer at any time; revocation is reflected on-chain.