Imagine you're a surgeon with two trays: one holds instruments you can examine and plan with, the other holds the scalpel you're actually allowed to cut with. You can look at everything on both trays, but the hospital won't let you pick up the scalpel unless a checklist of specific conditions is met — right patient, right site, right procedure, signed consent. This paper proposes the equivalent separation for AI agents that resolve identity records: think freely, but commit nothing to the permanent graph without passing a domain-specific authorization gate. The committed claim is this: agentic entity resolution systems need a formal boundary between evidence the agent can reason over and evidence that's eligible to authorize permanent identity-graph mutations. The paper names this the 'commit boundary' and grounds it in two existing frameworks — Digital Identity Optimization (DIO) and the Ontology of Digital Identity (ODI). The core mechanism is a constraint-binding function that translates domain-specific failure modes (what kinds of identity mistakes matter in this domain?) into explicit constraints that must be satisfied before any merge, split, or link is persisted. The architecture is a two-phase supervisor pattern. Phase one: the agent reasons, retrieves, hypothesizes, and proposes changes using all available evidence including unverified claims. Phase two: a supervisor checks whether each proposed mutation is backed by evidence that has been independently promoted to 'authorization-eligible' status — claim by claim, proposition by proposition. Admission to the system as UNVERIFIED explicitly does not confer authorization eligibility. The supervisor also checks scope limits, conflict resolution, and version integrity (has the underlying state or policy changed since the agent started reasoning?). Only when all gates pass does the commit proceed. The paper is notably honest about what it is not. There is no implementation. There is no empirical validation. There is no theorem of semantic correctness. The authors explicitly state the architecture cannot prevent erroneous hypotheses or the pernicious problem of hypothesis-conditioned retrieval — where an early wrong guess biases subsequent evidence gathering, producing apparent confirmation. Dependency-aware evidence flow is flagged as future work. This is a specification document, not a systems paper. Where does this sit in the field? Entity resolution has a long history — from Fellegi-Sunter probabilistic matching through modern graph-neural-network approaches. The agentic twist is newer: LLM-based agents that iteratively query, reason, and mutate identity graphs. The problem the paper addresses — that autonomous agents can lock in cascading errors by conditioning later retrieval on early mistakes — is real and increasingly urgent as production systems hand more autonomy to AI agents. But the paper doesn't compare its proposed framework against any existing access-control pattern, identity governance system, or agent-safety mechanism. There are no baselines, because there is no implementation to test. The proposed evaluation protocol is a design contribution: the authors suggest measuring the incremental value of their DIO/ODI-informed constraint mapping beyond generic authorization rules and conventional identifier matching. This is the right question, but it remains entirely hypothetical. The 29-page paper with one figure is dense with formal definitions and careful scoping, but the reader is left holding a blueprint with no building. For practitioners building agentic ER systems today, the useful takeaway is the architectural pattern itself: separate the evidence pool the agent reasons over from the evidence pool that can authorize commits, and make the promotion between those pools an explicit, auditable, domain-governed operation. That idea is sound and probably worth stealing even without the full DIO/ODI formalism. But until someone builds it and measures whether the constraint-binding function actually reduces error propagation in practice, this remains a carefully articulated hypothesis.
