Epoch-Bound Attested Execution (EBAE) separates an agent’s ability to propose an action from a protected executor’s authority to release it. Authority is organized into epochs; within an epoch, an action is released only when the active manifest, a one-use certificate for the exact intent, the cryptographic profile, policy, freshness, and anti-rollback state all belong to the same epoch and agree on the same action — a condition captured as an Authorization Closure Digest. A working reference implementation blocks repl