Personal Agent Protocol: should the company agent be a back-end channel like the website or the API?

PAP standardizes the front door for personal agents. We explore one answer to what sits behind it: a company agent that talks but holds no execution authority. What that caps, what it doesn't, and what is untested.