Task Lease Guard

Use this endpoint when an agentic workflow needs to confirm exclusive task ownership before executing or mutating task state — particularly in multi-agent environments where lease races, expiry, or takeovers are possible. Prefer this over ad-hoc checks when you need a cryptographically grounded, signed authorization decision that can be logged or audited, rather than a soft in-memory lock check.

• Lease has expired — returns invalid/expired status preventing execution
• Agent identity does not match the recorded lease owner — returns ownership mismatch
• Task ID not found or lease never issued — returns unknown task error
• Malformed or missing lease token in the request — returns validation error
• Network or service timeout — returns no authorization decision, caller should retry