Is requesting agent always a person?

[stain]

On requesting agent: Does this have to be a person?

Raised by @vpnu

[stain]

The example implies a Person, but the spec does not currently require it.

Alternative agents would be an Organization or a SoftwareApplication - do we want to explicitly allow/deny these? This should link to TRE requirements on usage I think, which I believed was always linked to a person.

[beforan]

We do have a use case whereby we expect an integration tool to fetch (governance approved) jobs from another system in a non standard form, build a profile compliant crate, and submit it for execution, then when receiving the results, unpack the crate, transform them to the target system's own format and return them.

In this case I would expect to identify either the integration or the external system as an approved SoftwareApplication agent.