platform · AVC

Authority is a runtime property.

Permission, risk, approval and ownership are visible before consequential work executes.

Authority reference

Permission, limits and prohibition remain separate.

These reference states communicate the governing boundary before any consequential control is presented.

ObserveRead-only evidence collection

PrepareDraft without external effect

ForbiddenCannot be self-granted

Authorization path

A confident model response cannot skip any of these controls.

Identity and capability
The subject holds a purpose-, scope- and environment-bound grant.
passed
Risk classification
The requested action fits the grant risk ceiling.
passed
Budget and policy
Spend and constitutional policy both permit the action.
active
Independent approval
Consequential work waits for the required owner or approver evidence.
pending
Outcome verification
Execution is not complete until evidence satisfies the success criterion.
pending

Root control

Ownership, root credentials, protected constraints and privileged production authority remain non-delegable.

Separation of duties

Higher-risk actions require independent approval. An agent cannot request, approve and verify its own consequential action as one convenient bundle.

Fail closed

Authorization is deterministic and deny-by-default across capability, risk, budget and policy checks.