Before your AI agent acts, one API call proves it was allowed.

One durable URN names every actor — human, business, service, AI agent, model, tool, workflow — and binds it to a public key. Identifiers persist across rebuilds, redeployments and tool invocations, so “which AI did this?” always has one answer.

kye:agent:acme.co:tpp:payments-bot-7

• check_circleResolves subject, actor and principal in every authorize call.
• check_circleKeys rotate; the identity never changes.
• check_circleTombstoned identities stay answerable — history is never orphaned.

A signed delegation chain binds every action back to a human or business who is legally on the hook. Each link carries a scope that must attenuate its parent’s — never exceed it — so “who authorised this?” is answered in seconds, not a Slack thread.

parent_delegation_id: kye:delegation:acme.co:root:2214
scope ⊆ parent.scope   // never exceeds

• check_circleEvery authorize call walks the chain from acting agent to root principal.
• check_circleA break in the chain returns deny: chain_broken — fail closed.
• check_circleThe layer OAuth, OIDC and SPIFFE leave to ad-hoc app code, made explicit.

A grant declares what an actor may do, over what resource, under what conditions, until when — and always traces to a root principal. Revoke a parent and the cascade kills every child grant.

decision: allow_with_constraints | require_approval | deny

Every grant is bounded — amount, corridor, window, resource. An action outside the declared scope never commits, and ceilings deplete as they are consumed, so a hundred small actions can’t add up to one unauthorised exposure.

scope: {
  amount:   { max: 25_000, currency: "GBP" },
  corridor: ["UK", "EU"],
  window:   "business-hours"
}

• check_circleConsequential grants must declare limits and an expiry — unbounded, never-expiring approval rights don’t ship.
• check_circleJurisdiction is fail-closed: no declared jurisdiction, no cross-border action.

Authority is state-aware. Suspended, expired, revoked, superseded — the decision answers to the actor’s state at the moment of the action, not the state when the grant was written.

status: active → suspended → revoked  // terminal, evidence kept

• check_circleA revoked mandate denies instantly — there is no propagation window to exploit.
• check_circleSuperseded records point to their successor; the evidence trail never gaps.

Every decision seals into a hash-chained Evidence Pack™ your auditor can verify offline, from published keys alone — no live service, no trust in our word for it.

event[n].hash = H(event[n-1] ‖ payload)

• check_circleTamper with one event and every later hash breaks — visibly.
• check_circleExam-prep drops from days of reconstruction to one verifiable pack.