Runtime accountability, without replacing IAM.

AI governance is the discipline of bounding what an AI system may do, recording what it did, and proving it stayed inside its bounds when audited.

What is AI governance as a service? KYE Protocol™ delivers AI and agent governance as a service — the authority decision plus Replay-Proof™ evidence over the agents you already run.

Does KYE Protocol™ work offline? Yes — the whole governance lifecycle decides, enforces, seals evidence, reconciles and assures from local state, with no outbound call on the verdict path.

How does Agentic Governance™ relate to AI-governance, model-risk, and prompt firewalls? Those supervise models; Agentic Governance™ resolves the authority behind each agent act.

What does KYE Protocol™ ship? A governance engine for Agentic Governance™ that resolves authority to Authority Finality™ and emits signed Evidence Packs™ replayable from public keys.

Who let the AI agent call an API scope it was never delegated? KYE Protocol™ refuses that call at the boundary and seals a replayable receipt against the agent’s delegated scope.

Apply for a KYE AI Agent Audit Pilot™. Closed-signup; manual qualification within 2 business days. Tier-1 banks, insurers, payments PSPs, healthcare and public-sector buyers only.

What is Approval Briefs? The KYE™ GovernedUI add-on that turns a pending AI-agent action into a one-page brief a human can approve, reject, or escalate — with the decision sealed as evidence.

Can I see the whole KYE Protocol™ architecture at once? Yes — the Architecture Graph maps every engine, agent, rail, schema, gate and chapter as a node and every dependency as a typed edge.

What is Audit Workspace? The KYE™ Delegated Auditability add-on — a read-only surface where an auditor reviews every AI-agent action and verifies each signed Evidence Pack™ from public keys alone.

What is Authority Finality™? KYE Protocol™

Who authorised an autonomous science agent to act? KYE Protocol™ proves the institution legitimately granted the authority for that specific real-world effect — capability alone never does.

The full KYE™ authority lifecycle — ten signed states from entity declaration to Authority Finality™ and a replayable Evidence Pack™. Control planes see step 5; KYE™ owns the whole timeline.

What is the KYE™ Authority Risk Profiler? A read-only, customer-curated profile of your AI-agent estate that maps your clutter, overlaps, concentrations, bottlenecks, and painpoints so you can decide.

What is Authority Sourcing™? Event sourcing for authority: an entity

Who let the AI SOC agent disable a privileged account outside its runbook? KYE Protocol™ refuses that action at the boundary and seals a replayable receipt against the agent’s authorised runbook.

How do I see KYE Protocol™ govern a real agent action? Book a 30-minute demo — bring one action and we walk it through the rail live, refusal to signed evidence.

What is Bring-Your-Own Cross-Map? Paste your vocabulary, glossary or taxonomy — KYE™ maps each term to the framework + taxonomy spine (aligned, divergent, gap or conflict), flagging, never asserting.

How do you embed authority and evidence under your own app? Build on KYE™ puts the KYE Protocol™ engine inside your product — the SDK/API rides the rails as-is, no governance plumbing to build.

What is the Chain of Authority Global View? A living globe rendering principals, delegations, agents, capabilities and grants as arcs across jurisdictions — every hop checked and evidenced.

When your customer-service chatbot says it is an AI, issues a refund, or escalates, KYE™ proves the disclosure happened and the chatbot action was authorised, evidenced, and final.

What is Compliance Evidence Export? The KYE™ add-on that exports your signed evidence packs as a scoped, portable, replay-verifiable file a regulator or auditor inspects without access to your systems.

Who let the AI agent post a ledger entry against an expired mandate? KYE Protocol™ refuses that posting at the boundary and seals a replayable receipt against the mandate’s validity.

Where does KYE Protocol™ cover? The Coverage Atlas rotating globe lights up 32 active jurisdictions and shows 3 dark, requestable ones — brightness is coverage depth, darkness is a gap.

Do I have to migrate to adopt KYE Protocol™? No — KYE™ is additive: you keep your systems, control what you share, and it composes with your stack rather than replacing it. Read-only by default.

How do you deploy a governed agent on your own infrastructure? Run real agent code your side; KYE Protocol™ governs the action boundary, proving authority per action — SaaS, in-region or self-hosted.

Who governs a durable agent

How does KYE Protocol™ relate to EC-Council ADG? ADG defines what controls organisations should operate. KYE™ proves a specific action met them at runtime. Complementary.

Procurement: what enterprise AI governance requires for tier-1 banks — per-action authority binding, Replay-Proof™ evidence, open conformance standard (SCCT L3), regulator-grade audit chains.

after the Digital Omnibus, which EU AI Act obligations apply when — and what should already be running at the action boundary before each date arrives?

A live, signed Evidence Pack™: supplier_payment_agent prepares a £950 payment. Observed Action → Shadow Evaluation → Authority Gap → Guard Recommendation. Replayable offline.

What does KYE Protocol™ do in the AI execution stack? It OWNS Authority Resolution™ and Evidence Finality™ across a 10-layer architecture and INTEGRATES with 8 adjacent layers.

How does KYE™ help with Failure to Prevent Fraud? It proves the consequential action was authorised, scoped and final — the reasonable-procedures evidence ECCTA asks for, replayable from public keys.

Which free tools can I use right now? The sandbox, the Authority Finality™ diagnostic, the Risk Profiler, the Evidence Pack™ demo, demos, the Cross-Map and KYE Lens™. No install, no signup.

Where is KYE Protocol™ strong, and where is it a gap? The Gap Finder shows 32 covered jurisdictions, 3 dark requestable ones, plus the frameworks out of scope — each gap has a request button.

How do I see what KYE Protocol™ looks like on my own stack? Send your website and email — you receive a tailored authority diagram of your systems, agents and evidence chain, prepared by a person.

What is governance by design for AI projects? KYE Protocol™ turns your project scope into a Governance Design Brief™ — controls, evidence and frameworks — before you build, crediting into a pilot.

Does KYE™ run agents? No — but KYE Protocol™ operates a bounded few as products, each a first-class principal with authority, evidence, metering and a kill-switch, governed to the same standard.

How is a doc-QA / RAG knowledge assistant governed? KYE Protocol™ admits, decides, pins each retrieval, packs cited sources as evidence, and seals a replay-proof — provable from public keys.

What does the Account-Opening CDD Authority Agent™ do? It governs governed open/decline/refer-EDD/conditionally-open at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How is AI governed when it generates a financial entry or Companies House filing? KYE Accounting Governance Pack™ makes a posting or filing authority-bound and replay-provable at the action boundary.

What is the KYE™ Advanced Assurance Bundle? One annual-price package of the four advanced assurance add-ons — Scenario Testing, Approval Briefs, Reality Coupling, and Stable Drift Detection.

What is the Agentic Authority Index™? KYE Protocol™

What is the agentic governance lifecycle? Ten governed stages an act traverses, from Intent to Revocation, each bound to its canonical surface, schema and engine — KYE™ spans the whole spine.

Lending with AI: how do you let agents underwrite, price, and decline credit while every decision stays authorised, model-in-scope, explainable via a Decision Map™, contestable, and replay-provable?

What is the KYE AI Adoption Navigator™? A free pre-adoption self-assessment that finds where AI delivers most value at least unmanaged risk, plus your first governed pilot and the controls you need.

How is AI governed when it designs a sequence or molecule? KYE AI Bio-Chem Governance Pack™ makes synthesis dual-use-screened, oversight-gated and replay-provable at the action boundary.

How is the AI Solutions Framework enforced at runtime? The KYE AI Solutions Framework Authority Pack™ resolves who may take each AI action, under what authority, and proves it later.

How is AI Financial-Crimes Governance applied when an agent disposes an AML alert or drafts a SAR/STR? The AML action is made authority-bound and replay-provable at the action boundary.

What is the KYE Assurance™ Bundle? One annual-price package of the core assurance add-ons — Audit Workspace, control mapping, an authority risk register, Evidence Pack™ Pro, and Replay Pro.

Who and what can take consequential actions across your organisation — and where is that authority sprawling? KYE Authority Discovery™ is the free assessment that scores the sprawl.

What is KYE Authority Drift Budget™? The add-on that lets you set how far deployed AI-agent authority may drift from declared before it alerts or blocks — drift as a managed budget, not a binary flag.

What

What is the KYE Authority Risk Signal™? A signed feed of seven authority-failure event counts that boards, insurers, and risk platforms price exposure from. KYE™ proves the events, not the risk.

How do you give an agent authority you can prove? KYE Authority Studio™ registers your existing agent, binds its authority, sets an approval policy, and returns a replayable receipt for every action.

What autonomy levels does KYE Protocol™ recognise? Four KYE Autonomy Tiers™ — A0 Human-only, A1 Assist, A2 Scoped delegation, A3 Autonomous with Authority Finality™.

Who proves an AI banking agent had authority to act? KYE Protocol™ proves each banking action — credit, payment, refund or approval — was authorised, evidenced, replayable and final.

What does the Billing & Dunning Authority Agent™ do? It governs governed fee/late-fee/dunning/suspend/collections/write-off at the action boundary and seals a replay-provable Evidence Pack™ —…

How do biopharma teams evidence EMA GVP and FDA Part 11 for AI-assisted safety decisions? The Biopharma Pharmacovigilance Authority Pack™ binds each to a control owner and a signed Evidence Pack™.

Canadian health custodian: how do you let AI act on personal health information while every action stays lawful under PHIPA, inside the circle of care, with a signed replayable access record?

How is AI governed when it acts on a record in Iron Mountain InSight DXP? KYE Chain of Authority™ binds the action to a named authority — InSight proves custody, KYE™ proves who may act.

How does a merchant prove its representment evidence? KYE Chargeback Evidence™ seals the Visa CE3.0 evidence set as a signed, WORM, replay-verifiable Evidence Pack™ with refund authority recorded.

What does the Chargeback Evidence Agent™ do? It governs governed card-dispute evidence at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How is a consumer chatbot governed under the US state AI-chatbot laws? KYE Chatbot Authority Pack™ proves the safeguards applied to the right person in the right jurisdiction, provable when sued.

How do insurers evidence FCA Consumer Duty and the EU AI Act for AI claims decisions? The Claims Authority Pack™ binds each to a named handler and a signed Evidence Pack™.

What does the Claims Decision Authority Agent™ do? It governs govern triage, reserves, settle/deny, payment release, referrals at the action boundary and seals a replay-provable Evidence Pack™ —…

What does the Clinical Action Authority Agent™ do? It governs governed release/flag-triage/recommend/escalate/share at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How does a clinical AI enter the EU/UK market? The Clinical AI Governance Pack™ binds each AI answer to an authority-to-inform, a GDPR Art. 9 basis, EU AI Act/MDR/MHRA conformity and clinician review.

What does the Clinical Trial Conduct Authority Agent™ do? It governs governed enroll/randomize/unblind/deviation/data-lock/IRB-submission at the action boundary and seals a replay-provable Evidence…

How does KYE™ govern an AI agent that takes a payment? Every payment, refund, chargeback or cross-border remittance an agent makes is authority-bound and replay-provable before it commits.

What does the Companies House Lookup Agent™ do? It governs governed UK company verification at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the…

What is the KYE Compliance Observability Adapter™? It pulls GRC, observability, and eval telemetry into KYE™ as admissibility inputs, turning sensed signals into authority decisions.

The public directory of KYE™-certified consultants. AI-governance, data-privacy, and CISO advisors who deliver KYE Protocol™ to their clients. Signal-ranked, signed, pay-to-rank forbidden.

Screening with AI: how do you let agents pull and act on consumer reports for hiring or tenancy while every use is purpose-permitted, consent-gated, explainable, and contestable?

How do UK law firms govern AI-assisted contract drafting? Contract Workflow Authority Pack™ binds each action to a matter + lawyer review + signed Evidence Pack™.

KYE Counterparty Governance Rail™ — one registry, one authority kernel, one evidence envelope for every external party acting on your behalf: partners, suppliers, 3rd-party AI agents.

What does the Credit Card Action Authority Agent™ do? It governs govern limit/APR/issuance at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How does a regulatory act in one jurisdiction get recognised in another? The Cross-Jurisdiction Handoff Rail™ binds each handoff to a signed framework-recognition pair, fail-closed.

How is an AI-assisted containment action or breach-disclosure decision made defensible to a regulator? KYE™ proves the authority and evidence: named-authority, chain-of-custody, source-pinned triage.

Agentic payments, procurement agents, open finance, risk/compliance copilots — KYE Delegated Auditability™ for financial services. Shadow-mode observation, Authority Gap analysis

How do pathology labs evidence MHRA SaMD and the EU AI Act for AI diagnoses? The Digital Pathology Authority Pack™ binds each to a named pathologist and a signed Evidence Pack™.

What does the Drug Discovery Research Authority Agent™ do? It governs governed advance/release-claim/use-dataset/register-finding at the action boundary and seals a replay-provable Evidence Pack™ —…

KYE™ Federated Directory Query is the fan-out query that hits all eleven Directory indices in one round-trip and merges results under a deterministic ranking rule with per-tenant masking.

asset manager: how do you let AI recommend, rebalance and execute while every action stays inside its mandate, under a live grant from a named principal, replayable at supervisory review?

How does KYE™ turn a regulation into a governance pack without an LLM? The Framework Ingestion Engine™ parses deterministically, maps by versioned rules, and is replay-proof.

What does the Fraud Decision Authority Agent™ do? It governs governed block/hold/release/step-up at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing…

What does the Genetic Sequencing Authority Agent™ do? It governs synthesis-order/screening-disposition/data-release/clinical-result at the action boundary and seals a replay-provable Evidence Pack™…

How does an AI-generated genomic sequence reach synthesis or clinical use safely? The Genomics-Biosecurity Authority Pack™ binds it to admissibility, a sequence-of-concern screen, and oversight.

What is the KYE GitHub App™? An installable check that, on a pull request touching a privileged change, asks KYE™ whether it carries the required authority and posts a governed verdict.

What does the Governed Control & Policy Authority Agent™ do? It governs governed recommend-controls / draft-policy at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Governed Grants Agent™ do? It governs governed award and disbursement decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the…

How do you govern an AI prompt that drives an agent action? KYE Governed Prompts™ treat the prompt as an authority act — bound to purpose, scope, and a signed evidence chain.

Buyers — what is KYE GovernedUI™ pricing? Five SKU tiers (Pilot → National). Bespoke scoped pricing — submit an access request via the form; admin returns a tailored quote.

Does KYE™ replace my GRC tool? No. KYE™ plugs into Drata, Vanta, or ServiceNow GRC, imports your existing controls, and exports a replay-provable Evidence Pack™ into them. Your GRC stays the record.

hardware team: how do you let AI help across the lifecycle while every action — release to fab, tapeout, firmware OTA, BOM change — stays admitted under a named engineer, replayable in a recall?

Hiring with AI: how do you let agents screen, rank, and reject candidates while every decision stays lawful, bias-audited, contestable, and replay-provable?

How do System Integrators ship KYE™ governance? The Authority Adapter Pack™ routes a host platform

How is AI governed when it writes permits-to-work, risk assessments or RIDDOR reports? KYE HSE Authority Pack™ makes every safety-critical AI instruction sign-off-gated and replay-provable.

How is AI governed when it generates ICH Q-series submission evidence? KYE ICH Authority Pack™ proves how that evidence came to exist — authority-bound and replay-provable at the action boundary.

What does the Insurance Action Authority Agent™ do? It governs govern accept/decline/pay at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How are AI underwriting and claims decisions made fair and defensible? KYE™ proves the authority and evidence: named-authority, adverse-action reason-code, fairness-evidence, and an appeal route.

How is AI governed when it drives an investment decision or committee approval? The KYE Investment Decision Authority Pack™ makes the action authority-bound and replay-provable at the action boundary.

What does the Islamic Embedded Finance Authority Agent™ do? It governs govern releasing or holding a Shariah-compliant embedded-finance offer at the action boundary and seals a replay-provable…

What does the Islamic Microfinance Authority Agent™ do? It governs govern a qard hasan or micro-murabaha disbursement and its late-payment treatment at the action boundary and seals a…

What does the Islamic Mortgage Authority Agent™ do? It governs govern home-finance acts under diminishing-musharaka or ijarah muntahia bittamleek at the action boundary and seals a replay-provable…

What does the Islamic Trade Finance Authority Agent™ do? It governs govern the Shariah-governed trade-finance acts at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Istisna Authority Agent™ do? It governs govern the istisna

What does the KYC-Refresh Agent™ do? It governs governed KYC refresh at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How is AI governed when it supports a laboratory result? The Pack makes result release ALCOA+ data-integrity-checked, named-reviewer-gated and replay-provable at the result-admissibility boundary.

What does the Legal Action Authority Agent™ do? It governs govern execute/sign/release decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing…

What is KYE Lens™? A free, privacy-by-design browser extension that overlays a site

How is AI-assisted privilege review and document production made defensible in court? KYE™ proves the authority and evidence: named-authority, chain-of-custody, no-hallucinated-citation, replay-proof.

What is KYE Managed Authority Operations™? KYE™ operates your governance, authority and evidence plane and staffs an oversight desk for you. KYE™ runs the plane, not your agents.

How do MAS-licensed digital-asset treasuries evidence PS-N02/PS-N04 and AML/CFT for AI-assisted decisions? The MAS Digital-Asset Treasury Authority Pack™ signs each into an Evidence Pack™.

MAS MindForge: how do you make the AI Risk Management Operationalisation Handbook enforceable at runtime, so every consequential AI action is oversight-mode-bound and replay-provable for MAS?

How do medical-device makers evidence MHRA SaMD and the EU AI Act for AI SaMD decisions? The Medical Device SaMD Authority Pack™ binds each to a named clinician and a signed Evidence Pack™.

How do radiology teams evidence MHRA SaMD and the EU AI Act for AI imaging decisions? The Medical Imaging Authority Pack™ binds each to a named clinician and a signed Evidence Pack™.

What is the KYE Memory Authority Rail™? Agent memory is governed as authority-bearing state — each use of a memory for an action is decided at the moment of use, with replay-verifiable evidence.

How do EU crypto custodians evidence MiCA Art 70-77 segregation for AI-assisted decisions? The MiCA Custody Authority Pack™ binds each to a control owner and a signed Evidence Pack™.

What does KYE Protocol™ materially enforce at runtime? Twelve KAC™ controls — KAC™-1..KAC™-12 — each bound to a canonical schema, runtime engine, and constitution reference.

How is a model-driven decision made provable to a supervisor? KYE™ proves which model version produced the number, who validated and approved it, and the risk-report

What does the Mortgage Lending Action Authority Agent™ do? It governs govern approve/decline/terms at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Murabaha Authority Agent™ do? It governs govern each step of the murabaha sequence in order at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Muzaraa Authority Agent™ do? It governs govern the muzara

OCC AI supervision: how do you make the OCC

Who authorised an exploit, credential test, or AI pentest action? The offensive-security action is made authority-bound and replay-provable at the action boundary — capability is not authority.

May an agent access, rely upon, invoke, cite, or transact with a resource — under its rights and jurisdiction? KYE Open Access Authority™ decides at the action boundary and evidences every decision.

What is human-over-the-loop oversight? A human sets an authority envelope — scope, limits, drift thresholds — once, then monitors for breach instead of approving each action.

What does the Payment Authorization Authority Agent™ do? It governs governed authorize/hold/step-up/decline at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Pension Liquidity Authority Agent™ do? It governs governed LDI collateral call / forced sale / redemption gate / buy-in-out trigger at the action boundary and seals a replay-provable…

Who proves a pharma AI action had authority? KYE Protocol™ proves each pharma AI action was authorised, evidenced, replayable and final — a validated model is not an authorised action.

What does the Pharmacovigilance Action Authority Agent™ do? It governs governed ICSR filing, signal disposition, PSUR release, recall notification at the action boundary and seals a replay-provable…

What does the PII Action Authority Agent™ do? It governs governed use/disclose/transfer/retain/profile/delete at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis,…

What does the Policy Lifecycle Authority Agent™ do? It governs govern issue/endorse/renew/cancel/non-renew/reinstate at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How is an AI SRE agent governed when it proposes a production rollback or hotfix? KYE Production Action Authority™ Pack™ makes the action authority-bound and replay-provable at the action boundary.

conveyancing firm: how do you let AI help on a property matter while every step stays admitted under a named conveyancer, with source-of-funds evidence you can replay?

How do you refuse out-of-scope AI-agent action while it is forming, not reconstruct it after? KYE™ enforces authority at the moment of the action; refusals are signed, replayable.

Buyer — what is a KYE Protocol™ PoC? Paid, fixed-scope engagement (XS £15k / S £35k / M £75k) with signed Evidence Pack™ deliverable and 100% conversion credit toward next-tier within 60 days.

18 regulated sectors with their KYE™ profile bundles and framework alignment — banking, payments, healthcare, capital markets, custody, insurance, AI labs, public sector, defence, energy

KYE Protocol™ compliance, conformance, certification overview. EU AI Act profile (10 controls); 289 control mappings across 13 horizontal frameworks plus sector overlays

Three pathways — KYE Protocol™ engagement model — how prospective adopters engage as enterprise Customers, ecosystem partners, or sector working-group participants. Engagement shape

how do you sign off on AI agents that act on your behalf, with evidence a regulator or court can replay?

See yourself in KYE™ — Interactive demos for KYE Protocol™: decision flow, cascade visualizer, URN parser, trust graph, dashboard counters, and vocabulary browser.

KYE Sovereign AI Profile™ — the runtime authority, delegation, state, audit, Decision Map™, signed-signal and evidence-pack layer for national AI ecosystems. Sovereign compute is not enough

KYE Protocol™ for open banking and delegated payment initiation: account holder → TPP → AI finance agent → ASPSP, every link signed, every scope attenuated, cascade revoke in <1s

In 4–10 weeks a KYE™ pilot delivers a signed Evidence Pack™, regulator-mapped control crosswalk, and replay-proof bundle per privileged AI action — handable to auditor or regulator.

KYE Protocol™ pricing is value-based, not transactional — ten fee components split into 5 platform fees (ratable ARR) and 5 professional fees (milestone-billed), plus 2 lifecycle artefacts.

Buyer — what is the KYE Protocol™ quiz? A 60-second interactive scorecard rotating across Authority Risk Index™, AI Governance Knowledge, and Regulator Readiness. Shareable result with social card.

A 12-question interactive self-assessment that scores your AI-agent stack 0–100 on KYE Protocol™ readiness — entity registry, delegation chain, capability scoping, signed audit, recovery posture

Sovereign AI: KYE Protocol™ ships per-region pages (UK · EU · Gulf · Public sector) mapping runtime authority and signed evidence to the regulators each jurisdiction reads first.

The KYE Protocol™ platform in 8 modules: Entity Registry, Authority Gateway, Purpose & Scope, Decision Maps, Evidence Packs, Replay Proofs, Data Purpose Binding, Edge Governance.

Nine flows, one six-step trace — Nine real-world KYE Protocol™ use cases — high-value payments, custody break-glass, EU AI Act docs, HIPAA chart review, NIS2 incident response, FedRAMP RAG, claims tri

who benefits when AI agents come under one open authority and evidence standard, and what does that look like for each role in society?

what is the full normative specification of KYE Protocol™ — kernel chain, rails, schemas, engines, governance — in one canonical document?

Why KYE™: per-feature table contrasting the without-KYE™ gap with the with-KYE™ outcome and the framework requirement satisfied (EU AI Act, DORA, SEC 17a-4, HAARF, etc.).

The KYE Protocol™ sales deck has moved to sales.kyeprotocol.com.

KYE Protocol™ vs Microsoft’s Agent Governance™ Toolkit: KYE™ is the vendor-neutral authority layer that proves who was allowed to act, Replay-Proof™ from public keys alone, across any agent stack.

How is AI governed when it generates a public-sector decision or a FedRAMP authorising-official assertion? The KYE Public Sector Governance Pack™ makes the action authority-bound and replay-provable.

How does a publisher operate the MOW Search Only Terms Contract? The KYE Publisher Access Ledger™ classifies each automated access, seals it as evidence, and derives the unlicensed-access schedule.

What does the Quote & Bind Authority Agent™ do? It governs govern overrides, discounts, and the bind finality gate at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the RAG Output Authority Agent™ do? It governs governed release/act-on/feed of a RAG answer at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

The Rights, Disputes & Disclosure Rail unifies DSAR rights requests, decision contestation, investigation, and disclosure into one rail. KYE™ produces replay-derivable evidence; it does not adjudicate.

Where do you SEE KYE™

What is the KYE Runtime Proxy Adapter™? It turns your runtime proxy or LLM gateway into a Policy Enforcement Point that calls the KYE™ decision inline and enforces the authority verdict at the wire.

What does the Salam Authority Agent™ do? It governs govern the salam acts at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

What does the Sanctions & AML Authority Agent™ do? It governs governed block/release/escalate/file-SAR at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

How do UK Senior Managers evidence reasonable steps for AI-assisted decisions? Senior Manager Authority Pack™ maps each to SMF + SoR + signed Evidence Pack™.

What does the Settlement Finality Authority Agent™ do? It governs governed, final settlement decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Shariah Operations Authority Agent™ do? It governs govern recording and escalating a Shariah non-compliance (SNC) event at the action boundary and seals a replay-provable Evidence…

What does the Shariah Screening Authority Agent™ do? It governs govern a screening verdict on an instrument, counterparty, or portfolio line at the action boundary and seals a replay-provable…

What does the Shariah Structuring Authority Agent™ do? It governs govern a product structure into the Shariah Supervisory Board approval queue at the action boundary and seals a replay-provable…

What is KYE Site Authority™? A free, non-fakeable scan scoring how a site discloses its authority and evidence to AI agents across six dimensions, with a public registry and a badge. Not a truth score.

Which turn-key KYE™ bundle fits my sector, role, jurisdiction? KYE Starter Packs™ — 10 canonical packs pre-binding the right rule packs, sector packs, dictionaries, comms, widgets, purposes.

What does the Sukuk Authority Agent™ do? It governs govern the sukuk lifecycle acts (issuance, servicing, redemption) at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Takaful Authority Agent™ do? It governs govern operator-side acts on a takaful risk fund at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

How is AI governed when it generates a tax position or filing? KYE Tax Governance Pack™ makes a filing, advice, or booking authority-bound, due-diligenced and replay-provable at the action boundary.

procurement team: how do you let AI help run a tender while every action — score, shortlist, award, dispute — stays admitted under a named officer, with evidence you can replay in a challenge?

What does the Threat Response Authority Agent™ do? It governs governed block/revoke/isolate/disable/escalate/notify at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How does KYE™ enforce ADG MC-7? Through the KYE Tool & MCP Authority Register™ — a tenant-scoped signed register the KYE Tool Authority Engine™ checks before every agent tool invocation.

How do banks evidence SR 11-7 / PRA SS1/23 model risk for AI trading bots? The Trading-Bot Model-Risk Authority Pack™ binds each decision to a model owner and a signed Evidence Pack™.

How do VASPs evidence FATF Recommendation 16 Travel Rule data transmission for AI-assisted transfer decisions? The Travel Rule Authority Pack™ signs each into an Evidence Pack™.

What does the Treasury Authority Agent™ do? It governs governed corporate-treasury decisions within mandate/limit at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How is an AI-taken UK employment action made defensible at tribunal? KYE™ maps who authorised it and builds the ACAS/tribunal evidence bundle from the existing Evidence Pack™ and Replay Proof.

What does the Underwriting & Risk-Acceptance Authority Agent™ do? It governs govern accept/decline/refer within delegated limits at the action boundary and seals a replay-provable Evidence…

What does the Wakala Authority Agent™ do? It governs govern an act under a wakala mandate only within its recorded scope at the action boundary and seals a replay-provable Evidence Pack™ — proving…

How is AI-assisted whistleblower intake and case-handling made defensible? KYE™ proves the authority and evidence: need-to-know access, confidentiality evidence, retaliation-risk records.

KYE Protocol™ is the identity, delegation, policy and evidence layer for AI-assisted clinical decisions — proving the authority chain from a record created before litigation was contemplated.

Do open skill libraries give a science agent authority? No — they give capability. KYE Protocol™ binds each consequential scientific action to authority, evidence and finality at the action boundary.

Which KYE™ Authority Pack governs my sector? Browse every KYE™ sector pack by finance, health, public-sector, legal or industrial — each governs an AI action vertical, evidenced and final.

What is the KYE™-Powered Directory™? The public registry of organisations that adopt KYE Protocol™ and Agentic Governance™ — listed only after explicit public consent.

Click any sector — banking, payments, healthcare, pharma, maritime, energy, defense, RegTech

Open or proprietary AI governance? Proprietary asks you to trust a closed scoring box; KYE Protocol™ is verifiable — open schemas, Apache-2.0, every decision Replay-Proof™ from a public key.

Who let the AI agent pay a payee the account holder never consented to? KYE Protocol™ refuses that payment at the boundary and seals a replayable receipt against the consent scope.

Who authorised the benefits decision that hit this family? KYE Protocol™ binds every benefits action to layered rights-bounded authority, pauses enforcement while citizens challenge, and proves it.

What is Reality Coupling? The KYE™ add-on that keeps declared AI-agent authority bound to deployed reality — so the map matches the territory, never a stale document.

What is Scenario Testing? The KYE™ add-on on the Resilience Loop that replays your AI-agent authority against what-if scenarios before they happen, so you know how a decision resolves before the event.

What is selective AI sovereignty? Strategic control over AI dependencies across data, models and infrastructure in proportion to risk. KYE™ proves those controls actually hold when AI acts.

How does KYE Protocol™ govern self-improving AI? Not by solving recursive self-improvement, but by revalidating an agent

Can my AI agent send email itself? A mailbox is capability only — KYE Protocol™ decides at send time whether a message may go, holds external, bulk and legal sends for a human, and seals the proof.

AI agent skills are a new attack surface — 969 malicious ones in a year. A scanner says a skill is clean; KYE™ proves the clean skill stayed in its authority — evidenced and final.

Where do I start with KYE Protocol™? Pick the outcome you need — agent auditability, runtime approval, or evidence replay — and each solution routes you to the right authority capability.

What is Sovereign Execution™? Data sovereignty answers where AI runs; Sovereign Execution™ governs who is allowed to act on that decision — proven from public keys, above confidential compute.

What is Stable Drift Detection? The KYE™ add-on on the Reconciliation Engine that continuously checks every deployed AI-agent authority still matches what you declared, and alerts when they diverge.

Where do I start with KYE Protocol™? Start here: pick your role — buyer, developer, auditor, or regulator — and follow the one next step that fits you. First Evidence Pack™ in a 4–8 week pilot.

What is the KYE™ Tech & AI Due-Diligence Profiler? It turns a tech-stack and AI inventory into a deterministic, cited gap report against the framework registry — every gap traced, never guessed.

Who let the AI agent move a customer onto a worse tariff without consent? KYE Protocol™ refuses that change at the boundary and seals a replayable receipt against the customer’s consent.

Where does KYE™ sit in the agent-protocol stack? Above the protocols — MCP and A2A carry the calls; KYE Protocol™ decides whether each call is admissible and proves it. It does not replace them.

Where do you place KYE™ in the AI value chain? It is the authority-finality layer between intent and consequential execution: models create capability, agents create action, KYE™ resolves authority.

What is the Authority Simulator™? Set a scenario and watch KYE Protocol™ admit or refuse an AI action at the moment — the action climbs the chain, Purpose to Finality, or stops at a refusal.

What is the business case for Authority Finality™? Approvals and policies don

What is the handoff problem? The gap between a safety-case claim and whether the runtime can enforce it. KYE™ binds each control to an enforced, replay-provable runtime check at the action boundary.

What is the KYE™ Agent Authority Stack? The authority + evidence + finality layer above any agent runtime — purpose-bound, replay-verifiable, suspendable — so every agent action is regulator-provable.

What is the KYE Policy Resolver™? The adapter that delegates raw allow/deny to any policy engine while KYE™ keeps purpose-bound authority, evidence and finality above it — provable from public keys.

Who owns the authority-to-finality centre of the AI stack? KYE Protocol™ owns, defines and leads it as Authority Finality™. Every other layer — observability, identity, evidence — is an input.

What free tools does KYE Protocol™ offer? A self-serve toolbox — Authority Risk Profiler, Authority Diagram, readiness test, sandbox, and KYE Lens™ — showing KYE™ working in minutes, no sign-up.

Where do I see what

Can I see KYE Protocol™ actually running? This video library holds recorded runs of a governed agent deployed, refused out of scope, and its Evidence Pack™ trail opened and verified.

What does KYE Protocol™ offer, free vs paid? This catalogue lists every offering — tiers, products, add-ons, developer, programs, services and connectors — each marked free, paid or contact.

What does KYE™ do for Kaggle datasets and models? It binds the artifact to its AI Bill of Materials and the obligations its use carries, so you can prove it is governed for regulated deployment.

What does KYE™ do for Hugging Face models? It binds a model to its AI Bill of Materials and the obligations its use carries, so you can prove the model is governed for regulated deployment.

A 28-day, shadow-mode-only KYE Audit Pilot™ from kickoff to signed pilot report. Concrete steps, named artefacts, regulatory-citation table, owner column, exit criteria.

Honest status spec, implementation, and the service that doesn t exist — Operational targets KYE Protocol™ services run under. SLA tiers (99.9% / 99.95% / 99.99%), RTO/RPO per component, incident seve

Three buyer-facing run-throughs for KYE Protocol™: how a buyer runs the 28-day Audit Pilot, how a vendor self-attests conformance, and how a regulator verifies a KYE™-anchored decision

A flag, not new code — KYE Shadow Mode™ — the runtime flag that suppresses side effects at the Commit Boundary while still running every Authority, Purpose and Decision Engine check

Where are the per-stakeholder sample reports? On the Example reports shelf — one signed report envelope per persona (auditor, board, CISO, DPO, regulator and more), each verifiable offline.

Runtime accountability for AI agents without replacing IAM — KYE™ adds a delegated-authority and evidence layer on top of your existing IAM, OAuth, API gateway, workflow, SIEM, GRC and AI-agent stack.

The nutrition label for AI systems — The KYE Protocol™ AI System Compliance Card is a public-key-verifiable, machine-readable, human-readable summary of an AI system

KYE Assurance™ Card™ Profile™ — turn KYE™ runtime evidence into a living lifecycle assurance record per delegated entity. Owner, intended use, authority model, human involvement, provenance

Coverage heatmap — every registered regulatory framework × control families, green/amber/red by coverage %%. Machine-readable: regenerated from coverage-registry.json on every push to main.

Signed JSON artefacts proving the KYE Reference Gateway™ governs and audits itself with its own primitives. Anyone can fetch + verify with the JWKS at /trust/self-audit-jwks.json

Developer Quickstart: send one authority-decision request, read the verdict and its Evidence Pack™ reference, then verify it offline against the JWKS — your first governed decision in under 10 minutes.

What is KYE GovernedUI™? The human-facing visible control surface for AI-agent authority. Approve, reject, edit, escalate, evidence, audit before an AI agent commits a consequential action.

KYE Reference Gateway™ — the enforcement point that intercepts a candidate action, asks the policy engine for a verdict, and only lets the action commit when the signed Decision Map™ allows

Every delegated AI action passes through the Rules Gateway™™. The gateway loads the applicable rule packs + dictionaries + manifests for the tenant

How does KYE™ work with Weights & Biases? Connect your W&B registry; when an agent

How does KYE™ govern AI at the inference boundary? A KYE™ PEP an OpenAI-compatible inference gateway (NVIDIA NIM, Triton, vLLM) consults before running the model — admit, block, escalate or quarantine.

A runtime permit checks the action; it never checks whether the principal held authority to take it. Authority is decided at the boundary — that is Authority Finality™.

What is Agentic Governance™? The category KYE Protocol™ defines — governance FOR agentic systems (humans, AI agents, hybrid authority) resolved to Authority Finality™.

Why must governance become executable as AI moves exponentially? Policy cycles take years; capability compounds in months — the execution boundary is the only layer fast enough.

Twelve do

An API key grants reach to an endpoint; it never grants a per-action verdict on whether the actor was authorised. Authority is decided at the boundary — that is Authority Finality™.

What is in the KYE Protocol™ analyst briefing? An Agentic Governance™ category definition, a company fact sheet, and a competitive-landscape map versus adjacent vendors.

How is the Agentic Governance™ category defined for analysts? Governance FOR agentic systems on five primitives — act, authority, purpose, scope, evidence — resolved to finality.

In the Authority Court, the defendant is the agent

What is Authority Governance™? The category KYE Protocol™ defines: governing who is allowed to let an AI take a consequential action — the authority layer above describe-and-monitor AI governance.

Decision provenance shows how an AI outcome was produced; authority provenance proves the actor was institutionally entitled to cause the effect — settled at the boundary as Authority Finality™.

How does KYE Protocol™ work? It resolves authority before an action, then seals replayable evidence — eight steps: actor, authority, scope, policy, decision, evidence, replay, revocation.

Agent identity proves who is acting; it does not decide what they may do. Authority is decided at the boundary from the principal

What is ISO/IEC 42001 and how do you certify — clauses 4-10 explained, Annex A

Not all agents are equal. The KYE Consequential Actor™ Framework™ grades AI agents across five levels — L0 Informational to L4 Systemic — by how much governance each requires.

KYE Learn™ — the canonical education centre for AI governance, agentic AI risk, model risk frameworks, and players landscape.

Frequently asked questions about KYE Protocol™ — Authority Finality™, conformance, deployment, integration, regulation, governance, profiles, roadmap.

Observability watches what an AI agent does; it never decides whether the agent was authorised to act. Authority is settled at the boundary — that is Authority Finality™.

Where can I read KYE Protocol™

Inference-time reasoning control shapes a model

Financial institutions are deploying AI into decisions that regulators already supervise — creditworthiness, fraud, market and model risk — faster than their governance programmes can keep up.

The industry now agrees on how to secure an enterprise AI agent — and that agreement stops one layer short of authority.

How does SR 11-7 model risk guidance apply to AI agents — the four classic categories extended to action risk, the three-line model, documentation expectations, KYE Protocol™ mapping.

What is the KYE™ 26-Hour Governed Run? A fully autonomous agent working 26 continuous hours with no human in the loop, every action governed and replay-verifiable under KYE Protocol™, streamed live.

A successful AI-agent action is not a legitimate one. The Authority Court puts the action on trial and asks whether it was authorised, in scope, at t=0 — and the verdict is Authority Finality™.

What does the EU AI Act actually demand of AI agents — risk tiers, prohibited practices, high-risk obligations, GPAI rules, the four obligations that bite hardest, timeline 2025-2027.

The KYE Protocol™ Blog argues doctrine: the layers mistaken for authority — observability, traces, permits, identity, keys — and the boundary that separates each from Authority Finality™.

What is the Map of KYE™? The protocol drawn as a cypress — its canopy is the chain of legitimacy (Purpose to Finality), and selecting a stage lights that foliage.

What is the trust layer for consequential action? The layer that decides whether an action may proceed, records why, and makes that authority final and provable — KYE Protocol™.

The headline insider threat of 2026 is not a disgruntled employee — it is an AI agent that was manipulated into turning against the organisation that runs it.

Who is accountable for an AI answer? The party that presents it as authoritative — KYE Protocol™ records the authority and cited basis so it is provable. Reporting, not legal advice.

How does a bank prove BCBS 239 lineage and SR 11-7 / SS1/23 model authority? The hub maps every principle to the KYE™ artefact, event family, and gate that binds it — with a live SHA-256 lineage proof.

DORA — Digital Operational Resilience Act: control mappings to KYE Protocol™ canonical artefacts. Financial entities in the EU — credit institutions, payment institutions, e-money institutions, inve…

ISO/IEC 42001:2023 — AI Management Systems: control mappings to KYE Protocol™ canonical artefacts. Any organisation that provides, develops, or uses AI systems — irrespective of sector. The first for…

Authority Finality™ Diagnostic — 24 questions × 6 lenses scoring your agentic AI authority posture. Free score in IDE; signed report envelope (3 / month / email free; unlimited on paid pilot).

KYE Data Governance Pack™ — runtime data governance for delegated AI-agent actions. data_use PDP stage + 7 default-deny rules + 441 dictionaries + signed evidence per access

KYE DSAR Evidence™ Pack™ — signed bundle of every audit-chain entry involving a named data subject. GDPR Art. 15 / UK DPA Pt 3 Ch 3 / CCPA. Offline-verifiable by the requesting subject

Buyers — what are the seven KYE GovernedUI™ modules? Action Approval, Entity Passport, Authority Scope, Critical Point Review, Evidence Timeline, Approval Queue, Authority Drift.

No blind approvals for AI-agent actions — KYE Approval Brief™ assembles actor, principal, authority, scope, state, and risk into a structured, signed brief — so human approvers decide informed

KYE Action Admissibility™ Profile™ — checks whether a proposed action is admissible into the authority pipeline before any authority, formal-rule or commit-boundary check runs. Six decision values

Procurement: when planned KYE™ changes take effect — 90-day breaking-change notice, 30-day sub-processor notice, 7-day maintenance notice. Machine-readable at /change-calendar.json.

Per-framework reference: which KYE Protocol™ controls map to which obligation, with framework scope, official source, and the canonical KYE Compliance Mapping Rail™ binding.

The KYE Continuity Module™ checks whether the authorised meaning of an action survives delegation, interpretation, memory, context, incentives, timing

KYE Continuity Profile™ preserves the chain between intent, interpretation, delegated authority, state, decision, execution and evidence. Detect intent drift, authority drift, scope drift

What is the KYE™ Decision Engine? Step 6 PDP that walks the Authority Graph™, evaluates vocabulary-bound predicates, runs continuity + discoverability checks, and emits a signed Decision Map™.

Buyer — what makes KYE Protocol™ different from Vanta / Drata / AWS Config? Event-driven by constitution, not by cron. 38 event families declared, 16 post-facto-forbidden, CI gate enforces it.

KYE Evidence Pack™ — the signed, replayable bundle of audit-chain entries, Decision Maps™, signatures and public-key set that a regulator or auditor verifies offline

NIST 800-53 Rev 5 is the universal hub KYE Protocol™ uses as the canonical control taxonomy. Every regulatory framework crosswalks INTO this hub. One hop, deterministic, machine-readable.

KYE Operating Model Profile™ — the enterprise adoption layer of KYE™. From use-case intake to readiness, authority records, authority gates, commit boundaries, runtime decisions

KYE Protocol™ is OSCAL-native: every signed evidence pack maps deterministically to NIST OSCAL component-definition, system-security-plan and assessment-results documents. The mapping spec

Regulatory coverage map for 249 frameworks: 450 of 853 requirement groups Enforced at runtime, 250 Designed, 153 Out of scope — all projected from one schema-backed registry.

What can go wrong — The KYE Protocol™ threat model: signing-key compromise, registry availability, false-positive denials, time-skew, replay, supply-chain risk

The KYE Protocol™ governs itself under its own contract. Every privileged action emits the same signed evidence-pack family any customer would. Patent-safe envelopes; public JWKS.

KYE Protocol™ Trust Center — the procurement-grade summary. What is verifiable today (with reproducible commands), what is in progress, what requires external attestation. Hardening register

KYE™ has 10 canonical profiles, locked by constitution. Profiles define the conformance contract an implementation MUST support; behavioural logic lives in rule packs

Rule packs are bundles of rules — condition + effect + reason code — loaded by the Rules Gateway™ at request time. Sector packs, compliance regimes

KYE Protocol™ responsible-disclosure page. How you report a vulnerability, what the response SLA looks like, and which supply-chain controls run against the repository

Australian organisations: runtime authority and signed evidence for AI under APRA CPS 230, the AI Guardrails, the Privacy Act 1988 and the ASD Essential Eight — Australian-sovereign deployable.

Canadian organisations: runtime authority and signed evidence for AI under PIPEDA, PHIPA, Health Canada SaMD, OSFI and FINTRAC — bijection-mapped + Canadian-sovereign deployable.

Japanese organisations: runtime authority and signed evidence for AI under the APPI, the FSA

New Zealand organisations: runtime authority and signed evidence for AI under the Privacy Act 2020, RBNZ BS11 and the Algorithm Charter — bijection-mapped + New-Zealand-sovereign deployable.

Singapore organisations: runtime authority and signed evidence for AI under the MAS TRM Guidelines, IMDA AI Verify and the MAS FEAT principles — bijection-mapped + Singapore-sovereign deployable.

EU organisations: runtime authority and signed evidence for AI under the AI Act, GDPR, DORA, NIS2 and EDPB guidance — bijection-mapped + deployable on EU-sovereign regions.

Gulf organisations: runtime authority and signed evidence for AI under UAE PDPL, Saudi PDPL, Bahrain PDPL, Qatar PDPL, SAMA AI, DIFC and ADGM — sovereign-deployable on the customer

Public-sector AI: runtime authority and signed evidence for citizen-facing AI under ATRS, OECD AI Principles, NIST AI RMF and public-sector AI assurance — sovereign deployment, offline verifier.

UK organisations: runtime authority and signed evidence for AI under FCA, PRA, MHRA, NHS, DSIT and HAARF — bijection-mapped and deployable on UK-sovereign regions.

US organisations: runtime authority and signed evidence for AI under HIPAA, FDA SaMD, OCC, NYDFS Part 500, SEC, FFIEC, NIST AI RMF — bijection-mapped + US-sovereign deployable.

Trust Center: every KYE Protocol™ claim is pointable to a live artefact — signed self-audit receipts, framework coverage attestations, JWKS, and the responsible-disclosure contract.

Authorised — KYE Reality Coupling™ detects stable drift — when a delegated AI action remains locally valid (authority OK, purpose OK, scope OK

KYE Scenario Testing™ runs a proposed agent action through a deterministic stress evaluator before it executes — surfacing risk, recommended controls

PCI DSS v4.0 — Payment Card Industry Data Security Standard: control mappings to KYE Protocol™ canonical artefacts.

SR 11-7 — Model Risk Management: control mappings to KYE Protocol™ canonical artefacts. Banking — model risk management for all regulated banking organisations supervised by the Federal Re…