Defensible decisions, not screenshots.

AI governance is the discipline of bounding what an AI system may do, recording what it did, and proving it stayed inside its bounds when audited.

What is AI governance as a service? KYE Protocol™ delivers AI and agent governance as a service — the authority decision plus Replay-Proof™ evidence over the agents you already run.

How does Agentic Governance™ relate to AI-governance, model-risk, and prompt firewalls? Those supervise models; Agentic Governance™ resolves the authority behind each agent act.

Apply for a KYE AI Agent Audit Pilot™. Closed-signup; manual qualification within 2 business days. Tier-1 banks, insurers, payments PSPs, healthcare and public-sector buyers only.

What is Approval Briefs? The KYE™ GovernedUI add-on that turns a pending AI-agent action into a one-page brief a human can approve, reject, or escalate — with the decision sealed as evidence.

What is Audit Workspace? The KYE™ Delegated Auditability add-on — a read-only surface where an auditor reviews every AI-agent action and verifies each signed Evidence Pack™ from public keys alone.

The full KYE™ authority lifecycle — ten signed states from entity declaration to Authority Finality™ and a replayable Evidence Pack™. Control planes see step 5; KYE™ owns the whole timeline.

How do I see KYE Protocol™ govern a real agent action? Book a 30-minute demo — bring one action and we walk it through the rail live, refusal to signed evidence.

What is Compliance Evidence Export? The KYE™ add-on that exports your signed evidence packs as a scoped, portable, replay-verifiable file a regulator or auditor inspects without access to your systems.

Do I have to migrate to adopt KYE Protocol™? No — KYE™ is additive: you keep your systems, control what you share, and it composes with your stack rather than replacing it. Read-only by default.

Procurement: what enterprise AI governance requires for tier-1 banks — per-action authority binding, Replay-Proof™ evidence, open conformance standard (SCCT L3), regulator-grade audit chains.

after the Digital Omnibus, which EU AI Act obligations apply when — and what should already be running at the action boundary before each date arrives?

A live, signed Evidence Pack™: supplier_payment_agent prepares a £950 payment. Observed Action → Shadow Evaluation → Authority Gap → Guard Recommendation. Replayable offline.

How does KYE™ help with Failure to Prevent Fraud? It proves the consequential action was authorised, scoped and final — the reasonable-procedures evidence ECCTA asks for, replayable from public keys.

Does KYE™ run agents? No — but KYE Protocol™ operates a bounded few as products, each a first-class principal with authority, evidence, metering and a kill-switch, governed to the same standard.

How is a doc-QA / RAG knowledge assistant governed? KYE Protocol™ admits, decides, pins each retrieval, packs cited sources as evidence, and seals a replay-proof — provable from public keys.

What does the Account-Opening CDD Authority Agent™ do? It governs governed open/decline/refer-EDD/conditionally-open at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How is AI governed when it generates a financial entry or Companies House filing? KYE Accounting Governance Pack™ makes a posting or filing authority-bound and replay-provable at the action boundary.

What is the KYE™ Advanced Assurance Bundle? One annual-price package of the four advanced assurance add-ons — Scenario Testing, Approval Briefs, Reality Coupling, and Stable Drift Detection.

Lending with AI: how do you let agents underwrite, price, and decline credit while every decision stays authorised, model-in-scope, explainable via a Decision Map™, contestable, and replay-provable?

How is AI governed when it designs a sequence or molecule? KYE AI Bio-Chem Governance Pack™ makes synthesis dual-use-screened, oversight-gated and replay-provable at the action boundary.

How is the AI Solutions Framework enforced at runtime? The KYE AI Solutions Framework Authority Pack™ resolves who may take each AI action, under what authority, and proves it later.

How is AI Financial-Crimes Governance applied when an agent disposes an AML alert or drafts a SAR/STR? The AML action is made authority-bound and replay-provable at the action boundary.

What is the KYE Assurance™ Bundle? One annual-price package of the core assurance add-ons — Audit Workspace, control mapping, an authority risk register, Evidence Pack™ Pro, and Replay Pro.

What is KYE Authority Drift Budget™? The add-on that lets you set how far deployed AI-agent authority may drift from declared before it alerts or blocks — drift as a managed budget, not a binary flag.

What

What is the KYE Authority Risk Signal™? A signed feed of seven authority-failure event counts that boards, insurers, and risk platforms price exposure from. KYE™ proves the events, not the risk.

What does the Billing & Dunning Authority Agent™ do? It governs governed fee/late-fee/dunning/suspend/collections/write-off at the action boundary and seals a replay-provable Evidence Pack™ —…

How do biopharma teams evidence EMA GVP and FDA Part 11 for AI-assisted safety decisions? The Biopharma Pharmacovigilance Authority Pack™ binds each to a control owner and a signed Evidence Pack™.

Canadian health custodian: how do you let AI act on personal health information while every action stays lawful under PHIPA, inside the circle of care, with a signed replayable access record?

How is AI governed when it acts on a record in Iron Mountain InSight DXP? KYE Chain of Authority™ binds the action to a named authority — InSight proves custody, KYE™ proves who may act.

What does the Chargeback Evidence Agent™ do? It governs governed card-dispute evidence at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How is a consumer chatbot governed under the US state AI-chatbot laws? KYE Chatbot Authority Pack™ proves the safeguards applied to the right person in the right jurisdiction, provable when sued.

How do insurers evidence FCA Consumer Duty and the EU AI Act for AI claims decisions? The Claims Authority Pack™ binds each to a named handler and a signed Evidence Pack™.

What does the Claims Decision Authority Agent™ do? It governs govern triage, reserves, settle/deny, payment release, referrals at the action boundary and seals a replay-provable Evidence Pack™ —…

What does the Clinical Action Authority Agent™ do? It governs governed release/flag-triage/recommend/escalate/share at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How does a clinical AI enter the EU/UK market? The Clinical AI Governance Pack™ binds each AI answer to an authority-to-inform, a GDPR Art. 9 basis, EU AI Act/MDR/MHRA conformity and clinician review.

What does the Clinical Trial Conduct Authority Agent™ do? It governs governed enroll/randomize/unblind/deviation/data-lock/IRB-submission at the action boundary and seals a replay-provable Evidence…

How does KYE™ govern an AI agent that takes a payment? Every payment, refund, chargeback or cross-border remittance an agent makes is authority-bound and replay-provable before it commits.

What does the Companies House Lookup Agent™ do? It governs governed UK company verification at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the…

Screening with AI: how do you let agents pull and act on consumer reports for hiring or tenancy while every use is purpose-permitted, consent-gated, explainable, and contestable?

How do UK law firms govern AI-assisted contract drafting? Contract Workflow Authority Pack™ binds each action to a matter + lawyer review + signed Evidence Pack™.

KYE Counterparty Governance Rail™ — one registry, one authority kernel, one evidence envelope for every external party acting on your behalf: partners, suppliers, 3rd-party AI agents.

What does the Credit Card Action Authority Agent™ do? It governs govern limit/APR/issuance at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How does a regulatory act in one jurisdiction get recognised in another? The Cross-Jurisdiction Handoff Rail™ binds each handoff to a signed framework-recognition pair, fail-closed.

How is an AI-assisted containment action or breach-disclosure decision made defensible to a regulator? KYE™ proves the authority and evidence: named-authority, chain-of-custody, source-pinned triage.

How do pathology labs evidence MHRA SaMD and the EU AI Act for AI diagnoses? The Digital Pathology Authority Pack™ binds each to a named pathologist and a signed Evidence Pack™.

What does the Drug Discovery Research Authority Agent™ do? It governs governed advance/release-claim/use-dataset/register-finding at the action boundary and seals a replay-provable Evidence Pack™ —…

estate-planning principal: how do you run wills, LPAs, trusts through one workspace where every clause is deterministic and every AI assist is bounded by a replayable authority chain?

KYE™ Federated Directory Query is the fan-out query that hits all eleven Directory indices in one round-trip and merges results under a deterministic ranking rule with per-tenant masking.

asset manager: how do you let AI recommend, rebalance and execute while every action stays inside its mandate, under a live grant from a named principal, replayable at supervisory review?

How does KYE™ turn a regulation into a governance pack without an LLM? The Framework Ingestion Engine™ parses deterministically, maps by versioned rules, and is replay-proof.

What does the Fraud Decision Authority Agent™ do? It governs governed block/hold/release/step-up at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing…

What does the Genetic Sequencing Authority Agent™ do? It governs synthesis-order/screening-disposition/data-release/clinical-result at the action boundary and seals a replay-provable Evidence Pack™…

How does an AI-generated genomic sequence reach synthesis or clinical use safely? The Genomics-Biosecurity Authority Pack™ binds it to admissibility, a sequence-of-concern screen, and oversight.

What does the Governed Control & Policy Authority Agent™ do? It governs governed recommend-controls / draft-policy at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Governed Grants Agent™ do? It governs governed award and disbursement decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the…

How do you govern an AI prompt that drives an agent action? KYE Governed Prompts™ treat the prompt as an authority act — bound to purpose, scope, and a signed evidence chain.

hardware team: how do you let AI help across the lifecycle while every action — release to fab, tapeout, firmware OTA, BOM change — stays admitted under a named engineer, replayable in a recall?

Hiring with AI: how do you let agents screen, rank, and reject candidates while every decision stays lawful, bias-audited, contestable, and replay-provable?

How is AI governed when it writes permits-to-work, risk assessments or RIDDOR reports? KYE HSE Authority Pack™ makes every safety-critical AI instruction sign-off-gated and replay-provable.

How is AI governed when it generates ICH Q-series submission evidence? KYE ICH Authority Pack™ proves how that evidence came to exist — authority-bound and replay-provable at the action boundary.

What does the Insurance Action Authority Agent™ do? It governs govern accept/decline/pay at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How is AI governed when it drives an investment decision or committee approval? The KYE Investment Decision Authority Pack™ makes the action authority-bound and replay-provable at the action boundary.

What does the Islamic Embedded Finance Authority Agent™ do? It governs govern releasing or holding a Shariah-compliant embedded-finance offer at the action boundary and seals a replay-provable…

What does the Islamic Microfinance Authority Agent™ do? It governs govern a qard hasan or micro-murabaha disbursement and its late-payment treatment at the action boundary and seals a…

What does the Islamic Mortgage Authority Agent™ do? It governs govern home-finance acts under diminishing-musharaka or ijarah muntahia bittamleek at the action boundary and seals a replay-provable…

What does the Islamic Trade Finance Authority Agent™ do? It governs govern the Shariah-governed trade-finance acts at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Istisna Authority Agent™ do? It governs govern the istisna

What does the KYC-Refresh Agent™ do? It governs governed KYC refresh at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

How is AI governed when it supports a laboratory result? The Pack makes result release ALCOA+ data-integrity-checked, named-reviewer-gated and replay-provable at the result-admissibility boundary.

What does the Legal Action Authority Agent™ do? It governs govern execute/sign/release decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing…

How is AI-assisted privilege review and document production made defensible in court? KYE™ proves the authority and evidence: named-authority, chain-of-custody, no-hallucinated-citation, replay-proof.

What is KYE Managed Authority Operations™? KYE™ operates your governance, authority and evidence plane and staffs an oversight desk for you. KYE™ runs the plane, not your agents.

MAS MindForge: how do you make the AI Risk Management Operationalisation Handbook enforceable at runtime, so every consequential AI action is oversight-mode-bound and replay-provable for MAS?

How do medical-device makers evidence MHRA SaMD and the EU AI Act for AI SaMD decisions? The Medical Device SaMD Authority Pack™ binds each to a named clinician and a signed Evidence Pack™.

How do radiology teams evidence MHRA SaMD and the EU AI Act for AI imaging decisions? The Medical Imaging Authority Pack™ binds each to a named clinician and a signed Evidence Pack™.

What is the KYE Memory Authority Rail™? Agent memory is governed as authority-bearing state — each use of a memory for an action is decided at the moment of use, with replay-verifiable evidence.

How do EU crypto custodians evidence MiCA Art 70-77 segregation for AI-assisted decisions? The MiCA Custody Authority Pack™ binds each to a control owner and a signed Evidence Pack™.

How is a model-driven decision made provable to a supervisor? KYE™ proves which model version produced the number, who validated and approved it, and the risk-report

What does the Mortgage Lending Action Authority Agent™ do? It governs govern approve/decline/terms at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Murabaha Authority Agent™ do? It governs govern each step of the murabaha sequence in order at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Muzaraa Authority Agent™ do? It governs govern the muzara

OCC AI supervision: how do you make the OCC

Who authorised an exploit, credential test, or AI pentest action? The offensive-security action is made authority-bound and replay-provable at the action boundary — capability is not authority.

What is human-over-the-loop oversight? A human sets an authority envelope — scope, limits, drift thresholds — once, then monitors for breach instead of approving each action.

What does the Payment Authorization Authority Agent™ do? It governs governed authorize/hold/step-up/decline at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Pension Liquidity Authority Agent™ do? It governs governed LDI collateral call / forced sale / redemption gate / buy-in-out trigger at the action boundary and seals a replay-provable…

What does the Pharmacovigilance Action Authority Agent™ do? It governs governed ICSR filing, signal disposition, PSUR release, recall notification at the action boundary and seals a replay-provable…

What does the PII Action Authority Agent™ do? It governs governed use/disclose/transfer/retain/profile/delete at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis,…

What does the Policy Lifecycle Authority Agent™ do? It governs govern issue/endorse/renew/cancel/non-renew/reinstate at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

conveyancing firm: how do you let AI help on a property matter while every step stays admitted under a named conveyancer, with source-of-funds evidence you can replay?

How do you refuse out-of-scope AI-agent action while it is forming, not reconstruct it after? KYE™ enforces authority at the moment of the action; refusals are signed, replayable.

18 regulated sectors with their KYE™ profile bundles and framework alignment — banking, payments, healthcare, capital markets, custody, insurance, AI labs, public sector, defence, energy

KYE Protocol™ compliance, conformance, certification overview. EU AI Act profile (10 controls); 289 control mappings across 13 horizontal frameworks plus sector overlays

how do you sign off on AI agents that act on your behalf, with evidence a regulator or court can replay?

KYE Governed Proposal Authority™ proves every factual claim in your proposal is cited, deterministic and sealed — the responder side of the Tender pack.

The evidence layer that makes legal accountability for AI agents possible. Subpoena response in 48h. Agent-as-contracting-party contracts enforceable by reference to bytes.

In 4–10 weeks a KYE™ pilot delivers a signed Evidence Pack™, regulator-mapped control crosswalk, and replay-proof bundle per privileged AI action — handable to auditor or regulator.

Lawyers · partners · journalists: which trademarks does KYE Protocol™ claim and what

what is the full normative specification of KYE Protocol™ — kernel chain, rails, schemas, engines, governance — in one canonical document?

KYE Protocol™ vs Microsoft’s Agent Governance™ Toolkit: KYE™ is the vendor-neutral authority layer that proves who was allowed to act, Replay-Proof™ from public keys alone, across any agent stack.

How is AI governed when it generates a public-sector decision or a FedRAMP authorising-official assertion? The KYE Public Sector Governance Pack™ makes the action authority-bound and replay-provable.

How does a publisher operate the MOW Search Only Terms Contract? The KYE Publisher Access Ledger™ classifies each automated access, seals it as evidence, and derives the unlicensed-access schedule.

How does a research institution publish governed AI-research authority? KYE Publishing Authority Track™ productises governed research — every claim cited and pinned, sealed, replay-verifiable.

What does the Quote & Bind Authority Agent™ do? It governs govern overrides, discounts, and the bind finality gate at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the RAG Output Authority Agent™ do? It governs governed release/act-on/feed of a RAG answer at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

The Rights, Disputes & Disclosure Rail unifies DSAR rights requests, decision contestation, investigation, and disclosure into one rail. KYE™ produces replay-derivable evidence; it does not adjudicate.

Where do you SEE KYE™

What does the Salam Authority Agent™ do? It governs govern the salam acts at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not executing the act.

What does the Sanctions & AML Authority Agent™ do? It governs governed block/release/escalate/file-SAR at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

How do UK Senior Managers evidence reasonable steps for AI-assisted decisions? Senior Manager Authority Pack™ maps each to SMF + SoR + signed Evidence Pack™.

What does the Settlement Finality Authority Agent™ do? It governs governed, final settlement decisions at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

What does the Shariah Operations Authority Agent™ do? It governs govern recording and escalating a Shariah non-compliance (SNC) event at the action boundary and seals a replay-provable Evidence…

What does the Shariah Screening Authority Agent™ do? It governs govern a screening verdict on an instrument, counterparty, or portfolio line at the action boundary and seals a replay-provable…

What does the Shariah Structuring Authority Agent™ do? It governs govern a product structure into the Shariah Supervisory Board approval queue at the action boundary and seals a replay-provable…

Which turn-key KYE™ bundle fits my sector, role, jurisdiction? KYE Starter Packs™ — 10 canonical packs pre-binding the right rule packs, sector packs, dictionaries, comms, widgets, purposes.

What does the Sukuk Authority Agent™ do? It governs govern the sukuk lifecycle acts (issuance, servicing, redemption) at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

What does the Takaful Authority Agent™ do? It governs govern operator-side acts on a takaful risk fund at the action boundary and seals a replay-provable Evidence Pack™ — proving the basis, not…

How is AI governed when it generates a tax position or filing? KYE Tax Governance Pack™ makes a filing, advice, or booking authority-bound, due-diligenced and replay-provable at the action boundary.

procurement team: how do you let AI help run a tender while every action — score, shortlist, award, dispute — stays admitted under a named officer, with evidence you can replay in a challenge?

What does the Threat Response Authority Agent™ do? It governs governed block/revoke/isolate/disable/escalate/notify at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How do VASPs evidence FATF Recommendation 16 Travel Rule data transmission for AI-assisted transfer decisions? The Travel Rule Authority Pack™ signs each into an Evidence Pack™.

What does the Treasury Authority Agent™ do? It governs governed corporate-treasury decisions within mandate/limit at the action boundary and seals a replay-provable Evidence Pack™ — proving the…

How is an AI-taken UK employment action made defensible at tribunal? KYE™ maps who authorised it and builds the ACAS/tribunal evidence bundle from the existing Evidence Pack™ and Replay Proof.

What does the Underwriting & Risk-Acceptance Authority Agent™ do? It governs govern accept/decline/refer within delegated limits at the action boundary and seals a replay-provable Evidence…

What does the Wakala Authority Agent™ do? It governs govern an act under a wakala mandate only within its recorded scope at the action boundary and seals a replay-provable Evidence Pack™ — proving…

How is AI-assisted whistleblower intake and case-handling made defensible? KYE™ proves the authority and evidence: need-to-know access, confidentiality evidence, retaliation-risk records.

KYE Protocol™ is the identity, delegation, policy and evidence layer for AI-assisted clinical decisions — proving the authority chain from a record created before litigation was contemplated.

Open or proprietary AI governance? Proprietary asks you to trust a closed scoring box; KYE Protocol™ is verifiable — open schemas, Apache-2.0, every decision Replay-Proof™ from a public key.

What is Reality Coupling? The KYE™ add-on that keeps declared AI-agent authority bound to deployed reality — so the map matches the territory, never a stale document.

What is Scenario Testing? The KYE™ add-on on the Resilience Loop that replays your AI-agent authority against what-if scenarios before they happen, so you know how a decision resolves before the event.

Where do I start with KYE Protocol™? Pick the outcome you need — agent auditability, runtime approval, or evidence replay — and each solution routes you to the right authority capability.

What is Sovereign Execution™? Data sovereignty answers where AI runs; Sovereign Execution™ governs who is allowed to act on that decision — proven from public keys, above confidential compute.

What is Stable Drift Detection? The KYE™ add-on on the Reconciliation Engine that continuously checks every deployed AI-agent authority still matches what you declared, and alerts when they diverge.

What is the KYE™ Tech & AI Due-Diligence Profiler? It turns a tech-stack and AI inventory into a deterministic, cited gap report against the framework registry — every gap traced, never guessed.

What is the Authority Simulator™? Set a scenario and watch KYE Protocol™ admit or refuse an AI action at the moment — the action climbs the chain, Purpose to Finality, or stops at a refusal.

What is the business case for Authority Finality™? Approvals and policies don

Where are the per-stakeholder sample reports? On the Example reports shelf — one signed report envelope per persona (auditor, board, CISO, DPO, regulator and more), each verifiable offline.

Runtime accountability for AI agents without replacing IAM — KYE™ adds a delegated-authority and evidence layer on top of your existing IAM, OAuth, API gateway, workflow, SIEM, GRC and AI-agent stack.

KYE Assurance™ Card™ Profile™ — turn KYE™ runtime evidence into a living lifecycle assurance record per delegated entity. Owner, intended use, authority model, human involvement, provenance

What is KYE GovernedUI™? The human-facing visible control surface for AI-agent authority. Approve, reject, edit, escalate, evidence, audit before an AI agent commits a consequential action.

A runtime permit checks the action; it never checks whether the principal held authority to take it. Authority is decided at the boundary — that is Authority Finality™.

What is Agentic Governance™? The category KYE Protocol™ defines — governance FOR agentic systems (humans, AI agents, hybrid authority) resolved to Authority Finality™.

What is in the KYE Protocol™ analyst briefing? An Agentic Governance™ category definition, a company fact sheet, and a competitive-landscape map versus adjacent vendors.

How is the Agentic Governance™ category defined for analysts? Governance FOR agentic systems on five primitives — act, authority, purpose, scope, evidence — resolved to finality.

In the Authority Court, the defendant is the agent

What is Authority Governance™? The category KYE Protocol™ defines: governing who is allowed to let an AI take a consequential action — the authority layer above describe-and-monitor AI governance.

Decision-admissibility validates a decision against a compiled rule; it does not entitle an actor to act. Action-authority is decided at the boundary — that is Authority Finality™.

Not all agents are equal. The KYE Consequential Actor™ Framework™ grades AI agents across five levels — L0 Informational to L4 Systemic — by how much governance each requires.

KYE Learn™ — the canonical education centre for AI governance, agentic AI risk, model risk frameworks, and players landscape.

Frequently asked questions about KYE Protocol™ — Authority Finality™, conformance, deployment, integration, regulation, governance, profiles, roadmap.

Plain-English definitions of every KYE Protocol™ term: Authority Graph™, Decision Map™, Authority Finality™, on-behalf-of, attenuation, cascade, evidence pack, ePDP, PEP / PDP, decision codes

What is the Open Agent Governance™ Foundation™? The open working group convened to standardise Agentic Governance™ — shared schemas, evidence-pack formats, and conformance tests.

Where can I read KYE Protocol™

A successful AI-agent action is not a legitimate one. The Authority Court puts the action on trial and asks whether it was authorised, in scope, at t=0 — and the verdict is Authority Finality™.

The loudest AI-governance fear is the rogue agent.

What does the EU AI Act actually demand of AI agents — risk tiers, prohibited practices, high-risk obligations, GPAI rules, the four obligations that bite hardest, timeline 2025-2027.

The KYE Protocol™ Blog argues doctrine: the layers mistaken for authority — observability, traces, permits, identity, keys — and the boundary that separates each from Authority Finality™.

What is the Map of KYE™? The protocol drawn as a cypress — its canopy is the chain of legitimacy (Purpose to Finality), and selecting a stage lights that foliage.

Digital-rights enforcement has moved from "do you have a privacy policy?" to "prove what happened" — and most organisations cannot answer at execution time.

What is the Research Program? Governed publishing — no claim without a cited source, every report evidence-sealed and replay-verifiable; institutes co-author via the Publishing Authority Track™.

There is a measurable gap between what organisations say about their AI governance and what they can actually prove — and that gap is invisible until the first incident, when it becomes the whole…

What is the trust layer for consequential action? The layer that decides whether an action may proceed, records why, and makes that authority final and provable — KYE Protocol™.

Who is accountable for an AI answer? The party that presents it as authoritative — KYE Protocol™ records the authority and cited basis so it is provable. Reporting, not legal advice.

DORA — Digital Operational Resilience Act: control mappings to KYE Protocol™ canonical artefacts. Financial entities in the EU — credit institutions, payment institutions, e-money institutions, inve…

EU AI Act — Articles 14 + 15 (Human Oversight + Accuracy/Robustness): control mappings to KYE Protocol™ canonical artefacts.

KYE Data Governance Pack™ — runtime data governance for delegated AI-agent actions. data_use PDP stage + 7 default-deny rules + 441 dictionaries + signed evidence per access

KYE DSAR Evidence™ Pack™ — signed bundle of every audit-chain entry involving a named data subject. GDPR Art. 15 / UK DPA Pt 3 Ch 3 / CCPA. Offline-verifiable by the requesting subject

No blind approvals for AI-agent actions — KYE Approval Brief™ assembles actor, principal, authority, scope, state, and risk into a structured, signed brief — so human approvers decide informed

KYE Protocol™ Acceptable Use Policy. Prohibited uses, prohibited content, automated-behaviour limits, security obligations, abuse reporting, suspension.

The public KYE Protocol™ schemas, OpenAPI definitions, examples and SDKs are released under the Apache License 2.0. This page reproduces the full text.

Per-framework reference: which KYE Protocol™ controls map to which obligation, with framework scope, official source, and the canonical KYE Compliance Mapping Rail™ binding.

KYE Protocol™ Cookie Policy. No first-party cookies, no analytics or advertising trackers; a few localStorage keys for theme and update read-state; strictly-necessary host security cookies only.

KYE Protocol™ Data Processing Addendum, GDPR Article 28 compliant. SCCs incorporated, sub-processor list, security measures, data-subject rights handling, return/deletion on termination.

KYE Evidence Pack™ — the signed, replayable bundle of audit-chain entries, Decision Maps™, signatures and public-key set that a regulator or auditor verifies offline

Everything is open — Plain-English legal page: Apache 2.0 across schemas, SDKs, OpenAPI, conformance, reference Gateway. Patent-track mechanism algorithms and KYE™ trademarks are protected. FAQ on lic

KYE Protocol™ Mutual Evaluation Agreement: compulsory clickwrap confidentiality and no-competing-use terms accepted in every pilot, PoC, partner, trainer and auditor intake, pinned by version hash.

KYE Protocol™ Privacy Policy. Data controller: KYE Protocol™ Ltd. Data we collect, lawful basis, retention, sub-processors, data subject rights under GDPR Articles 15-22, international transfers

Sub-processors — KYE Protocol™ sub-processor list. Cloudflare for hosting, Pages Functions, D1, R2, KV, Workers AI, AI Gateway and Email Routing.

KYE Protocol™ Terms of Service — minimum-viable B2B SaaS terms for the Audit Pilot program. Governing law: England & Wales. Notices: [email protected].

Australian organisations: runtime authority and signed evidence for AI under APRA CPS 230, the AI Guardrails, the Privacy Act 1988 and the ASD Essential Eight — Australian-sovereign deployable.

Canadian organisations: runtime authority and signed evidence for AI under PIPEDA, PHIPA, Health Canada SaMD, OSFI and FINTRAC — bijection-mapped + Canadian-sovereign deployable.

Japanese organisations: runtime authority and signed evidence for AI under the APPI, the FSA

New Zealand organisations: runtime authority and signed evidence for AI under the Privacy Act 2020, RBNZ BS11 and the Algorithm Charter — bijection-mapped + New-Zealand-sovereign deployable.

Singapore organisations: runtime authority and signed evidence for AI under the MAS TRM Guidelines, IMDA AI Verify and the MAS FEAT principles — bijection-mapped + Singapore-sovereign deployable.

EU organisations: runtime authority and signed evidence for AI under the AI Act, GDPR, DORA, NIS2 and EDPB guidance — bijection-mapped + deployable on EU-sovereign regions.

Gulf organisations: runtime authority and signed evidence for AI under UAE PDPL, Saudi PDPL, Bahrain PDPL, Qatar PDPL, SAMA AI, DIFC and ADGM — sovereign-deployable on the customer

UK organisations: runtime authority and signed evidence for AI under FCA, PRA, MHRA, NHS, DSIT and HAARF — bijection-mapped and deployable on UK-sovereign regions.

US organisations: runtime authority and signed evidence for AI under HIPAA, FDA SaMD, OCC, NYDFS Part 500, SEC, FFIEC, NIST AI RMF — bijection-mapped + US-sovereign deployable.