---
title: "How KYE™ Works · KYE Protocol™"
description: "The plain-language spine: how KYE Protocol™ resolves authority before an action and preserves replayable evidence after it, in eight mechanical steps — from the actor who asks to the revocation that ends the grant."
url: https://kyeprotocol.com/platform/how-it-works/
lang: en
source: "KYE Protocol"
---

> The plain-language spine: how KYE Protocol™ resolves authority before an action and preserves replayable evidence after it, in eight mechanical steps — from the actor who asks to the revocation that ends the grant.

# How KYE Protocol™ works

[KYE Protocol™](https://kyeprotocol.com/) resolves authority before an action and preserves replayable evidence after it. If your team runs AI agents or automated systems that take consequential actions, KYE™ answers the one question every regulator asks — _who was authorised to do this, and can you prove it?_ — at the moment the action happens, not in next year's review.

[Start Sandbox](https://kyeprotocol.com/sandbox/demos/) [Developer quickstart](https://kyeprotocol.com/docs/)

## The eight-step spine

Each step is a checkpoint your action passes through. Read top to bottom and you have the whole of KYE™ — the first four steps resolve authority _before_ the action; the last four preserve proof _after_ it.

1. **Actor identified.** KYE™ first establishes the entity asking to act — the agent, human, or system behind the request — as a resolvable principal your auditors can name.
2. **Authority resolved.** KYE™ follows the [Authority Lifecycle](https://kyeprotocol.com/authority-lifecycle/) to determine who delegated what, to whom, and through which record — so yesterday's grant cannot quietly authorise today's different act.
3. **Scope & purpose checked.** KYE™ tests whether this action falls inside the purpose the authority was granted for. A grant to read your data is not a grant to move your money.
4. **Policy evaluated.** KYE™ applies the rules and jurisdiction in force at this instant — the EU AI Act™ logging duty, your firm's own limits, the framework you must answer to — against the request as it stands now.
5. **Action decided.** KYE™ returns one verdict — [Action Admissibility™](https://kyeprotocol.com/action-admissibility/) resolves to admit, deny, challenge, or escalate — at the moment the action is attempted, not after.
6. **Evidence Pack™ generated.** KYE™ seals the decision into a signed [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) that captures the rule bundle hash and the wall-clock time at the instant of the decision.
7. **Replay available.** Any third party — an auditor, a regulator, a court — re-runs the same decision from KYE™'s published public keys alone, with no need to trust KYE Protocol™ or take your word for it. That property is Replay-Proof™.
8. **Revocation, expiry & dispute preserved.** Authority is not forever. KYE™ records when a grant is withdrawn, expires, or is contested, so the end of authority is itself evidenced — the principle of Authority Finality™.

## What that buys you

A first-time reader cares about the outcome, not the plumbing. Here is the concrete payoff for one common case your compliance team will recognise.

When an AML agent closes an alert, **KYE™** proves who authorised it and on what basis — cutting exam-prep from days to minutes, because the auditor replays the signed decision instead of reconstructing it. The same sealed record serves the incident responder today and the examiner next quarter.

- You verify a decision offline from public keys alone — no vendor lock, no "trust our log".
- You answer a regulator per action, not in an annual self-assessment.
- You suspend authority mid-flight, and the suspension is captured as evidence too.

This page is the plain-language spine. For the full state machine, see the [Authority Lifecycle](https://kyeprotocol.com/authority-lifecycle/); for the per-action decision, see [Action Admissibility™](https://kyeprotocol.com/action-admissibility/); for the sealed record, see the [Evidence Pack™](https://kyeprotocol.com/evidence-pack/).

[Start Sandbox](https://kyeprotocol.com/sandbox/demos/) [Developer quickstart](https://kyeprotocol.com/docs/)