The authority layer for AI-operated delivery.
ProdPermit sits after intent and before execution. It decides whether an agent has earned enough evidence for one exact consequential action.
The Authority Ring is behavioral.
It does not close because a button was clicked. It closes only when required evidence, delegation, target state, budget and policy agree.
Evidence, unknowns, risk and target preconditions become one immutable decision dossier.
ImplementedA content-addressed plan fixes canary scope, budget, observation and rollback identity.
ImplementedEd25519 authority binds exact artifact, target, operation, attempt, fence and expiry.
ImplementedPostgreSQL admission prevents duplicate dispatch and preserves monotonic continuity.
ImplementedStaging runtime health and recovery evidence are unresolved. No live canary or earned expansion is claimed.
LimitedAuthority contraction/freeze is implemented. Broader automatic expansion remains intentionally unavailable.
Planned