Skip to main content

Authorization Decisions

Authorization Decisions are the deterministic output of Governance. They define whether an action is allowed to execute.

System role

Authorization Decisions are produced after evaluating:
  • verified signals
  • signed policies
  • deterministic rules
They are the only valid input to Execution Runtime.

System model

Verified Signals + Policy → Governance → Authorization Decision → Execution Runtime
Decision outcomes

Governance produces one of the following outcomes:

APPROVE → execution is allowed
REJECT → execution is blocked
REQUIRE_OVERRIDE → human approval required
Properties of decisions

All Authorization Decisions are:

deterministic
reproducible
policy-bound
cryptographically attestable
How decisions are used

Execution Runtime consumes Authorization Decisions and enforces them.

Authorization Decision → Execution Runtime → Execution Outcome

No execution can occur without a valid decision.

Why decisions matter

Authorization Decisions are the control point of the entire system.

They ensure:

AI cannot directly execute actions
governance is enforceable
execution is deterministic
all outcomes are verifiable
What decisions are NOT

Authorization Decisions are NOT:

AI outputs
probabilistic scores
recommendations
workflow states

They are final deterministic outcomes.

Governance dependency

All decisions originate from Governance:

Governance → Authorization Decision
Key invariant

AI proposes
Governance decides
Execution enforces

Summary

Authorization Decisions are the enforceable truth of the system.

They ensure:

deterministic control over execution
strict separation from AI
verifiable outcomes
policy-driven governance