RESEARCH PROGRAMME

Authority is the missing evidence layer.

Verimand’s thesis is that autonomous systems need a first-class, machine-verifiable representation of delegated organisational authority—separate from identity, policy and model reasoning.

Research thesis

RESEARCH QUESTION

How can consequential autonomous action remain bounded, conserved, current and auditable across organisational delegation?

THE GAP

Authentication proves identity.
Policy evaluates rules.
Neither alone establishes the organisational mandate.

An agent can be authenticated and policy-compliant while still lacking a valid organisational mandate for one exact action. VAGP treats that provenance as its own security object.

Read the AI agent authority guide

PRIOR-ART MAP

01Capability systems

Demonstrate unforgeable, attenuable authority tokens; VAGP adds explicit organisational graph provenance and lifecycle semantics.

02IAM and workload identity

Strongly establish principals and credentials; they do not by themselves model why delegated organisational authority exists.

03Policy engines

Evaluate rules over inputs; VAGP supplies a distinct authority result that policy may consume but cannot silently invent.

04Agent governance

Often focuses on model behaviour, risk and oversight. VAGP focuses on deterministic execution authority at the trust boundary.

Open the VAGP v0.2 reference anchors

WORKING HYPOTHESES

How can delegated authority avoid amplification?

Every edge can be tested for narrower-or-equal semantics, including finite budget lineage that cannot be duplicated among descendants.

How can finite authority avoid duplication?

Shared root ceilings and exact mandate lineage must remain visible across descendants. A delegated amount is not an independent copy of the parent’s capacity.

How does authority remain current between decision and execution?

Validity, lifecycle status and observation freshness are explicit. A historic witness cannot silently become a current one.

Why is one complete Authority Witness important?

A witness makes the qualifying lineage inspectable. Authority Witness evidence explains the source of the decision without assembling authority from incomplete paths. Cryptographic receipt authenticity remains future work.

Why should verification happen near consequence?

Exact resource-side verification limits semantic drift and lets the protected system reject stale, mismatched or replayed execution attempts.

OPEN QUESTIONS

UNDER ACTIVE DESIGN

Portable evidence

VAGP 0.3 implements canonical DNA, signed evidence and local durable trusted state. Portable grants, multiple-proof policy and broader distributed operation remain future protocol and product work.

VAGP evolution · planned
BOUNDARY CONDITION

Never delegate to probability

Models may help interpret and recommend. They must not become the final authority evaluator for a consequential action.

Deterministic trust boundary