Infrastructure · Data Structures
Permission
Authorization grant
Definition
Mechanism
An authorization grant allowing an Agent to perform a specific Act or access a Artifact. The atomic unit of access control.
Risks
Failure modes
Privilege escalation
agent acquires permission beyond intended scope.
Stale grant
permission remains active after it should have expired.
Caution
Authorization boundary — misconfigured grants enable unauthorized action.
Relationships
Builds on
Used by
References
Society
Guard against privilege confusion by binding authority checks to the upstream caller, not the executing deputy
Society
Seek fresh consent when an initiative changes its purpose, scope or consequences
Society
Revisit a mandate when the circumstances it was granted under change
Reference
Data schema
{
"type": "object",
"required": [
"permission_id",
"agent_id",
"action"
],
"properties": {
"permission_id": {
"type": "string",
"description": "Unique identifier for this permission"
},
"agent_id": {
"type": "string",
"description": "Who is granted permission"
},
"action": {
"type": "string",
"description": "What action is permitted"
},
"resource": {
"type": "string",
"description": "What artifact can be accessed"
},
"granted_at": {
"type": "string",
"format": "date-time",
"description": "When permission was granted"
}
}
}