Authority Docs — the canon beneath the five doors

AUTHORITY DOCSDocumentation for the layer beneath the doors — not a door itself.the core laws →

Built to try · tools and reference labs

Authority Tools

Permission has a short window

Try the five-second PULSE lease, silence, reconnect, stop and revoke with simulated payments.

Human Heartbeat

Use a compatible local heart-rate sensor as an optional policy input. This is not a phone link or proof of identity or biological presence.

WebAuthn presence

Try a passkey or security key for a fresh local approval. A PIN may satisfy verification; no biological-presence claim.

ECHO · shared authority allowance

Try the EUR 100 challenge: two executors, one allowance, private action evidence and strict permission translation. All effects are simulated.

Reference labs use test units. PULSE, heartbeat, WebAuthn and QR lab interfaces are in English. Physical sensors, authenticators and QR timing still need field validation.

Experimental · offline phone link

PULSE QR lab

Use a phone and a second device to exchange signed PULSE messages by QR. Open the phone role on your phone and the executor role on the other device, then follow the setup steps.

Open phone lab Open executor lab Read the protocol and test evidence

Lab only: no real payments. A scan grants no authority and proves neither distance nor biological presence.

Physical-phone cameras and five-second timing still need field testing. Lab interface: English.

MONEY MUSK · HUMAN AUTHORITY SECURITY PROFILE

Bounded permission. Verifiable evidence.

Echo Atlas is Money Musk's existing architecture map. The Human Authority Model defines the governing semantics. This section adds implementation safeguards and their verification scope.

The TypeScript security profile 0.2 pins human root keys, binds each delegate to its exact key, checks the complete delegation chain, and rejects unsupported or malformed authority. An agent proposes an action; the service performing it must enforce the human's limits.

Keys and delegationTrusted root policies, signed parent bindings, shared ancestor limits and current revocation checks.

Authenticated evidenceSeparate signed decision, dispatch and outcome receipts. Verification requires independently trusted signer keys.

Local demonstrationsOne-use grants and complete metadata commitments for new history entries. A local hash does not authenticate a human or prove settlement.

Kernel owner boundaryKernel reads, grants, policies and decisions now require exact-action Echo key signatures, with durable replay checks and separate key-owned records. Callsigns do not establish ownership. This proves key control, not physical human presence.

Production integrationThe Kernel migration and deployment configuration require isolated rollout checks. Connecting payment executors to the delegated-authority verifier, durable reservations and provider reconciliation still require separate evidence.

These are tested reference safeguards. They are not an independent security audit or a claim that live payments, recovery or external outcomes have been verified. Older Rust/WASM examples use a separate profile and do not certify this implementation.

Philosophy

Foundation

The Core Lawslaws

Twelve laws in four articles — the constitution the whole system answers to.

The Echo Constitutioncharter

Eleven articles of human sovereignty, in plain language.

Prior Art & Design Lineagelineage

What this protocol inherited, and from whom — SPKI, macaroons, UCAN and the rest — plus what prior art still does better than we do.

What authority is

Formal Model

The Human Authority Modelfoundational

Where authority comes from, how it moves, shrinks, expires — and what machines can never do with it.

The blueprint

Specification

The Authority Protocolspec

The original blueprint and interactive demonstrations. The TypeScript security profile and production requirements are documented below.

The Authority Objectprimitive

The smallest unit of human authority — the grammar every grant is written in.

How it is enforced

Runtime

Border Controlenforcement

Deterministic enforcement. Intelligence detected, authority unknown — does the action fit the grant?

Authorize with Echoflagship

The honest replacement for 'Sign in with Google' — exactly what an app may do, and nothing it can smuggle.

A shared language

Adoption

The Human Authority StandardHAP-1

HAP-1 — the eight questions and the Universal Receipt. Like HTTPS, but for authority.

What actually happened

Proof

The Authority Graphledger

Local receipt history, with explicit integrity coverage and limits on what it proves.

The human in command

Control surface

The Human Authority Centerdashboard

The human control surface: active grants, delegations, revoke, and your standing across the ecosystem.

Inside the specification

Concepts that live in the protocol

These are not separate pages — they are load-bearing sections of the Authority Protocol, each demonstrated by the live verifier there.

Invocation Objectthe exact action attempted, signed by the acting agent Attenuation & delegationa child grant can only ever narrow its parent — never widen it Reason codesthe fixed vocabulary every DENY speaks in Conformance vectorspublished cases, with each implementation's profile and coverage kept explicit Interop adaptersOAuth / MCP / OpenAI grants re-represented, never silently expanded Bitcoin anchoringa log commitment demonstration; independent inclusion and checkpoint verification are separate requirements

Reference implementations and their scope

The reference implementation

The five-crate Rust toolkit includes a WebAssembly demonstration on the protocol page. It uses the legacy profile. Its test results and the TypeScript security profile 0.2 results have separate coverage; agreement on examples does not establish production security.

echo-authority-coreecho-border-controlecho-authority-testsecho-authority-wasmecho-authority-cli

Five systems. One authority model. Authority governs.

The Human Authority Model →The Authority Protocol →The Human Authority Center →The Core Laws →