The human is the source
The Twin may recommend, prepare, negotiate, and execute — but it never silently becomes the decision-maker.
ECHO TWIN · THE AUTHORITY ENGINE
It may recommend, prepare, negotiate, and execute — never decide over you.
Before your Twin does anything, the Authority Engine answers eight questions out loud and every action moves through one loop: intent, proposal, permission, execution, proof, reflection. The standard is simple — Echo must increase your power without increasing its power over you.
Everything below is measured against this. The Twin never assumes more than the human granted.
Not only what the Twin may access — what it may shape. You can always see, challenge, and reset it.
None yet — run an intent above.
Stated by you, or inferred by the Twin — kept apart, never fused. Inferred ones only exist because you adopted them.
The Twin may recommend, prepare, negotiate, and execute — but it never silently becomes the decision-maker.
Knowing a fact about you does not grant the right to use it. Every use needs a valid purpose and an active grant.
A Twin can do the work without exposing the whole person behind it. It proves only what an interaction needs.
The more powerful the action, the stronger the confirmation, cancellation, recovery, and audit path must be.
What was stated, what was inferred, what was corrected, and who authorized each change — all of it is kept.
Echo must increase the owner's power without increasing Echo's power over the owner.
Not engagement. Not time spent. Not how many actions the Twin performs. The measure is whether, after using Echo, the person has more understanding, more capability, and more control than before.
Small helpful choices can accumulate into enormous influence. That is why the boundary here is an influence boundary, not only a data boundary — you can see and reset what it has shaped.
If every step-up becomes reflexive tapping, the safety erodes. The engine gates on value, irreversibility, and sensitivity — not on everything — so a confirmation still means something.
A signed head proves the Twin evaluated your grant and stayed in scope, and that it dispatched the action. It cannot prove the action took effect — a bank could accept a transfer and crash before settling — and it cannot prove the action was a good idea. Judgement remains with you.
A standing grant is real power handed to a delegate. It is deliberately bounded, time-limited, and revocable — but the safest grant is still the smallest one.