Design Principles
The specification is governed by the following architectural invariants:
- Identity does not imply authority.
- Key control does not imply accountability.
- Capability does not imply permission.
- Authority is contextual and bounded.
- Delegation is distinct from ownership or control.
- Downstream authority may narrow but must not expand.
- Assurance applies only to the evaluated subject and scope.
- Material change requires reassessment.
- Revocation is incomplete until enforcement surfaces converge.
- Consequential action must be reconstructable.
- Registry decisions must be contestable and repairable.
- Derived state must disclose provenance and freshness.
- Technical interoperability does not imply governance recognition.
- A registry supplies evidence and governed status, not universal trust.