INFORMATION AUTHORIZATION
Context PAP
- Record
- Context PAP
- Purpose
- Signed, tamper-evident information-authorization record
- Timing
- Before AI reasoning
WHAT INFORMATION WAS THE AI AUTHORIZED TO RECEIVE?
How It Works
One complete story from information authorization to action authorization.
GRACE places one explicit control point before AI reasoning and another before execution. Each authorization creates a signed, tamper-evident Policy Action Packet, and the Chain of Confidence verifies that the two records belong to the same controlled transaction.
THE GRACE SYSTEM
Information authorization
↓
AI reasoning
↓
Action authorization
Why the information boundary matters
A title-search task can be limited to the property information it actually needs.
Information proposed to the workflow
A broadly connected agent may be able to access information that is unrelated to the declared task.
- Social Security number
- Date of birth
- Other unrelated personal information
Information authorized for the task
The institution defines the information needed for the title-search task.
- Property address
- Parcel number
Illustrative example. The organization defines the actual required and permitted fields for each workflow.
The GRACE mechanism
Two authorization boundaries around one AI agent.
1Information AuthorizationContext Path
Evaluate the information proposed for the declared task before it reaches the AI.
→
2Context PAPPolicy Action Packet
Signed, tamper-evident record of the information authorization decision.
→
3AI ReasoningApproved or adjusted information
The agent reasons from the information the workflow has authorized.
→
4Action AuthorizationAction Path
Evaluate the proposed action before it reaches a downstream system.
→
5Action PAPPolicy Action Packet
Signed, tamper-evident record of the action authorization decision.
Decision states
Three clear outcomes at either authorization boundary.
ALLOW
Proceed as proposed. The requested information or proposed action satisfies the applicable institution-defined rules.
MODIFY
Adjust to policy, then proceed. GRACE applies institution-defined constraints to create the approved or adjusted information or action.
ABSTAIN
Stop autonomous progression. Route the request for human or institutional handling.
CHAIN OF CONFIDENCE
THIS IS WHERE AGENTIC AI ACCOUNTABILITY LIVES.
VERIFIED RELATIONSHIP BETWEEN BOTH SIGNED AUTHORIZATION RECORDS
CHAIN OFCONFIDENCEVERIFIED
ACTION AUTHORIZATION
Action PAP
- Record
- Action PAP
- Purpose
- Signed, tamper-evident action-authorization record
- Timing
- Before execution
WHAT ACTION WAS THE AI AUTHORIZED TO TAKE?
Evaluation mode
Shadow mode
Observe and record decisions without affecting live operations.
Shadow mode runs the information and action evaluations and records the resulting authorization decisions while the organization's current production controls remain in place.