Delegated authority
Authority Register
Autonomy is only safe if somebody wrote down what each agent and each person is allowed to decide. more
Health
What the estate is currently allowed to do
Grants in force, who holds them, how often they are used and how often they are exceeded.
IT7-AUTH-A1
Security Operations Orchestrator · Information Technology · Cybersecurity Operations
Any unit on a cybersecurity operations line where every intake check passed, the policy in force is current, and the value sits inside the cap below.
- Confidence at or above the line threshold, otherwise the unit is held.
- Policy version in force must be current, not superseded.
- Every action writes to the evidence spine before the unit advances.
11 grants
Select any row to see the conditions, the delegation chain and how it has been used
| Reference | Holder | Decision type | Cap | Jurisdictions | Delegated from | Expires | Uses 30d | Status |
|---|---|---|---|---|---|---|---|---|
| IT1-AUTH-A1 Service Desk | Service Desk Orchestrator orchestrator | Clear and route work on the service desk lines | $2,000k | US UK DE SG AU FR BR | Director, Service Desk | 2026-12-01 | 3607 | Active |
| IT6-AUTH-A1 Application Management | Application Management Orchestrator orchestrator | Clear and route work on the application management lines | $250k | US UK DE SG | Director, Application Services | 2026-11-03 | 1517 | Active |
| IT10-AUTH-A1 Change & Release | Change Orchestrator orchestrator | Clear and route work on the change & release lines | $2,000k | US UK DE SG AU | Director, Change Management | 2027-04-04 | 2742 | Active |
| IT8-AUTH-A1 Data & Integration Platform | Data Platform Orchestrator orchestrator | Clear and route work on the data & integration platform lines | $250k | US UK DE SG AU | Director, Data Platform | 2026-09-13 | 3602 | Active |
| IT2-AUTH-A1 Identity & Access | Identity Orchestrator orchestrator | Clear and route work on the identity & access lines | $2,000k | US UK DE SG | Director, Identity & Access Management | 2027-01-17 | 2328 | Active |
| IT4-AUTH-A1 Infrastructure & Cloud | Infrastructure Orchestrator orchestrator | Clear and route work on the infrastructure & cloud lines | $2,000k | US UK DE SG | Director, Cloud Infrastructure | 2027-01-11 | 4084 | Active |
| IT3-AUTH-A1 End-User Compute | End-User Compute Orchestrator orchestrator | Clear and route work on the end-user compute lines | $250k | US UK DE SG AU FR BR | Director, Workplace Technology | 2026-12-06 | 1630 | Active |
| IT5-AUTH-A1 Network | Network Orchestrator orchestrator | Clear and route work on the network lines | $250k | US UK DE SG AU | Director, Network Services | 2027-06-09 | 2011 | Active |
| IT7-AUTH-A1 Cybersecurity Operations | Security Operations Orchestrator orchestrator | Clear and route work on the cybersecurity operations lines | $2,000k | US UK DE SG AU FR | Director, Security Operations | 2026-11-15 | 3165 | Active |
| IT9-AUTH-A1 Asset & License | Asset Orchestrator orchestrator | Clear and route work on the asset & license lines | $2,000k | US UK DE | Director, IT Asset Management | 2026-12-25 | 453 | Active |
| IT11-AUTH-A1 IT Financial Management | IT Finance Orchestrator orchestrator | Clear and route work on the it financial management lines | $250k | US UK DE SG AU FR | Director, IT Financial Management | 2027-04-30 | 610 | Active |
How the register is enforced
Not a wall chart
When a decision is recorded, the route resolves a grant first … more
Refusals are evidence in their own right. more
Expiry is a real state, not a label. more
What is still missing
Say it before an examiner does
The holder identity on a grant is a name, not a cryptographic identity. more
The persona a user is browsing under is chosen in the interface and is not yet an identity the server trusts. more
Delegation is one hop deep. more
Actions
What is waiting on a person
A grant is a written permission with an expiry, a cap and a named delegator. more
Renew or let a grant lapse
Expires within ninety days. On expiry the holder falls back to asking.
Explain a grant that was exceeded
148 attempts beyond the cap in the last thirty days across these grants.
Withdraw a permission nobody uses
Granted and never exercised. Unused authority is still authority.
Nothing else is pending
Every other grant is inside its cap and inside its term.
Operations
What this desk is allowed to start
A surface that only reports is not operable. more
Trigger and bound
This desk can grant, narrow, extend or revoke a permission, and every one of those is written to the spine with the person who did it. more
Live observability
What the record shows right now
Grants split almost evenly between agents and people. 352,403 uses in the last thirty days produced 148 attempts above cap.
Current distribution
309 grants
Is policy and strategy coming to fruition
Whether the written intent is holding here
148 cap breaches against 352,403 uses — 0% of exercised authority went past its bound.
Not holding on the record
The policy position is that no actor, agent or human, may commit the company past a stated value without a named delegator standing behind it. more