earned-authority

Overview ¶

Command earned-authority shows authority that is earned from an agent's provable track record: it starts narrow, widens one rung after a clean streak (capped by a root ceiling), and resets to baseline the moment an anomaly is flagged. Two tiers cooperate, as designed:

• the controller (audit.EarnedAuthority) is a durable, sequential control loop: earning is temporal and order-dependent, so it is not a convergent machine; it decides the current limit and re-issues a signed grant that is a CHILD of the root grant, so the earned limit provably never exceeds the root ceiling (VerifyDelegationChain), and appends it to a ledger run whose last leaf is the only current grant, so a demotion revokes the higher grant at once (VerifyCurrentGrant against the ledger's latest signed head);
• the enforcement is a convergent gsm invariant on the work machine (exposure <= limit), seeded with whatever limit the controller currently grants.

Offline, no LLM: the "compliant actions" and "anomaly" are driven directly so the loop is visible.