Authority Ledger
Tenant-scoped grants and signed mandates define who may act, on which resources, and for how long.
Every AI can think. No AI acts without authority.
THE AUTHORITY GAP
BOTKILER places an independent authority layer between an AI request and consequential execution.
Identity and tenant scope are assigned by the protected backend. The browser can request; it cannot grant authority.
SOVEREIGN AUTHORITY FABRIC
REST, SDK, MCP, A2A, and gateway requests normalize into the same deterministic decision.
Tenant-scoped grants and signed mandates define who may act, on which resources, and for how long.
Cryptographic lineage, subset enforcement, depth limits, expiry, and parent revocation prevent authority escalation.
Deterministic controls evaluate business, data, privacy, regulatory, availability, and blast-radius impact.
Bounded traversal reveals composed permissions and dangerous paths with explainable evidence.
Generation-aware revocation and scoped containment stop stale authority from returning.
Integrity-linked decision records preserve reason codes and authority paths without private reasoning.
CONSISTENT DECISIONS
Model-assisted analysis may recommend. It cannot become sole authority for critical execution. Every outcome remains server-authoritative and evidence-linked.
DEVELOPERS
Use bounded clients and one canonical action envelope. Mutation calls are not blindly retried.
Explore API documentation ↗POST /api/v1/authority/evaluate/agent
{
"ingress": "REST",
"grant_id": "grant-id",
"action": {
"capability": "data.read",
"resource": "record:123",
"nonce": "single-use-nonce"
}
}PLANS
Paid checkout remains fail-closed until live billing-provider approval is complete.
Authority controls for one bounded agent workflow.
View plan contract ↗Expanded policy and evidence limits; paid activation follows provider verification.
View plan contract ↗Role-aware controls for collaborative security operations.
View plan contract ↗Private integration, containment, and deployment planning.
View plan contract ↗Customer-controlled architecture with air-gap validation kept explicit.
View plan contract ↗SECURITY BY AUTHORITY
“Every AI can think.
No AI acts without authority.”
PRIVATE PREVIEW · CONTROLLED ONBOARDING
We map the authority boundary, connect one integration, and prove the decision, evidence, revocation, and rollback path before any wider rollout.