The demos answer the control question access systems leave open: this actor may be logged in, and this tool may be reachable, but should this exact autonomous AI action happen now, under this delegation, in this flow, with this consequence?
The five-minute overview of the whole decision model, then the specific decisions below.
The whole decision, end to end: Ambit Authority intercepts an autonomous action before it commits, normalises it to a single canonical action, judges it against your policy, and answers ALLOW, DENY, or ESCALATE — sealing every decision into a replayable, tamper-evident chain.
The gaps a valid login and real permissions still leave open: permission is not authority; a control written as an instruction is not a guarantee; and permission for each step is not permission for what they compose into.
Audience Risk, compliance, and platform owners
A support agent proposes to delete a customer record. Ambit Authority denies the unjustified request, escalates once the action is critical, allows only an exact human approval, then denies approval reuse.
Decision path
Audience Compliance, operations, and regulated-workflow owners
Coverage and a fraud review must precede payment — but when the agent owns the order, that required review becomes a skippable instruction. Ambit Authority enforces it at the action.
Decision path
Audience CISOs, privacy officers, risk, and audit teams
A claims agent may read claimant data and issue a valid refund. When it chooses an unapproved fraud partner, Ambit Authority denies before data leaves and the downstream refund path never runs.
Decision path
Delegation between agents is where authority can quietly widen. Nothing has to be hijacked: every credential can be valid and every permission real, and the task still cannot invoke authority its own delegation path never carried.
Audience CISOs and platform owners running multi-agent systems
A release agent forks the work: validation reviews the build, deployment stages the canary. The canary fails and holds at one percent. Validation’s own checks pass, so it asks the shared deployment agent to continue the rollout — but the task it hands over never carried deploy authority. Every credential is validly signed and the deployment agent does hold standing deploy permission; Ambit Authority denies because the authority this task descends from narrowed at validation and cannot widen back.
Decision path
A decision only counts if someone else can check it. Every outcome is sealed so the original reproduces and any tampering is visible — evidence, not a claim.
Audience Compliance, audit, and assurance owners
Every decision is sealed into a tamper-evident record. Re-run it against the same policy and the original reproduces exactly; alter the evidence and verification fails — proof another party can check, not a claim to trust.
