Skip to content
Strategy & Visionv1.0

Authority by design

A leadership blueprint for AI agents in production

Define bounded permissions, preserve them across handoffs, and enforce a final authorization check on every route that can act. Companion to The Reliability Thesis, Episode 03.

6 min read11 pages49 KBPublished November 2026
By
Kevin Kissi
Kevin Kissi

A companion to The Reliability Thesis. Watch episode 3: The Real AI Agent Problem Is Authority

Authority by design by Kevin Kissi. Zof Research, November 2026. Original PDF cover.

Key Takeaways

1Authority is permission to cause a specific effect, within defined limits.
2Prompts guide behavior. Controls constrain effects. Logs record what happened.
3A handoff can narrow authority. It cannot invent more.
4Every route must meet the same final check.
5Revocation is not undo. It limits further action; it does not retract a report already delivered.
6Expand only where useful work succeeds and prohibited effects are demonstrably blocked.

Executive Summary

An agent reconciles a case correctly. Its delivery worker can file the report internally or email an external processor. The owner authorized only internal filing.

Accuracy answers whether the report is right. Authority answers whether this recipient may receive it. The technical connection is real. Permission to use it must be explicit.

The workflow, architecture and tests are illustrative design proposals. They do not establish measured effectiveness or certification. Implementation depends on protected controls, correct policies and downstream behavior.

Watch the companion film: The Real AI Agent Problem Is Authority.

Checking access...

Next step

Ready to See Zof in Action?

Schedule a personalized demo to see how Zof continuously verifies your critical systems and records auditable evidence for every run.

01Zof Console

One surface for posture, operations, and what needs attention next.

The authenticated home that engineering, QA, and SRE teams open every day: quality posture, in-flight runs, coverage by module, and what needs attention next.

OPERATIONAL KPIs

  • Runs
  • Coverage
  • Risk

Live across every environment you ship to.

WORK SPINE

  • Specs
  • Tests
  • Schedules

From specification to scheduled regression.

GUARDRAILS

  • RBAC
  • SSO
  • audit

Every action attributable to a named human.

LIVE/console
Zof home command center showing 12 runs at 94% pass, 3 open critical issues, 84% coverage, four module traceability bars, the specification pipeline, upcoming schedules, and recommended next actions with an active-runs sidebar.
Example console home · Checkout Service · Staging.