Blog
Authority layer essays
Category formation writing — physics, not whitepapers.
Essays
Enterprise authority is a topology, not a checklist
The danger is not one bad agent — it is the hidden shape of delegated power. Humbleaf maps authority surfaces and uses Authority Sensors to turn unknown risk into replayable evidence.
What is an authority layer? (And why IAM isn't one)
IAM grants access. An authority layer authorizes each consequential action before execution — with replayable evidence after.
ALLOW, DENY, and APPROVAL_REQUIRED — the three outcomes of every consequential action
High-risk automation needs three control routes, not binary pass/fail. Each route must leave replayable evidence.
Merchant refund guards: stopping anomalous refunds before money leaves
Refund automation with standing keys is a fraud vector. Pre-execution authorization holds anomalous refunds until a named approver authorizes this exact amount.