---
title: "Separate eligibility review from authority issuance."
description: "What local evidence verifies, what a real authority path still requires, and which bypasses must stay closed."
updated: "30 August 2026"
availability: "LOCAL SIMULATION · TEST_ONLY"
candidate_route: "/docs/raiffa/boundaries/access-security"
---

# Separate eligibility review from authority issuance.

What local evidence verifies, what a real authority path still requires, and which bypasses must stay closed.

**LOCAL SIMULATION · TEST_ONLY:** Local validation surfaces and fixed fixtures only · no real login, organizational authority, operational API, external execution, or authority issuance

## Currently verified scope

- Local opaque-reference and exact-binding validation
- Missing conditions, mismatch, expiry, revocation, and replay failures
- Append-only SQLite ledger and rebuildable projection
- Credentialless Authority Console display fixture
- Fail-closed policy gap in Sandbox authorization

## Still required for a real authority path

- Organization-owned Policy/Identity publisher
- Verified IdP login and durable session
- Operational actor, role, delegation, and scope mapping
- Independently audited authority ledger and revocation propagation
- Permitted execution adapter and outcome evidence
- Operational key custody, incident response, and SLA

## Bypasses that must remain closed

- Treating a UI button as authority
- Trusting caller pass or ready flags
- Reusing an expired or revoked gate
- Expanding actor or scope through wildcards
- Executing from a PÓLYA DecisionCaseRef alone
- Converting a TEST_ONLY fixture into a production credential

> **Default state:** If the operating authority chain cannot be validated end to end, do not create an action.

---

Published route: /docs/raiffa/boundaries/access-security