What happened
Nothing in the session changed. The authority behind it did.
2025-09-01The agency's chief information security officer signed Authorization AUTH-TRE-2026-0011, version 1.1, and activated it. Their identity was confirmed at signing and recorded as an immutable principal reference, not a username.
ScopeThree agents, each bound to read-only work: alert triage, pipeline status, and governed report extraction. Directory synchronization and configuration changes were prohibited by name.
2025-10-12 and 2025-10-18The directory disabled the official's account, then deleted it. The authorization said nothing about either event, because authorizations never do.
2025-10-19The triage agent produced its next receipt at 15:22 UTC. It was still running under an authorization whose approver no longer existed.
2025-10-20The reconciliation cycle recorded it: the authorizer is deleted, no successor has attested, and the authorization stands unattested until someone with current standing re-affirms or revokes it.
Every tool in the room would have shown three healthy agents doing permitted work. None of them asks who allowed it, or whether that person is still here.
| Authorization | AUTH-TRE-2026-0011 v1.1 · effective 2025-09-01 · review 2025-12-01 · expires 2026-02-28 |
|---|---|
| Approver | J. Ellery, Chief Information Security Officer (synthetic) · principal reference PRN-TRE-000012, correlated on an immutable directory attribute |
| Actors | tre-triage-copilot · tre-pipeline-bot · tre-report-extractor, one binding each |
| Disabled | 2025-10-12T21:14:07Z · synthetic://trescott-directory/prn-000012/usn-88412031 |
| Deleted | 2025-10-18T13:02:44Z · synthetic://trescott-directory/prn-000012/usn-88439977 |
| Receipt after deletion | RCPT-TRE-2026-10-19-0007 · 2025-10-19T15:22:10Z · triage_alert on the read-only alert queue · structured log, signature absent |
| Reconciliation | cycle RC-TRE-AGENTS-2026-10-20 · bundle BNDL-TRE-2026-0011-0043 · examiner view · coverage declared incomplete |
Authorizer lineage
Five events, one record.
The lineage ties the authorization to the approver's directory identity and records what the directory did to it. The last step is the engine's state for the authorization today.
What the record says
Five rows, each a check against a record, none a judgment call.
- Authorizer: directory account deleted
- The approver's principal reference now resolves to a deleted object. The grant was real; its grantor is gone.
- Attestation currency: stale
- No one with current standing has re-affirmed or revoked the authorization since the deletion.
- Actor fingerprint: not declared
- The receipt carries an observed fingerprint, and the authorization declared none to compare it against.
- Delegation: inferred
- One delegation chain is signed; the other is reconstructed from plain directory evidence and says so.
- Outcome: not evaluated
- With no declared comparison, the engine builds none. No evidence is not evidence of conformance.
Agent operations / departed approver
Internal operator view, as rendered for the synthetic corpus. The examiner projection withholds these determinations and says so. Names, identifiers, and evidence are fictional.
Synthetic throughout. The State of Trescott Department of Transportation is fictional, and so are the official, the agents and every identifier above. The corpus is generated offline and committed with the product; the record shown is the internal operator view.