Blog
Authority layer essays
Category formation writing — physics, not whitepapers.
Founder Fireside · 002
Everything worked. That was the problem.
Bank agents, OpenAI’s monitoring incidents, and why “hire your first digital employee” needs a permission model the worker cannot rewrite.
Founder Fireside · 001
The company that runs itself
A solo founder’s first experiment in delegated authority: one email, explicit permission, and why authority memory matters.
The Sun Has Declined the Meeting
On satellites, autonomous systems, and who gets to authorize the next move.
Enterprise authority is a topology, not a checklist
The danger is not one bad agent — it is the hidden shape of delegated power. Humbleaf maps authority surfaces and uses Authority Sensors to turn unknown risk into replayable evidence.
What is an authority layer? (And why IAM isn't one)
IAM grants access. An authority layer authorizes each consequential action before execution — with replayable evidence after.
ALLOW, DENY, and APPROVAL_REQUIRED — the three outcomes of every consequential action
High-risk automation needs three control routes, not binary pass/fail. Each route must leave replayable evidence.
Merchant refund guards: stopping anomalous refunds before money leaves
Refund automation with standing keys is a fraud vector. Pre-execution authorization holds anomalous refunds until a named approver authorizes this exact amount.