The Closed-World Bargain: Why Bounded Authorization Does Not Establish Authorization Infrastructure

A bounded authorization gate can provide genuine pre-execution control within a defined workflow. It does so, however, by holding six conditions sufficiently fixed: action vocabulary, meaning, policy, authority, state, and execution topology. This article names that trade the closed-world bargain and examines what changes when an authorization system must operate beyond those fixed assumptions. The article distinguishes integrity verification from an independently reconstructable authorization verdict, treats provenance as an input-integrity requirement underlying authorization, and applies the Authorization Artifact Test to the resulting evidence. It introduces the Composition Test as a falsifiable method for evaluating whether an architecture carries a common authorization and evidence discipline across changing assurance objects, with independent reconstruction and fail-closed behavior demonstrated directly. The analysis does not deny that a bounded gate can authorize correctly. It addresses the narrower architectural question of what separates valid pre-execution authorization within one closed world from reusable authorization infrastructure. The test applies to every architecture in the category, including that of FERZ, Inc., which has committed its own demonstration program to the test and has not yet passed it.

Hali tarjima qilinmagan