Delegated Workload Identity

Member consent and registered workload identity intersect at every unattended effect

Delegated Workload Identity Member consent and registered workload identity intersect at every unattended effect 01 / Member 02 / Kaizen Task Control 03 / Kamiwaza Core Authority 04 / Kaizen Task Executor 05 / Protected Effect EX / Fail-Closed Path Consent Reserve + claim Authorize + execute Activate Task · review exact revision · Member › Consent Activate Task review exact revision Create Intent · task-control role · Kaizen Task Control › Consent Create Intent task-control role Bind Grant · subject + workload · Kamiwaza Core Authority › Reserve + claim · revocable Bind Grant subject + workload revocable Reserve Run · immutable occurrence · Kamiwaza Core Authority › Reserve + claim Reserve Run immutable occurrence Claim + Fence · task-executor role · Kaizen Task Executor › Authorize + execute · short lived Claim + Fence task-executor role short lived Consume Effect · one exact action · Protected Effect › Authorize + execute Consume Effect one exact action Deny · expired or revoked · Fail-Closed Path › Authorize + execute Deny expired or revoked Core consent page opaque run reference Legend Agent logic Policy Tool action Context / trace External system

Two Identities

  • • Member is the durable subject
  • • Registered workload is the acting code
  • • Effective authority is their intersection

Nothing Reusable At Rest

  • • Queue data holds opaque references only
  • • Assertions, proof keys, and capabilities stay short-lived or in memory
  • • No browser bearer token enters a Task row

Re-Prove Every Effect

  • • Current member access and grant state are checked
  • • Workload revision, claim fence, policy, quota, and approval are checked
  • • Ambiguous external effects never replay