Registries, attestations, assurance and the infrastructure through which trust claims become actionable.
A verified permission record becomes dependable execution authority only when current validation, grant consumption and the protected effect share an enforceable boundary whose policy owners remain accountable.
AI oversight becomes governable only when monitoring, verification, authorization, and commit authority remain distinct, independently evidenced, and unable to silently widen one another's powers.
This is a strong trust-architecture proposal because it refuses to collapse verification into reliance, but it remains a governance blueprint rather than deployable national infrastructure until legal authority, registry operation, liability, and cross-sector redress are resolved.
Provenance-bounded execution can prevent downstream privilege expansion, but continuity of authority does not establish the legitimacy of the authority at the origin.
A continuity model can prevent downstream authority manufacture, but a governable system still needs explicit rules for how legitimate authority is created, revoked, disputed, and restarted.
Credential interoperability is not a property of shared formats alone: it exists only when verifiers can obtain the constitutional and logistical materials needed to decide what to trust, while retaining responsibility for the assumptions that make acceptance legitimate.
Syntelos reframes trust as a runtime evaluation of attestations against policy, but leaves unresolved the governance of that policy layer, where real authority over system behavior resides.
For agentic systems, governance must shift from persistent identity-based permission to action-bound, exhaustible authority that produces verifiable provenance at the moment an effect occurs.
Collection membership is a reading route. Cross-paper propositions remain curated editorial claims in the Knowledge layer, with explicit evidence and traceability.