Why an institution, rule or decision should be recognised as entitled to govern.
Digital constitutionalism changes who can govern platform conduct, but the legitimacy of expanded protective powers depends on enforceable limits, reviewable moderation decisions, and remedies for both unlawful content and wrongful suppression.
Formal rules do not govern by themselves: administrative outcomes are produced through the interaction of structural relations, cultural expectations, and reflexive agency over time, so governance analysis must identify the mechanisms that reproduce or transform those arrangements rather than infer effectiveness from institutional design alone.
The legitimate boundary of AI public-health surveillance is not the point at which prediction becomes technically possible, but the point at which institutions can no longer justify, constrain, contest, and retire the resulting power over people.
Ethical discourse can weaken governance when institutions use it to project responsibility outward, secure legitimacy, and manage public acceptance without surrendering discretion or creating enforceable constraints.
Verifiable agent infrastructure can make identity, delegation, execution, and evidence machine-checkable without settling who is entitled to govern, whose preferences should count, or how affected parties can contest automated authority.
GPAS measures the administrative preconditions for algorithmic sovereignty more convincingly than it measures legitimate sovereignty itself, because informational coherence and state capacity do not establish contestability, institutional independence, or justified public authority.
The paper is strong on making control executable, but incomplete as governance: moving authority out of the agent does not solve the problem unless the control plane's own power to define, enforce, revoke, and contest policy is legitimate and constrained.
Once a matching system permits bounded priority violations for efficiency, the threshold becomes an executable governance rule that determines whose institutional claim may be displaced and therefore requires legitimate authority, transparency and contestability.
An assistant can turn a user's subjective account into an apparently independent judgment without acquiring independent evidence, making epistemic separation a governance requirement rather than merely an accuracy objective.
Measuring which populations an LLM resembles is evidence about representational distribution, not a mandate for whose values the system should implement; moving from country averages to demographic granularity makes the legitimacy of the alignment target more, not less, important.
A continuity model can prevent downstream authority manufacture, but a governable system still needs explicit rules for how legitimate authority is created, revoked, disputed, and restarted.
Provenance-bounded execution can prevent downstream privilege expansion, but continuity of authority does not establish the legitimacy of the authority at the origin.
Split-knowledge identity can make an agent traceable without making its principal visible to business actors, but traceability becomes legitimate accountability only when tracing, revocation, delegated authority, and redress are independently governable.
Credential interoperability is not a property of shared formats alone: it exists only when verifiers can obtain the constitutional and logistical materials needed to decide what to trust, while retaining responsibility for the assumptions that make acceptance legitimate.
Knowing who or what acted, or proving the causal origin of an action, does not establish that the actor was entitled to exercise the authority required for that action.
Reviews of agent IDs, provenance-bounded execution, credential verification and national trust infrastructure converge on a recurring category boundary between attribution and legitimate mandate.
Cryptographic validity, issuer identity and provenance can support a relying institution's decision, but they do not determine whether reliance is authorised, appropriate for the purpose or legitimate.
Credential and trust-infrastructure reviews converge on the need to make verifier or relying-party policy explicit, including issuer authority, purpose, current status and responsibility for acceptance.
External policy engines, registries, platform access controls and other control-plane mechanisms can make governance more executable while simultaneously concentrating authority in the institutions that operate those mechanisms.
Recent reviews repeatedly show that moving constraints outside an agent or application improves enforceability but does not establish the legitimacy, accountability or contestability of the new decision point.
Provenance, representational similarity, perceived acceptance, administrative coherence and other measurable properties can establish facts about a system without establishing who is entitled to decide, whose values should prevail or whether an action is legitimate.
Reviews now reach the same boundary from measurement, public-administration and state-capacity work: evidence about acceptance, coherence or representation can support analysis without supplying justified authority, contestability or institutional constraint.
Registries, trust lists and resolver services can make issuer or agent authority legible, but the archive repeatedly leaves open how admission, suspension, update, appeal, operator accountability and conflicting authority sources should be governed.
A registry can improve provenance while simultaneously becoming a concentrated gatekeeper whose own authority and error-correction mechanisms determine who can participate.
Provenance-bounded execution can prevent downstream authority expansion, but it does not establish who may create a new authority origin, under what evidence, or how competing, renewed or disputed origins are reconciled.
Continuity can prove that execution stayed within an origin while leaving the institutional legitimacy of that origin outside the model.
More granular measurement can reveal distributional differences but does not supply a legitimate rule for selecting populations, demographic categories, aggregation weights or intervention thresholds.
Treating an empirical alignment target as self-justifying embeds political choices inside measurement and tuning infrastructure.
Both reviews examine agent infrastructure through governance requirements around bounded authority, accountability and trust rather than agent capability alone.
Both distinguish agent identification and attribution from current, action-specific authority, while exposing registry, revocation and accountability dependencies.
Both place the receiving service or verifier at the point where identity and provenance evidence must be converted into an institutional acceptance or authorization decision.
The continuity paper generalizes the earlier provenance-bounded execution model from origin-bounded delegation into sequential, forked, joined and policy-mediated authority state transitions.
Both require delegated authority to remain bounded during execution, while the loyalty review adds duties, conflicts, revocation and redress that the continuity model leaves outside its invariant.
Both separate cryptographic verification from the relying institution's governance decision and require authority, purpose, current status and institutional responsibility to make acceptance legitimate.
Both distinguish provenance continuity from legitimate authority. One bounds execution to an origin, while the other requires an explicit institutional trust decision over issuer and relying-party authority.
Both center verifier-side power and show that credential exchange is governed by what relying parties request, what evidence they accept and which institutional assumptions shape validation.