KYE Governed Agents

The bounded agents we govern to our own standard.

KYE Protocol runs no general-purpose agents, and competes with no agent framework. It does operate a bounded few — single-purpose, governance-first agents shipped as products. When a Governed Agent acts, KYE Protocol proves who authorised it: each act is admitted, decided, sealed as an Evidence Pack, metered, and stoppable by a kill-switch. The product is the governance, not raw agent capability — which cuts dispute and exam-prep evidence work from days to minutes.

Any agent can act. A KYE-governed agent can be trusted by customers, counterparties, auditors and regulators.

1 · What a Governed Agent is

A bounded agent, governed like any other principal.

Each Governed Agent is a first-class principal — identical in governance weight to any human or system principal.

If your team buys an agent, the hard question a regulator asks is not "is it clever?" — it is "under whose authority did it act, and can you replay the basis?" A KYE Governed Agent answers that by construction. It carries a canonical identity, an authority binding, directory discoverability, per-act metering, and a kill-switch, and it emits the full evidence chain on every act. KYE Protocol governs whether the bounded act may proceed and proves the basis; it never claims to judge the substance.

  • First-class principal — a canonical principal_class: "agent" identity, governed under constitution §0.30, not a side-channel integration.
  • Authority-bound — every act admitted and decided at the boundary via Purpose Permission, bound under constitution §52.
  • Evidence-sealed — each act packs an Evidence Pack and seals a Replay-Proof, verifiable from public keys alone.
  • Metered & kill-switched — each billed act emits a meter event under constitution §23; a single control halts the run.

The bounded family itself — one card per agent KYE Protocol operates — is listed in the family section below, derived from the canonical product registry so it can never drift.

2 · The family

43 bounded agents, one governance standard.

Each agent does exactly one job under KYE Protocol authority — and proves it. You keep your own systems; KYE Protocol governs the act around them. Each links to its own governed-agent page.

  • KYE Chargeback Evidence Agent — assembles the representment Evidence Pack for a card dispute (order, delivery, AVS/CVV, comms) at the action boundary, bound to Reg E (12 CFR 1005.11) and the Visa Compelling Evidence 3.0 evidence set. It runs the existing KYE Chargeback Evidence flow — it does not duplicate it. KYE Protocol proves the basis; it does not decide whether to fight the dispute.
  • KYE Companies House Lookup Agent — performs a governed UK company verification against the Companies House register (company number, status, registered office, officers, PSC). Every lookup pins its cited source and seals a Replay-Proof. KYE Protocol proves the cited source; it does not score or replace the analyst.
  • KYE KYC-Refresh Agent — drives periodic re-verification of a customer record on a schedule, sealing each refresh as an Evidence Pack with the contestable disposition recorded. KYE Protocol proves the act may proceed; it does not make the KYC risk decision or run sanctions screening.
  • KYE Clinical Action Authority Agent — governs the consequential clinical / healthcare-AI decision at the action boundary. The governed acts are releasing a clinical-decision-support output to a clinician, flagging or triaging a patient case, surfacing a treatment or medication recommendation, escalating to a human clinician, and sharing a clinical analysis externally. It records the contestable disposition. It holds the patient-facing clinical-answer release and the external clinical-analysis share advisory until a named responsible clinician records two-person sign-off. The bound frameworks are the EU AI Act high-risk regime, MHRA MDR, MHRA SaMD, and UK GDPR Article 9 special-category health data. It runs the existing KYE Clinical AI Governance flow — it does not duplicate it. KYE Protocol proves the basis; it does not diagnose, decide clinical truth, practise medicine, act as a medical device, or replace the clinician.
  • KYE Clinical Trial Conduct Authority Agent — governs the consequential GCP clinical-trial-conduct decision at the action boundary. The governed acts are enrolling or randomizing a subject and unblinding a treatment assignment. They also include recording a protocol deviation and locking or releasing trial data. The last act is submitting a trial-status or safety report to an IRB or ethics committee. It records the contestable disposition. It holds the irreversible unblinding and the IRB submission advisory until a named investigator records two-person sign-off, bound to the ICH Good Clinical Practice guidelines. It runs the existing KYE ICH Authority Pack decision stage — it does not duplicate it. KYE Protocol proves the basis. It does not design the protocol. It does not decide clinical or scientific outcomes. It does not replace the investigator, the sponsor, or the ethics committee.
  • KYE Credit Card Action Authority Agent — governs the consequential unsecured revolving-credit decision at the action boundary. The governed acts are approving or declining a card application and setting or changing a credit limit. They also include repricing APR and issuing an adverse-action notice. The last act is suspending or closing an account for credit reasons. It records the contestable disposition. Each adverse action carries a Decision Map of the specific reasons. It holds the decline notice and the APR reprice advisory until a named lending-governance owner records two-person sign-off. It also holds the account closure advisory until that sign-off. The bound frameworks are the CARD Act and Regulation Z, the FCRA, ECOA Regulation B, and the FCA Consumer Duty and CONC. It runs the existing KYE Agentic Lending Rule Pack — it does not duplicate it. It governs unsecured revolving credit only. It does not authorise card payments. The Payment Authorization Authority Agent owns payment authorization. KYE Protocol proves the basis. It does not score credit. It does not decide creditworthiness. It does not replace the credit-risk team.
  • KYE Drug Discovery Research Authority Agent — governs the consequential pre-clinical and nonclinical drug-discovery research decision at the action boundary. The governed acts are advance a candidate compound to the next research stage, release or publish a pre-clinical research claim, use a research or assay dataset for a decision, and register a nonclinical safety finding. It records the contestable disposition. It holds a released research claim advisory until a named study director records two-person sign-off. It also holds a registered nonclinical safety finding advisory until that sign-off. It binds to OECD Good Laboratory Practice and FDA 21 CFR Part 58, the nonclinical study-data-integrity standard, plus the KYE Governed Research Rail research-integrity contract — no claim without a cited, pinned source. It runs the existing nonclinical framework verdict — it does not duplicate it. KYE Protocol proves the basis. It does not do the science. It does not decide whether the compound works or is safe. It does not replace the research scientist or the study director.
  • KYE Insurance Action Authority Agent — governs the consequential insurance underwriting and claims decision at the action boundary. The governed acts are accepting or declining or rating a risk at underwriting and approving or denying or adjusting a claim. They also include issuing an adverse underwriting decision and triggering a fraud-investigation hold. The last act is releasing a coverage determination to the policyholder. It records the contestable disposition. It holds the adverse underwriting decision advisory until a named underwriter records two-person sign-off. It also holds the policyholder coverage determination advisory until that sign-off. The bound frameworks are the NAIC Model Bulletin on AI and the NYDFS Insurance Circular Letter on AI. They also include the EU AI Act insurance regime and FCA Consumer Duty. It runs the existing KYE Insurance Underwriting and Claims Rule Pack — it does not duplicate it. KYE Protocol proves the basis. It does not price risk. It does not decide claim validity. It does not build actuarial models. It does not replace the underwriter or adjuster.
  • KYE Legal Action Authority Agent — governs the consequential legal and contract decision at the action boundary. The governed acts are approving or executing a contract clause and releasing a legal position to a counterparty. They also include accepting a counterparty obligation and triggering a notice or termination right. The last act is signing or counter-signing. It records the contestable disposition. It holds the contract execution and the external legal-position release advisory until a named supervising lawyer records two-person sign-off. The bound frameworks are the SRA Code of Conduct, UK GDPR Article 28, and UCTA 1977 reasonableness. It runs the existing KYE UK Contract Workflow Rule Pack — it does not duplicate it. It stays strictly contract-action. KYE Protocol proves the basis. It does not give legal advice. It does not practise law. It does not decide the law. It does not replace counsel.
  • KYE Mortgage Lending Action Authority Agent — governs the consequential secured home-loan and mortgage origination decision at the action boundary. The governed acts are approve or decline a mortgage application, set the rate or terms, and issue an adverse-action notice. They also include triggering an affordability or forbearance action and releasing a credit decision to the applicant. It records the contestable disposition. Every adverse action carries a Decision Map bound to a contestability route. It holds the decline notice advisory until a named underwriter records two-person sign-off. It also holds the rate-or-terms decision advisory until that sign-off. The bound frameworks are ECOA Regulation B, FCRA, fair-lending, and FCA Consumer Duty and MCOB. It runs the existing KYE Agentic Lending Rule Pack — it does not duplicate it. A sibling agent owns unsecured credit-card decisions on the same pack. KYE Protocol proves the basis. It does not score credit. It does not price risk. It does not decide who is creditworthy. It does not replace the underwriter.
  • KYE Payment Authorization Authority Agent — governs the consequential payment-authorization decision (authorize / hold / step-up for SCA / decline a payment or payment-initiation) at the action boundary, recording the contestable disposition, bound to PSD2 / PSD3 strong customer authentication (RTS arts. 4-9) and the unauthorised-transaction liability shift (arts. 72-74, 97) plus FCA Consumer Duty. It runs the existing EU Payments governance pack — it does not duplicate it. KYE Protocol proves the basis; it does not execute payments, move funds, act as a payment processor or PSP, or run fraud-scoring models.
  • KYE Pharmacovigilance Action Authority Agent — governs the consequential post-market drug-safety decision at the action boundary. The governed acts are filing or releasing an ICSR or adverse-event report, escalating or downgrading a safety signal, submitting a PSUR or PBRER, and triggering a recall notification. It records the contestable disposition. It holds the regulatory submission and the recall notification advisory until a named qualified person for pharmacovigilance records two-person sign-off. The bound frameworks are EMA GVP, MHRA post-market surveillance, and FDA 21 CFR Part 11. It runs the existing KYE Biopharma Pharmacovigilance Rule Pack — it does not duplicate it. It stays strictly post-market. KYE Protocol proves the basis. It does not assess medical causality. It does not decide whether a drug is truly unsafe. It does not replace the QPPV.
  • KYE PII Action Authority Agent — governs the consequential personal-data decision at the action boundary. The governed acts are use, disclose, cross-border transfer, retain-beyond-purpose, profile-with, and delete. It records the contestable disposition and holds external disclosure and cross-border transfer advisory until a named data-protection owner records two-person sign-off, bound to GDPR, UK GDPR, and CCPA. It runs the existing KYE Data Governance Pack data_use decision stage — it does not duplicate it. It is the runtime counterpart to a data catalog like Collibra: the catalog says what the data is; this agent proves whether a given use of it was authorised at the moment it happened. KYE Protocol proves the basis. It does not classify or scan data. It is a governance layer rather than a DLP or discovery tool, and it does not replace the DPO or the data-protection program.
  • KYE RAG Output Authority Agent — governs the consequential decision to use a retrieval-augmented-generation output at the action boundary. The governed acts are release a RAG answer to a user or system, act on a retrieved-and-synthesised claim, and feed an answer into another agent. It records the contestable disposition and holds the release of an un-pinned answer advisory until a named output owner records two-person sign-off, bound to the EU AI Act transparency regime, the NIST AI RMF, and ISO/IEC 42001. It runs the existing source-pin and cited-extract decision — it does not duplicate it. The retrieval engine produces the cited extract; this agent proves whether every claim is pinned to a cited source before the output is used. KYE Protocol proves the basis. It does not build the vector index. It does not run retrieval or embeddings. It does not judge the factual truth of sources. It is a governance layer rather than a RAG engine.
  • KYE Sanctions & AML Authority Agent — governs the consequential AML decision (block / release / escalate / file-SAR) at the action boundary. It records the contestable disposition. It holds the SAR/STR filing advisory until a named MLRO records two-person sign-off. The bound frameworks are FATF 40, the EU 6AMLD, US BSA / FinCEN, and the Wolfsberg Principles. It runs the existing KYE AML & Financial-Crimes Governance flow — it does not duplicate it. KYE Protocol proves the basis; it does not run sanctions or PEP screening, run transaction-monitoring models, or decide whether a transaction is truly money-laundering.
  • KYE Threat Response Authority Agent — governs the consequential SOC / incident-response decision at the action boundary. The governed acts are blocking an IP or domain, revoking an API key or token, isolating a workload, disabling an account, escalating an incident, notifying a regulator or customer, and triggering a fraud or payment control. It records the contestable disposition with chain-of-custody. It holds the irreversible containment finality and the regulator-notification-clock release advisory until a named incident commander or CISO records two-person sign-off. The bound frameworks are DORA ICT-incident, NIS2, NIST CSF 2.0 Respond/Recover, the SEC cyber-disclosure rule, and ISO 27035. It runs the existing KYE Cyber Resilience & Incident Governance flow — it does not duplicate it. KYE Protocol proves the basis; it does not detect threats, run the SIEM or EDR, perform forensics, remediate, or replace the SOC analyst. Threat intel creates urgency; KYE Protocol prevents urgency from becoming unauthorised action.
  • KYE Governed Grants Agent — governs the consequential grants-lifecycle decision at the action boundary. The governed acts are confirming eligibility, submitting, scoring or reviewing, awarding, disbursing, accepting a grant report, and triggering an audit or clawback. It records the contestable disposition. It holds the irreversible AWARD finality, each DISBURSEMENT, and the CLAWBACK trigger advisory until a named grants or programme officer records two-person sign-off. The bound framework is US 2 CFR 200 (Uniform Guidance) — allowability of costs §200.403, internal controls §200.303, subrecipient monitoring §200.332, audit §200.501. It governs over the existing KYE Purpose Permission, Resilience Loop, and Delegated Auditability primitives — it mints no parallel grants pack. KYE Protocol proves the basis; it does not write grant applications, run a grants-management platform, or move or disburse money.
  • KYE Settlement Finality Authority Agent — governs the consequential settlement-lifecycle decision at the action boundary. The governed acts are trade-capture, netting, a collateral or margin call, raising a settlement-instruction, and moving the instruction through proposed → executed → accepted. For each it answers whether the action is authorised, in-scope, approved, evidenced — and whether the transfer is FINAL (irrevocable) or still revocable. It records the contestable disposition and seals a Settlement Finality Proof. It holds the irreversible ACCEPTED finality and each settlement-instruction RELEASE advisory until a named settlement or operations officer records two-person sign-off. The bound frameworks are MiCA (Reg (EU) 2023/1114) custody and CASP conduct and the GENIUS Act (Pub. L. 119-27) redemption and reserve disclosure — reused, never re-mapped. ISDA CDM (Common Domain Model) is a peer machine-readable data model it governs actions expressed in. It governs over the existing KYE Purpose Permission, Resilience Loop (which already owns the proposed/executed/accepted/final state-machine), and Delegated Auditability primitives — it forks no finality model and mints no settlement engine. KYE Protocol proves the basis and the finality; it does not clear, settle, hold custody of, or move any asset.
  • KYE Account-Opening CDD Authority Agent — governs the consequential origination-time (day-zero) account-opening customer-due-diligence decision (open / decline / refer-for-EDD / conditionally-open an account at onboarding) at the action boundary, recording the contestable disposition. It holds the refer-for-EDD escalation advisory until a named MLRO or compliance officer records two-person sign-off. The bound frameworks are the FATF 40 Recommendations (R.10 customer due diligence) and the EU 6AMLD. This is the day-zero onboarding decision — distinct from the periodic KYE KYC-Refresh Agent, which governs ongoing re-verification. It runs the existing KYE AML & Financial-Crimes Governance flow — it does not duplicate it. KYE Protocol proves the basis; it does not run the screening or identity-verification engine, decide CDD risk truth, or replace the onboarding program.
  • KYE Billing & Dunning Authority Agent — governs the consequential outbound billing / collections decision at the action boundary. The governed acts are issuing an invoice or fee, applying a late fee, escalating a dunning stage, suspending a service, sending an account to collections, and writing off a balance. It records the contestable disposition. The bound frameworks are FCA CONC (the Consumer Credit Sourcebook — responsible lending in CONC 5 and arrears & forbearance in CONC 7) and the FCA Consumer Duty (PRIN 2A — fair treatment, foreseeable harm, and consumer understanding). It runs the existing KYE Financial Services governance — it does not duplicate it. This is outbound accounts-receivable and collections, which is the opposite flow to the inbound chargeback-evidence agent and is distinct from the accounting-governance ledger pack. KYE Protocol proves the basis; it does not run a billing engine, run a dunning-automation platform, issue invoices, take payments, or replace the collections or credit-control team.
  • KYE Fraud Decision Authority Agent — governs the consequential real-time fraud-control decision (block / hold / release / step-up a transaction or account on a fraud signal) at the action boundary — under whose authority and within what scope the action may reach finality, and is the basis recorded and replayable — recording the contestable disposition, bound to FCA Consumer Duty and PSD2 strong-customer-authentication / unauthorised-transaction disputes. It runs the existing financial-services payments governance pack — it does not duplicate it. KYE Protocol proves the basis; it does not run fraud-scoring models / ML, execute payments, move funds, or act as a payment processor or PSP. It fills the fraud carve-out of the Payment Authorization Authority Agent; the regulatory financial-crime / SAR decision stays with the sanctions & AML authority agent.
  • KYE Genetic Sequencing Authority Agent — governs the consequential genomic action at the action boundary. The governed acts are approve a DNA or RNA synthesis order, disposition a sequence-of-concern or pathogen screening result by blocking, flagging, or releasing it, authorise a genomic-data sharing or release against recorded consent and purpose, and release a clinical genomic test result. It records the contestable disposition. It holds a synthesis-order approval, a genomic-data release, and a clinical genomic test-result release advisory until two-person sign-off. It runs the existing KYE AI Bio-Chem Governance canon and binds to the deep-mapped biosecurity and genomic-data frameworks — nucleic-acid synthesis screening, the Australia Group, the CWC and BWC, US Executive Order 14110, CLIA, ISO 15189, GDPR, and PHIPA Ontario. It runs the existing verdict — it does not duplicate it. KYE Protocol proves the basis. It does not run the screening pipeline. It does not sequence DNA. It does not judge whether a sequence is of concern. It does not interpret the genomic result.
  • KYE Pension Liquidity Authority Agent — governs the consequential pension-liquidity decision (an LDI collateral call / a forced asset sale / member-payment or redemption gating / a buy-in or buy-out trigger) at the action boundary, under named trustee / fiduciary authority and within the scheme's funding and liquidity policy, recording the contestable disposition, bound to the existing pension governance pack (regimes TPR / FCA) and FCA COBS — with TPR scheme-funding and EIOPA IORP II declared honest out-of-scope until a real framework deep-map lands (coverage is never inflated). It runs the existing pension governance pack — it does not duplicate it. KYE Protocol proves the basis; it does not execute trades, move assets, run a liquidity model, or run an LDI or collateral-management program.
  • KYE Treasury Authority Agent — governs the consequential corporate-treasury decision at the action boundary. The governed acts are an intraday-liquidity drawdown, an FX hedge execution, an MMF or excess-cash investment, intercompany funding, and a collateral pledge or recall. For each it answers whether the action is within mandate, within limit, authorised, in-scope, approved, and evidenced. It records the contestable disposition and seals a Treasury Authority Proof. It holds the irreversible FX-hedge execution, the MMF or excess-cash investment, the intercompany funding, and the collateral pledge or recall advisory until a named treasurer or treasury officer records two-person sign-off. This is the firm's own balance-sheet, FIAT corporate and bank treasury (cash, FX, MMF, collateral) — distinct from digital-asset treasury. The bound frameworks are DORA (Digital Operational Resilience Act) operational resilience and PRA SS1/23 model-risk governance — reused, never re-mapped; EBA liquidity standards and BCBS intraday-liquidity (BCBS 248) monitoring are not yet mapped and stay honestly out of scope. It runs the existing KYE Treasury Rule Pack over the KYE Purpose Permission, Resilience Loop, and Delegated Auditability primitives — it mints no parallel treasury pack and no treasury-management engine. KYE Protocol proves the basis; it does not move funds, execute trades, place investments, or run a treasury-management system.
  • KYE Governed Control & Policy Authority Agent — from a customer's read-only authority-risk profile, governs two bounded consequential acts at the action boundary: recommending compliance controls and drafting an enforceable policy. It records the contestable disposition for each act. The differentiator: a policy it authors is emitted to the existing KYE Policy Compiler, which compiles and seals it to a machine-enforceable PDP rule-pack the Decision Engine verifies — KYE writes the rule, enforces it, and proves enforcement. It holds every recommendation and every policy draft advisory until a named owner records two-person sign-off. The bound frameworks are ISO/IEC 42001, the EU AI Act, and the NIST AI RMF. It runs the existing KYE Authority Risk Profiler and Policy Compiler — it does not duplicate them. KYE Protocol proves the basis; it does NOT adopt or approve a control or policy, does not make a solely-automated decision (GDPR Article 22), and does not run a risk engine, a control library, or a parallel drafting engine of its own.
  • KYE Claims Decision Authority Agent — governs the consequential claims-lifecycle decision at the action boundary. The governed acts are the FNOL triage disposition, the reserve-setting act, and the settle or deny or partial decision. They also include the payment release against declared thresholds and the litigation and SIU fraud referral. It records the contestable disposition. It holds the denial, the partial settlement, and any payment release above the declared threshold advisory until a named claims adjuster records two-person sign-off. It absorbs the governance face of the Insurance Claim Orchestrator reference workflow in the KYE Agent Library — the orchestrator stays the adoptable workflow; this agent is the authority over its consequential transitions. The bound frameworks are the NAIC Model Bulletin on AI and the NYDFS Insurance Circular Letter on AI. They also include the EU AI Act insurance regime and FCA Consumer Duty. The NAIC Unfair Claims Settlement Practices Model Act and FCA ICOBS 8 claims handling are on the KYE Protocol framework-mapping roadmap — a stated plan, not a claimed mapping. It runs the existing KYE Insurance Underwriting and Claims Rule Pack — it does not duplicate it. It fills the claims-lifecycle carve-out of the Insurance Action Authority Agent, which keeps the underwriting-side adverse decision and the coverage-determination release. KYE Protocol proves the basis. It does not assess damage. It does not estimate loss. It does not run claims or fraud models. It does not replace the adjuster.
  • KYE Policy Lifecycle Authority Agent — governs the consequential policy-lifecycle act at the action boundary. The governed acts are issuance, endorsement, renewal, cancellation, non-renewal, lapse, and reinstatement. Cancellation and non-renewal are treated as regulated-notice authority. It records the contestable disposition. It holds the cancellation and the non-renewal notice advisory until a named policy-governance owner records two-person sign-off. The bound frameworks are the NAIC Model Bulletin on AI and the NYDFS Insurance Circular Letter on AI. They also include FCA Consumer Duty and the GDPR automated-decision regime for automated cancellation and non-renewal. The US state cancellation and non-renewal notice statutes and FCA ICOBS renewal transparency are on the KYE Protocol framework-mapping roadmap — a stated plan, not a claimed mapping. It runs the existing KYE Insurance Underwriting and Claims Rule Pack — it does not duplicate it. It begins where the Quote & Bind Authority Agent ends: after the governed bind, every contract-changing act on the policy runs through this agent; the Insurance Action Authority Agent keeps the underwriting and claims determinations. KYE Protocol proves the basis. It does not administer policies. It does not issue documents. It does not replace the policy-administration system.
  • KYE Quote & Bind Authority Agent — governs the consequential quote-and-bind decision at the action boundary. The governed acts are the rating-factor override and the discount within declared discount authority. The last act is the quote-to-bind moment itself, treated as an explicit finality gate: cover exists only after the governed bind act reaches finality. It records the contestable disposition. It holds any rating override or discount beyond the declared authority, and the bind act itself, advisory until a named distribution-governance owner records two-person sign-off. The bound frameworks are the Colorado SB21-169 ECDIS regime and the NAIC Model Bulletin on AI. They also include the EU AI Act insurance regime and FCA Consumer Duty fair value. FCA ICOBS and the EU Insurance Distribution Directive are on the KYE Protocol framework-mapping roadmap — a stated plan, not a claimed mapping. It runs the existing KYE Insurance Underwriting and Claims Rule Pack — it does not duplicate it. It fills the distribution carve-out of the Insurance Action Authority Agent and ends where the Underwriting & Risk-Acceptance Authority Agent begins: that agent governs whether the risk may be accepted; this one governs what may be quoted, discounted, and bound. KYE Protocol proves the basis. It does not calculate premiums. It does not rate risks. It does not replace the pricing actuary.
  • KYE Underwriting & Risk-Acceptance Authority Agent — governs the consequential underwriting risk-acceptance decision at the action boundary. The governed acts are accepting or declining or referring a risk within the delegated underwriting-authority limits: line of business, sum insured, territory, and class. The flagship case is MGA and coverholder binding authority — a Lloyd's binder is a delegated-authority instrument, and the agent makes the carrier → coverholder → underwriter delegation chain runtime-enforceable: an act outside the delegated limits is refused before it binds the carrier. It records the contestable disposition. It holds the decline and any act exceeding the delegated authority advisory until a named underwriter records two-person sign-off. The bound frameworks are the NAIC Model Bulletin on AI and the NYDFS Insurance Circular Letter on AI. They also include the EU AI Act insurance regime, FCA Consumer Duty, and UK SM&CR accountability for the authority holder. The Lloyd's delegated-authority minimum standards for coverholders are on the KYE Protocol framework-mapping roadmap — a stated plan, not a claimed mapping. It runs the existing KYE Insurance Underwriting and Claims Rule Pack — it does not duplicate it. It fills the authority-limits carve-out of the Insurance Action Authority Agent, which keeps the single accept-or-decline determination and the adverse-decision record. KYE Protocol proves the basis. It does not price risk. It does not run actuarial or catastrophe models. It does not replace the underwriter.
  • KYE Islamic Embedded Finance Authority Agent — governs the consequential act at the action boundary: releasing a Shariah-compliant embedded-finance offer at a third-party point of sale, and holding an offer whose structure has drifted from the certified template. Allowed acts are bounded to islamic.embedded.offer.release, islamic.embedded.offer.hold, islamic.embedded.disclosure.assemble; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, islamic.embedded.offer.price, merchant.contract.execute. It governs the distribution boundary — the moment a certified structure is offered through a channel the institution does not own. The underlying contract acts stay with the Murabaha, Islamic Mortgage and Islamic Microfinance agents. The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 38 (Online Financial Dealings) · AAOIFI Shariah Standard No. 2 (Debit/Credit and Charge Cards) · AAOIFI Shariah Standard No. 30 (Monetization/Tawarruq) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the consumer-credit conduct regimes of each embedding jurisdiction are mapped separately where KYE™ has mapped them and are never assumed. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Islamic Microfinance Authority Agent — governs the consequential act at the action boundary: releasing a qard hasan or micro-murabaha disbursement, and governing the late-payment treatment so that no penalty accrues to the institution's own income. Allowed acts are bounded to islamic.microfinance.disbursement.release, islamic.microfinance.late_treatment.release, islamic.microfinance.zakah.allocation.prepare; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, islamic.microfinance.penalty.income.recognise, islamic.microfinance.rate.set. It governs the small-ticket, financial-inclusion lane. Full commercial murabaha sequence control stays with the KYE Murabaha Authority Agent™. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 19 (Loan/Qard) · AAOIFI Shariah Standard No. 8 (Murabaha) · AAOIFI Shariah Standard No. 3 (Default in Payment by a Debtor) · AAOIFI Shariah Standard No. 35 (Zakah). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the national microfinance-institution licensing regimes are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Islamic Mortgage Authority Agent — governs the consequential act at the action boundary: releasing the home-finance lifecycle acts under a diminishing-musharaka or ijarah muntahia bittamleek structure: origination, each ownership-transfer tranche, and the final title transfer. Allowed acts are bounded to islamic.mortgage.origination.release, islamic.mortgage.tranche.release, islamic.mortgage.title_transfer.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, islamic.mortgage.rental.set, islamic.mortgage.repossession.execute. It governs the Shariah authority over the home-finance acts. The KYE Mortgage Lending Action Authority Agent™ keeps the conventional credit-decision lane — this agent does not duplicate it. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 9 (Ijarah and Ijarah Muntahia Bittamleek) · AAOIFI Shariah Standard No. 12 (Sharikah/Musharaka and Modern Corporations) · AAOIFI Shariah Standard No. 8 (Murabaha) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the national mortgage-conduct regimes (e.g. FCA MCOB) are mapped separately only where KYE™ has mapped them, and are never assumed for this agent. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Islamic Trade Finance Authority Agent — governs the consequential act at the action boundary: releasing the Shariah-governed trade-finance acts: documentary-credit issuance, document-presentation acceptance, and the guarantee or kafalah release. Allowed acts are bounded to islamic.tradefinance.credit.issue.release, islamic.tradefinance.presentation.accept, islamic.tradefinance.guarantee.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, islamic.tradefinance.fee.set, islamic.tradefinance.sanctions.determine. It governs the Shariah authority over trade-finance instruments. Sanctions and AML screening stay with the KYE Sanctions & AML Authority Agent™ — this agent never determines a sanctions outcome. The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, iifm-documentation-standards, and the board certification must cite AAOIFI Shariah Standard No. 14 (Documentary Credit) · AAOIFI Shariah Standard No. 5 (Guarantees) · AAOIFI Shariah Standard No. 8 (Murabaha) · AAOIFI Shariah Standard No. 18 (Possession/Qabd). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: ICC UCP 600 / URDG 758 are trade-practice rules, not KYE-mapped regulatory frameworks, and are never claimed as mapped. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Istisna Authority Agent — governs the consequential act at the action boundary: releasing the istisna' construction-finance acts: each progress payment against certified completion, the delivery-and-acceptance act, and the parallel-istisna' independence check. Allowed acts are bounded to istisna.progress_payment.release, istisna.delivery_acceptance.release, istisna.parallel.independence.verify; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, istisna.completion.certify, istisna.specification.amend. It governs the release authority over progress and delivery. It does NOT certify physical completion — that is the engineer's or surveyor's act, and the agent consumes that certificate as an input it never issues. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 11 (Istisna' and Parallel Istisna') · AAOIFI Shariah Standard No. 18 (Possession/Qabd) · AAOIFI Shariah Standard No. 31 (Controls on Gharar in Financial Transactions) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: construction-contract standards (e.g. FIDIC) are not regulatory frameworks and are never claimed as mapped. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Murabaha Authority Agent — governs the consequential act at the action boundary: releasing each step of the murabaha sequence in order — asset acquisition, the institution's possession, cost-and-markup disclosure, and the sale to the customer — refusing any release that would run out of sequence. Allowed acts are bounded to murabaha.acquisition.release, murabaha.possession.record, murabaha.disclosure.release, murabaha.sale.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, murabaha.sequence.override, murabaha.markup.set. It is the sequence authority for the commercial murabaha. It does NOT set the markup, source commodities, or run the tawarruq broker; the Islamic Microfinance Authority Agent™ keeps the micro-ticket lane and the Islamic Trade Finance Authority Agent™ keeps the documentary-credit lane. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 8 (Murabaha) · AAOIFI Shariah Standard No. 18 (Possession/Qabd) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise) · AAOIFI Shariah Standard No. 30 (Monetization/Tawarruq) · AAOIFI Shariah Standard No. 3 (Default in Payment by a Debtor). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: commodity-broker platform rulebooks (e.g. a specific tawarruq platform) are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Muzaraa Authority Agent — governs the consequential act at the action boundary: releasing the muzara'a agricultural partnership acts: the crop-share ratio release against the board-certified template, the input-provision act, and the harvest-share distribution. Allowed acts are bounded to muzaraa.share_ratio.release, muzaraa.input_provision.release, muzaraa.harvest_distribution.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, muzaraa.share_ratio.set, muzaraa.yield.forecast. It governs the agricultural partnership release acts. It does NOT set the crop-share ratio (a board-certified term) and does NOT forecast yield. The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 12 (Sharikah/Musharaka and Modern Corporations) · AAOIFI Shariah Standard No. 31 (Controls on Gharar in Financial Transactions) · AAOIFI Shariah Standard No. 18 (Possession/Qabd). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: KYE™'s mapped AAOIFI Shariah Standards evidence layer contains NO muzara'a-specific standard row — the muzara'a-specific fiqh basis is therefore NOT a claimed KYE™ mapping; this agent binds only the general partnership, gharar and possession citations plus the Shariah-governance requirements, and routes every muzara'a-specific question to the board. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Salam Authority Agent — governs the consequential act at the action boundary: releasing the salam acts: full capital payment at contract, the delivery-acceptance act, and the parallel-salam independence check that keeps the two contracts unlinked. Allowed acts are bounded to salam.capital_payment.release, salam.delivery_acceptance.release, salam.parallel.independence.verify; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, salam.capital_payment.defer, salam.commodity.price. It governs the salam release authority, including refusing a deferred capital payment. It does NOT price the commodity or run the delivery logistics. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 10 (Salam and Parallel Salam) · AAOIFI Shariah Standard No. 18 (Possession/Qabd) · AAOIFI Shariah Standard No. 31 (Controls on Gharar in Financial Transactions) · AAOIFI Shariah Standard No. 59 (Sale of Debt). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: commodity-exchange and agricultural-marketing-board rulebooks are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Shariah Operations Authority Agent — governs the consequential act at the action boundary: recording a Shariah non-compliance (SNC) event, escalating it to the Shariah Supervisory Board, and releasing the board-directed remediation and purification act. Allowed acts are bounded to shariah.snc.record, shariah.snc.escalate, shariah.remediation.release, shariah.review.evidence.assemble; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, shariah.snc.dismiss, shariah.audit.opinion.issue. It runs the ongoing review and SNC lane; it never issues the Shariah audit opinion (ASIFI 7 / GS10 are out-of-scope substantive rows) and never screens or structures. The bound frameworks are aaoifi-auditing-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 35 (Zakah). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the internal audit charters of individual institutions are not frameworks and are never claimed. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Shariah Screening Authority Agent — governs the consequential act at the action boundary: releasing a Shariah screening verdict on an instrument, counterparty, or portfolio line for a downstream consequential action (admit to a Shariah-compliant book, permit a trade, or exclude). Allowed acts are bounded to shariah.screening.evaluate, shariah.screening.verdict.release, shariah.purification.quantum.prepare; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, instrument.trade.execute, portfolio.rebalance. It screens; it does not structure (that is the Shariah Structuring Authority Agent™) and it does not run the ongoing review function (that is the Shariah Operations Authority Agent™). It PREPARES the non-compliant-income quantum for purification; the purification determination itself is the board's substantive act and is recorded out-of-scope for KYE™ (§70). The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 21 (Financial Paper — Shares and Bonds) · AAOIFI Shariah Standard No. 20 (Sale of Commodities in Organised Markets) · AAOIFI Shariah Standard No. 59 (Sale of Debt) · AAOIFI Shariah Standard No. 35 (Zakah). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the individual index-provider screening methodologies (Dow Jones Islamic Market, S&P Shariah, FTSE Shariah, MSCI Islamic) are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Shariah Structuring Authority Agent — governs the consequential act at the action boundary: releasing a proposed product structure into the Shariah Supervisory Board approval queue and, after a recorded approval, releasing the structure for launch. Allowed acts are bounded to shariah.structure.dossier.assemble, shariah.structure.board_referral.raise, shariah.structure.launch.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, shariah.structure.approve, product.launch.execute. It prepares and routes the structure; the approval itself is the board's act, and post-launch conformance is the Shariah Operations Authority Agent™'s. The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, iifm-documentation-standards, and the board certification must cite AAOIFI Shariah Standard No. 25 (Combination of Contracts) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise) · AAOIFI Shariah Standard No. 31 (Controls on Gharar in Financial Transactions) · AAOIFI Shariah Standard No. 30 (Monetization/Tawarruq). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: the individual national Shariah-board resolution corpora (e.g. a specific SAC or DSN-MUI fatwa series) are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Sukuk Authority Agent — governs the consequential act at the action boundary: releasing the sukuk lifecycle acts: issuance against a recorded board certification, the tradability determination release, and periodic distribution. Allowed acts are bounded to sukuk.issuance.release, sukuk.tradability.determination.release, sukuk.distribution.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, sukuk.price, sukuk.rate.set, sukuk.trade.execute. It governs the sukuk authority acts against the certification and the IIFM master documentation. It does NOT price, rate, structure de novo, or execute trades. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, iifm-documentation-standards, and the board certification must cite AAOIFI Shariah Standard No. 17 (Investment Sukuk) · AAOIFI Shariah Standard No. 59 (Sale of Debt) · AAOIFI Shariah Standard No. 18 (Possession/Qabd) · AAOIFI Shariah Standard No. 12 (Sharikah/Musharaka and Modern Corporations). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: IOSCO capital-markets conduct, the Malaysian SC LOLA sukuk framework and individual exchange listing rules are NOT mapped frameworks. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Takaful Authority Agent — governs the consequential act at the action boundary: releasing the operator-side acts on a takaful risk fund: contribution acceptance, surplus distribution, and the qard advance from operator to a deficit risk fund. Allowed acts are bounded to takaful.contribution.accept, takaful.surplus.distribution.release, takaful.qard.advance.release; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, takaful.claim.adjudicate, takaful.risk.price. It governs the participant-fund boundary acts. It does NOT adjudicate claims, price risk, or replace the takaful administration system; the KYE Claims Decision Authority Agent™ keeps the conventional claims lane. The bound frameworks are aaoifi-accounting-standards, aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 26 (Islamic Insurance/Takaful) · AAOIFI Shariah Standard No. 19 (Loan/Qard) · AAOIFI Shariah Standard No. 23 (Agency/Wakala). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: IFSB-8 (takaful governance), IFSB-11 (takaful solvency) and IFSB-14 are NOT mapped frameworks — a stated plan, never a claimed mapping. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
  • KYE Wakala Authority Agent — governs the consequential act at the action boundary: releasing an act taken under a wakala mandate only when it falls inside the recorded scope of that mandate, and refusing an act that exceeds it. Allowed acts are bounded to wakala.mandate.scope.verify, wakala.act.release, wakala.fee.disclosure.assemble; it is prohibited from shariah.ruling.issue, fatwa.issue, shariah.board.membership.modify, policy.modify, delegation.create, arbitrary.execution, wakala.mandate.widen, wakala.capital.guarantee. It is the mandate-scope authority for agency relationships — the Islamic-finance instance of the delegated-authority pattern. Where the operator model is a takaful wakala, the KYE Takaful Authority Agent™ keeps the risk-fund acts. The bound frameworks are aaoifi-governance-standards, aaoifi-shariah-standards, ifsb-prudential-standards, ifsb-shariah-governance, and the board certification must cite AAOIFI Shariah Standard No. 23 (Agency/Wakala) · AAOIFI Shariah Standard No. 13 (Mudaraba) · AAOIFI Shariah Standard No. 5 (Guarantees) · AAOIFI Shariah Standard No. 49 (Unilateral and Bilateral Promise). KYE Protocol governs the AUTHORITY and EVIDENCE layer only: it proves the act resolved to a Shariah Supervisory Board that held the mandate, that the certification cited the applicable AAOIFI Shariah Standard, and that the act stayed inside the certified scope. Every AAOIFI Shariah Standard row in KYE™’s mapped evidence layer is recorded as out-of-scope for KYE™ — the substantive fiqh determination (whether the structure is permissible) belongs solely to the qualified Shariah board and legitimately differs across madhahib and jurisdictions. KYE™ issues no fatwa. Honest boundary: investment-management conduct regimes (e.g. MiFID II, FCA COBS) are mapped separately only where KYE™ has mapped them. The fatwa-bearing determination is NOT this agent's. Every act routes the substantive Shariah question to the institution's Shariah Supervisory Board (or the jurisdiction's central Shariah authority) and holds the act advisory until a recorded board authorisation resolves. KYE Protocol™ proves WHO ruled, that they held the mandate, which standard the certification cited, and that the act stayed inside it — KYE™ issues no fatwa and adjudicates no fiqh.
3 · The end-to-end flow

Every act, five governed steps.

Whatever the agent does — assemble evidence, look up a company, schedule a re-check — the act crosses the same boundary, captured as real envelopes against existing protocol schemas. No new schema was minted for this family.

  1. Admit. The bounded act crosses the constitution §52 authority boundary; only the agent's allow-listed tools and inputs are admitted.
  2. Decide. A Purpose Permission verdict answers whether this bounded agent may act, as a per-check reason list.
  3. Act. The agent performs its single-purpose act within the admitted scope — nothing more.
  4. Evidence. An Evidence Pack binds the decision and each act-supporting signal as a signed signal.
  5. Finalise. A signed Replay-Proof seals the act so it re-runs to the same result — Authority Finality for the bounded act.

An act outside the agent's bounded scope is refused and routed, never silently attempted — the refusal is itself evidenced.

4 · The honest boundary

We govern agents to the same standard — including the bounded ones we operate.

Constitution §0.30 makes agents first-class principals; constitution §32 keeps KYE Protocol out of the agent-framework business. The Governed Agents family lives precisely on that line.

KYE Protocol runs no general-purpose agents, and competes with no general agent framework. It may operate a bounded few agents as products — each single-purpose, governance-first, and held to the exact governance standard KYE Protocol applies to any agent it oversees. That is the point of the family: the product you buy is the governance — authority, evidence, finality — not raw agent capability.

So the dog-food is honest. KYE Protocol asks every agent to be a governed principal; the agents KYE Protocol itself operates are governed principals too, no exception. Read the governing clause on the agents-as-first-class-principals page.

5 · Verify it yourself

Provable from public keys alone.

Every signed envelope a Governed Agent emits verifies against the published key set at trust/self-audit-jwks.json — the same Ed25519 verification surface KYE Protocol uses to audit itself. No credentials, no vendor portal: parse the JSON, canonicalise the payload, and check the signature. The self-audit page walks the verifier step by step. For a payments team, that turns a representment bundle into evidence a regulator can re-derive — cutting exam-prep from days to minutes.

Operate an agent you can defend.

KYE Governed Agents is a governance projection of KYE Protocol. Each agent reuses Purpose Permission, the Evidence Pack, and the first-class principal model — no new engine, no new schema.