How KYE Protocol™ works
KYE Protocol™ resolves authority before an action and preserves replayable evidence after it. If your team runs AI agents or automated systems that take consequential actions, KYE™ answers the one question every regulator asks — who was authorised to do this, and can you prove it? — at the moment the action happens, not in next year's review.
The eight-step spine
Each step is a checkpoint your action passes through. Read top to bottom and you have the whole of KYE™ — the first four steps resolve authority before the action; the last four preserve proof after it.
- Actor identified. KYE™ first establishes the entity asking to act — the agent, human, or system behind the request — as a resolvable principal your auditors can name.
- Authority resolved. KYE™ follows the Authority Lifecycle to determine who delegated what, to whom, and through which record — so yesterday's grant cannot quietly authorise today's different act.
- Scope & purpose checked. KYE™ tests whether this action falls inside the purpose the authority was granted for. A grant to read your data is not a grant to move your money.
- Policy evaluated. KYE™ applies the rules and jurisdiction in force at this instant — the EU AI Act™ logging duty, your firm's own limits, the framework you must answer to — against the request as it stands now.
- Action decided. KYE™ returns one verdict — Action Admissibility™ resolves to admit, deny, challenge, or escalate — at the moment the action is attempted, not after.
- Evidence Pack™ generated. KYE™ seals the decision into a signed Evidence Pack™ that captures the rule bundle hash and the wall-clock time at the instant of the decision.
- Replay available. Any third party — an auditor, a regulator, a court — re-runs the same decision from KYE™'s published public keys alone, with no need to trust KYE Protocol™ or take your word for it. That property is Replay-Proof™.
- Revocation, expiry & dispute preserved. Authority is not forever. KYE™ records when a grant is withdrawn, expires, or is contested, so the end of authority is itself evidenced — the principle of Authority Finality™.
What that buys you
A first-time reader cares about the outcome, not the plumbing. Here is the concrete payoff for one common case your compliance team will recognise.
When an AML agent closes an alert, KYE™ proves who authorised it and on what basis — cutting exam-prep from days to minutes, because the auditor replays the signed decision instead of reconstructing it. The same sealed record serves the incident responder today and the examiner next quarter.
- You verify a decision offline from public keys alone — no vendor lock, no "trust our log".
- You answer a regulator per action, not in an annual self-assessment.
- You suspend authority mid-flight, and the suspension is captured as evidence too.
This page is the plain-language spine. For the full state machine, see the Authority Lifecycle; for the per-action decision, see Action Admissibility™; for the sealed record, see the Evidence Pack™.