Kungfu UNGFU™Developer Platform

Back to KFD-10formal reference / KFD-10

KFD-10 formal reference

Authority must remain explicit, bounded, and revocable

Formal reference metadata

Decision
KFD-10
Stable URL
https://kfd.libkungfu.dev/10/formal
Source path
docs/KFD-10-formal.md
Relationship
formal-reference-child-of-decision
Normative
false
Model status
experimental
Model version
1
Authority path
decisions/KFD-10.md

KFD-10 Formal Reference

Authoritative decision · Usage · KFD-7 formal reference

  • Status: experimental
  • Normative: no
  • Formal model version: 1
  • Authority: decisions/KFD-10.md
  • Decision status: draft

Object

At Fact cut f, a Warrant version is:

W^v = (id, root, grantor, holder, action_scope, subject_scope, resource_scope,
       target_roots, preconditions, validity_conditions, limits,
       delegation_policy, derivation_chain, revocation_channel,
       residual_responsibility)

For candidate action u at cut or time t:

Valid_W(f, u, t) = AuthenticGrant(W^v)
  and not Revoked(W^v, t)
  and WithinWindow(W^v, t)
  and TargetRootsMatch(W^v, f)
  and PreconditionsHold(W^v, f)
  and u in PermissionCone(W^v, f)

Derivation and invariants

Derives(W_child, W_parent) ->
  Scope_child subseteq Scope_parent
  and Validity_child implies Validity_parent
  and Limits_child attenuate Limits_parent
W1 Authentication or capability does not imply Warrant.
W2 Warrant does not imply Atlas, Pursuit, Episode, success, or completion.
W3 Revoked, expired, stale-target, or out-of-scope authority is invalid.
W4 Derived authority cannot amplify its parent without a new source.
W5 Delegation does not silently transfer residual responsibility.
W6 Historical authority use remains inspectable after invalidation.

Transitions

Grant -> Attenuate | Delegate | Renew | Revoke | Expire | Consume | Refuse

Concrete lifecycle and approval policy remain Domain Profile-owned.

Falsifiers

The draft weakens if existing authorization objects preserve equivalent decisions and lifecycle at lower total cost, if Warrant cannot remain distinct from Atlas, Pursuit, or Episode, or if explicit authority adds ceremony without reducing unsafe inference or repeated investigation.