Every technological age is judged by what it authorizes.
Governance in the AI era is often framed as governance of algorithms. The deeper task is governance of authority.
The fundamental issue is how machine-generated claims enter decision systems, what influence they possess, what standards they must satisfy, who may challenge them, and who remains accountable.
The distinction changes the unit of governance. An institution does not govern a model in the abstract. It governs a claim, used for a purpose, in a context, with a defined degree of influence over action.
The same model may inform one decision, prioritize another, constrain a third, and execute a fourth. Treating all four uses as one system because they share an underlying model conceals the very thing governance must make visible: the authority granted in each setting.
The Authority Review Cycle
Authority should not be treated as a permanent asset acquired when a system is approved. It is a renewable grant.
Capability changes. Context shifts. Models degrade. Objectives are revised. Populations differ. Workarounds emerge. People learn to rely on a system in ways its original approval never contemplated. A grant that was justified under one set of conditions can become illegitimate while every formal document remains unchanged.
A functioning authority regime therefore requires a cycle.
First, authority is granted. The institution states what the claim may do, in which context, at what level of consequence, and on the basis of which evidence.
Second, authority is observed. The institution monitors not only accuracy but behavior around the claim: how often it is challenged, how overrides are treated, whether its use is expanding, and whether people still exercise independent judgment.
Third, authority is tested. Performance is checked under changed conditions. Boundaries are examined. Contestability is exercised rather than assumed. The people expected to pause or override are asked whether they can do so in practice.
Fourth, authority is renewed, narrowed, suspended, or revoked. The decision is recorded as a new adjudication, not buried as routine maintenance.
The point of the cycle is not administrative repetition. It is to prevent accumulated success from becoming inherited authority. A system that has been right many times has earned evidence of reliability. It has not earned exemption from review.
Govern the Grant, Not Just the Tool
Many governance programs begin with an inventory of systems. That is necessary and insufficient. A list of models reveals what technology exists. It does not reveal what those models have been allowed to do.
The more useful inventory is an authority map. It connects each machine-generated claim to the decision it influences, the level of authority it holds, the standard that justified that authority, the person or body able to challenge it, the person able to pause it, and the owner of the resulting consequence.
Such a map exposes differences that technical inventories hide. A recommendation engine used for optional research does not carry the same authority as the same engine embedded as a default in an approval workflow. A risk score that places a file higher in a queue does not carry the same authority as a score that removes the file from consideration. The model may be identical. The grant is not.
Governance should follow the grant.
A Worked Authority Map
| Claim / use | Authority level | Proof required | Decision owner | Challenge / pause | Accountability |
| Estimate default risk | Inform | Source and evidentiary adequacy | Loan officer | Request source review | Credit analytics lead |
| Rank review order | Prioritize | Verified performance in this applicant population | Operations manager | Re-rank or pause queue | Head of credit operations |
| Exclude an application | Approve / deny | All five standards; reasons and genuine appeal | Authorized credit officer | Independent review before finality | Regional lending head |
| Trigger automatic denial through an API | Execute | Highest proof burden; bounded automation; automatic stop and revocation conditions | Named system owner under approved delegation | Fail-closed pause plus human appeal | Executive risk owner |
Example Authority Map: the model stays constant while the grant of authority changes.
Consider a lending model used to assess applications. The model is unchanged across the examples below. What changes is the authority attached to its claim. The map makes that grant visible before it becomes habit.
Example Authority Map: the model stays constant while the grant of authority changes.
The final row is the case most likely to be missed in agentic systems. Authority has been pre-delegated into software and may be exercised in milliseconds, but it has not disappeared. It resides in the prior decision that defined the API's scope, proof burden, stop conditions, and accountable owner. Automation compresses the interval between claim and action. It does not remove the institution's duty to adjudicate the grant.
Three Levels of Adjudication
Machine-speed action requires the institution to separate three levels that human-scale workflows often collapse.
Prospective adjudication grants bounded authority before deployment: which classes of claims may trigger which actions, under what evidence, limits, and revocation conditions.
Runtime adjudication applies those settled conditions to the individual event. It may be automated and extremely fast, but it remains more than a prediction: it checks whether this action falls within the authority already granted.
Retrospective adjudication examines exceptions, harms, appeals, drift, and accumulated performance, then renews, narrows, suspends, or revokes the grant.
These levels do not make every automated action legitimate. They show where legitimacy must be tested when no human can intervene between claim and consequence. The right to pause may be implemented as a fail-closed condition, an automated stop, a transaction limit, a circuit breaker, or a revocation of delegated scope. The human right is not the ability to outrun a millisecond process. It is the institutionally protected authority to define, inspect, interrupt, and withdraw the conditions under which that process may act.
The Institutional Test
Any institution using machine-generated claims should be able to answer a short series of questions without retreating into general assurances about human oversight.
What claim is being made?
What authority does the claim currently possess?
What authority does it seek next?
Which evidence and standard justify that grant?
Within what boundary is the claim competent?
Who can challenge it before consequence?
Who can pause it without carrying an unreasonable personal cost?
Who answers for the outcome?
These questions are deliberately harder than asking whether a human remains involved. They force the institution to identify where judgment sits, whether it is usable, and how authority changes as a claim moves toward action.
An institution that cannot answer them does not yet possess an authority design. It possesses a collection of practices whose legitimacy depends on assumptions no one has made explicit.
Does This Slow Everything Down?
The obvious objection is that this architecture adds friction exactly when institutions are adopting AI to gain speed.
The objection mistakes the location of the cost. Adjudication does not become unnecessary when it is omitted. Its cost reappears later as uncontrolled exceptions, unexplained decisions, failed appeals, emergency interventions, reputational repair, or accountability reconstructed after harm.
Nor does legitimate governance require every claim to receive the same scrutiny. The framework in this book is proportional. A claim that merely informs should move quickly once its source and scope are clear. A claim that constrains choice or executes action should face a higher burden because the consequence of unjustified authority is greater.
Speed is not produced by eliminating adjudication. Durable speed is produced by trustworthy compression: standards defined in advance, evidence gathered once and used appropriately, decision rights made clear, and routine claims allowed to move without rebuilding legitimacy from the beginning each time.
The alternative often appears faster only because the institution has stopped measuring what happens after the recommendation leaves the screen.
Institutional Design, Not Ethical Decoration
The principles can now be stated as design obligations.
Separate advisory influence from decision rights. Identify where the burden of proof sits. Monitor challenge and override patterns. Preserve a usable right to pause. Match adjudication to consequence. Renew authority when capability, context, or use changes. Keep responsibility attached to a person or body able to exercise judgment before action, not merely absorb blame afterward.
These obligations convert abstract ethics into institutional architecture. They can be located in workflows, permissions, review triggers, records, escalation routes, and the distribution of cost when someone disagrees.
Some institutions will adapt. They will recognize that governance is not a constraint on intelligence but the means through which intelligence becomes legitimate action.
Others will automate decisions while leaving authority undefined. They will discover that formal responsibility remained human while practical control moved elsewhere.
The difference will not be technological. It will be institutional.
The future will not belong solely to those who generate the most intelligence. It will belong to those who develop the most legitimate way to govern it.