Governance · Authority you define

Give responsibility.
Keep authority.

A company needs to decide what its AI may do, what needs approval, and how to review the result. These are the principles behind our approach to delegated work.

Scope the work.

A responsibility needs explicit limits: the action, the information it may use, and the circumstances that require a person’s decision.

Make decisions traceable.

The record should connect a decision to the instruction and authority behind it, with a clear outcome a business owner can understand.

Withdraw permission.

Revocation stops future actions from using that grant. It does not unsend a message, reverse a completed payment, or erase the record. Work already underway needs its own handling.

Verify the workflow.

The connected service, permissions, approval requirements, and failure handling need to be checked for each company. A simulation does not establish production coverage.

Interactive illustration · No live business actions

Try a grant. Review a decision. Revoke it.

This simplified simulation runs only in your browser and resets on reload. It illustrates granting a responsibility, checking an example request, and preserving history after revocation. It does not connect to a company account or execute real work.

1 · Write a rule

A grant is a sentence in plain English with a boundary in it. Choose what Sabina may do and how far, and it lands in the canon attributed to you.

Sabina mayup towithout asking me.

2 · The canon

Every rule carries who wrote it and when. Revoke one and it does not vanish — it is struck through and annotated, because the record has to still be true a year from now.

  • R-001Active

    Sabina may send proposals up to $25,000 without asking me.

    Written by Mark Lord · 2026-08-02

  • R-002Active

    Sabina may approve change orders up to $10,000 without asking me.

    Written by Bri Lord · 2026-08-04

3 · Send her work

Each of these is a real thing a front office does on a Friday afternoon. Nothing executes outside the canon, so every one of them is checked against the rules above before it happens — and refused if no rule allows it.

Two grants are active. Everything else is refused by default.

4 · The record

Append-only, newest first, readable by the owner rather than by an engineer. Grants, revocations and decisions all land in the same place, and nothing is ever removed from it.

  1. 2026-08-04 09:12R-002 writtenBri Lord granted: approve change orders up to $10,000.
  2. 2026-08-02 16:41R-001 writtenMark Lord granted: send proposals up to $25,000.

The examples are illustrative rules, not a demonstration of a live permission service. Discuss your actual workflow and its limits with the team.

Fide et Familia

Start with one responsibility.

Tell us where your team needs help and what decisions must remain with you.

(866) 849-2113 · foundry@dominusfoundry.com