https://notes.karlmcguinness.com/series/weighing-mission-bound-authorization/Recent content in Weighing Mission-Bound Authorization on Control Plane by Karl McGuinnessHugoen-uspublic@karlmcguinness.com (Karl McGuinness)public@karlmcguinness.com (Karl McGuinness)Fri, 10 Jul 2026 19:20:00 -0700https://notes.karlmcguinness.com/notes/the-convergence-and-the-wagers/Fri, 10 Jul 2026 19:20:00 -0700public@karlmcguinness.com (Karl McGuinness)https://notes.karlmcguinness.com/notes/the-convergence-and-the-wagers/The handbook closes on judgment. First the strongest outside evidence: AAuth, the proposed clean-slate agent protocol, independently grew a first-class mission layer in its 01 revision, an independent derivation landing on the same missing object. Then the honest bets: admission grain, issuer home, the price of Termination, the necessity of the object itself, and the portability of its authority, each stated with the evidence that would falsify it. The laws and the claim gate are the invariants. The admission grain, the issuer home, the price of Termination, the necessity of the object itself, and the portability of its authority are the wagers, and deployment experience, not this handbook, will settle them.https://notes.karlmcguinness.com/notes/the-authority-control-plane/Fri, 10 Jul 2026 19:10:00 -0700public@karlmcguinness.com (Karl McGuinness)https://notes.karlmcguinness.com/notes/the-authority-control-plane/Issuance gating and runtime enforcement are two independent chokepoints, strictly stronger together: a gap in PEP coverage is still bounded at the token layer, and an outstanding token is still stopped at the action layer. The Mission Authority Server, the issuance grant, the Mandate, and Cross-Domain Projection extend the pattern space. And the structural reading platform engineers reach for unprompted: the layer is the control plane for delegated authority, mapped concept by concept from desired state to the fleet API, with the disciplines that keep the framing honest.https://notes.karlmcguinness.com/notes/what-survives-without-oauth/Fri, 10 Jul 2026 19:00:00 -0700public@karlmcguinness.com (Karl McGuinness)https://notes.karlmcguinness.com/notes/what-survives-without-oauth/OAuth is the flagship binding because it is deployment reality, but the model does not depend on it. This part states the framework the profiles realize: four functions (compilation, projection, containment, continuity), a verb spine of nine verbs from propose to analyze, and the fundamental-versus-accidental test. Which ideas survive if OAuth disappears? Nearly all of them: the layer, the laws, the vocabulary, the approved task with an integrity-anchored record, approval evidence, runtime containment. What is accidental is the realization: PAR, RAR, the claim names, the wire shapes.