QIS-TERM-00020 QISTRUST.COM THE GOVERNANCE LAYER REV 2026-08-02 · BUILD 13.3
The QIS Canon · Authority

Authority Grant

The explicit, bounded, revocable and recorded instrument by which a principal permits a named agent to commit specified classes of action, up to stated limits, for a stated term.

QIS-TERM-00020·QIS Canonical Extension·Experimental

Why it matters

Every autonomous action is an exercise of delegated authority, and at present the grant is almost never a distinct artifact — it is implied by a tool manifest, an IAM policy, or nothing at all. Naming it separately is the precondition for governing it. The historical analogue is a letter of marque: defined scope, defined term, accountability running back to the grantor.

This is a proposal, not established usage

This term is a QIS Canonical Extension. It does not currently appear in the Model Context Protocol specification, the A2A specification, the AIEOG Shared AI Lexicon, or any instrument in our standards register. We are proposing it because we have documented the gap it fills, and we label it as ours everywhere it appears. Adopt it, argue with it, or ignore it — but do not cite it as industry consensus, because it is not.

What it is not

These are routinely confused with Authority Grant. The distinctions are not pedantic — each one has consequences for how a system is governed.

≠ Tool Manifest
Commonly conflated

The manifest is capability. The grant is permission. An agent can reach a payment API and be permitted to move nothing.

≠ IAM policy
Commonly conflated

An IAM policy governs a credential's technical access. A grant governs an agent's commercial authority and names the principal.

≠ Guardrails
Commonly conflated

Guardrails are applied by the operator. A grant is issued by the principal and is the thing an examiner asks to see.

Relationships

Typed edges into the rest of the ontology. These are what make the canon traversable rather than merely readable.

QIS-TERM-00020 — outbound relationships
VerbTargetMeaning
addressesAuthorityThe subject speaks to the object as a question or concern.
constrainsAgent IdentityThe subject bounds what the object may do.
notEquivalentToTool ManifestThe two are routinely conflated and are distinct.
requiresAgent IdentityThe subject imposes the object as a precondition.

Record

Canonical identifierQIS-TERM-00020
StatusQIS Canonical Extension
AdoptionExperimental
Domain · LayerAuthority · Governance
OriginQIS Canonical Extension. Proposed to fill a gap: no reviewed instrument in the standards register defines the artifact that confers permission on an agent, and the AIEOG Lexicon contains no term for it.
Semantic aliasesNone recorded.
First published2026-08-02
Last reviewed2026-08-02 · 180-day cycle

Cite the identifier, not the URL. Identifiers are stable; URLs may change. This entry is free to read, quote and index under the dual license. Corrections to [email protected] are published.