Logging is necessary for accountable automation, but a detailed record of an action does not prove that the action was legitimate. A log can show which credential called an API. It may not show who intended the action, what purpose justified it, what limits applied, or whether the credential should have been used at all.

That context must exist before execution. Accountability begins with a delegation chain.

Five elements of a useful authority record

  1. Principal: the person or organization on whose behalf the action occurs.
  2. Purpose: the outcome the delegation is meant to achieve.
  3. Scope: the resources, actions, thresholds, and duration permitted.
  4. Receipt: durable evidence linking request, authority, action, and outcome.
  5. Revocation and recovery: a practical path to stop action and restore control.
MoonVault view: an audit trail without an authority trail records activity, not accountability.

Delegation must survive system boundaries

Modern agents operate across browsers, APIs, data stores, payment systems, and other agents. Each handoff can strip away purpose and replace it with a reusable credential. NIST’s agent-identity work has identified delegation chains and cross-boundary accountability as central challenges. The architectural response should preserve a verifiable relationship between every downstream action and the original principal’s bounded grant.

Freedom depends on the ability to say “no more”

Revocation is not an edge case. A principal must be able to terminate a delegated capability when the task ends, conditions change, or risk becomes unacceptable. Recovery must also account for lost devices, unavailable people, organizational transitions, and compromised credentials.

This is where MoonVault’s identity and continuity theses meet: the same system that proves authority during normal operation must help the rightful principal recover authority when normal operation fails.

Primary sources

The source descriptions above report NIST’s public work. The five-part authority model and design conclusions are MoonVault analysis.