review-required
founderCan authorize founder-level actions after explicit confirmation and elevated verification.
Founder role must still pass consent, MFA, and audit boundaries.ACTOR ROLE CLASSIFICATION READINESS LAYER
Verified identity is not authority. Role is the boundary.
A role classification readiness layer that defines founder, operator, reviewer, system, and observer authority before identity can be used for real persistence or control.
Universal Time Scroll
Every TheoB pathway can move through Past, Present, and Future without losing context.
Present
Read current signals, conditions, and live context.
🎙
Universal Voice Orb
Voice ready
SYSTEM STATE
StableFounder ControlledHuman Reviewed
ROLE CLASSIFICATION
No role, no authority.
Actor Role Classification Readiness Layer defines who can view, review, operate, recommend, or authorize. Founder authority, operator delegation, reviewer separation, system limits, and observer read-only boundaries must be clear before identity becomes usable.
falseRole Classification Ready
falseIdentity Can Use Roles
4Ready Rules
6Review Required
Actor role classification is intentionally not ready until founder authority, operator delegation, least privilege, role-change auditing, and critical-action authority rules are finalized.
review-required
operatorCan operate assigned cockpit workflows within delegated scope.
Operator authority must be explicitly delegated and revocable.review-required
reviewerCan inspect records, flag issues, and verify governance requirements.
Reviewer can advise, not command.ready
systemCan generate structural status, readiness reports, receipts, and non-destructive simulations.
System role must never silently escalate into human authority.ready
observerCan view public-safe or permissioned summaries without control authority.
Observer role is read-only by default.review-required
Role Required For Every ActorEvery authenticated actor must be assigned an explicit role.
No authenticated actor should float around as undefined authority.review-required
Founder Role Is Not InheritedFounder authority must be explicitly granted, never inferred from login alone.
No accidental founder power from generic auth.review-required
Operator Scope Must Be DelegatedOperators must have a defined scope, expiration, and revocation path.
Operators can help steer the ship, not claim the throne.ready
Reviewer Cannot ExecuteReviewer authority must remain separate from execution authority.
Review and command should not collapse into one button.ready
System Cannot Self-PromoteSystem-generated recommendations must never become self-approved actions.
No machine should crown itself founder.ready
Observer Is Read-OnlyObservers can see safe summaries but cannot confirm or mutate actions.
Viewing is not authority.review-required
Critical Actions Require Founder AuthorityPersistence activation, safe mode activation, and autonomy pause require founder-level authority.
Critical controls stay behind founder confirmation.review-required
Role Changes Must Be AuditedFuture role assignment, delegation, promotion, or revocation must produce an audit record.
No invisible permission changes.review-required
Least Privilege DefaultNew actors should start with observer or no-control authority until elevated.
Default small. Expand carefully.ready
Role RedactionRole records should expose safe labels and avoid sensitive auth payloads.
Role metadata should not leak raw identity data.Allowed NowRender role classification readiness.Define role boundaries.Display future authority levels.Keep identity and persistence blocked from real control.Continue simulations without treating roles as live permissions.
Not Allowed YetGrant real founder authority.Delegate real operator scope.Persist role assignments.Use roles to authorize real safe mode or autonomy actions.Treat system recommendations as self-approved commands.Allow observer or reviewer roles to mutate control state.
actorId: authenticated actor idactorRole: founder/operator/reviewer/system/observerauthorityLevel: highest/limited/review-only/automated-structural/read-onlydelegatedBy: optional founder actor idscope: allowed route/action scopeexpiresAt: optional ISO timestamprevocationStatus: active/revoked/expiredcreatedAt: ISO timestampredactionStatus: redacted-safe
roleAuditId: stable role audit event idactorId: target actor idpreviousRole: previous safe role labelnewRole: new safe role labelchangedBy: authenticated founder/operator id with authorityreason: safe text reasoncreatedAt: ISO timestampproductionMutation: true/false