review-required
Authenticated Actor RequiredEvery persisted founder/operator action must include a verified actor identity.
Never persist real control actions from anonymous or unknown actors.PRIME FOUNDER PROFILE · AUTHENTICATED ACTOR READINESS
David Goldin can be identified without silently granting Founder authority.
Prime Founder is the human account/profile designation. Founder is a separately verified authorization class; consequential actions remain gated behind session, role, consent, MFA, receipt, and rollback evidence.
Universal Time Scroll
Every TheoB pathway can move through Past, Present, and Future without losing context.
Present
Read current signals, conditions, and live context.
🎙
Universal Voice Orb
Voice ready
SYSTEM STATE
RepresentedFounder ControlledHuman Reviewed
IDENTITY READINESS
No ghost operators. No anonymous authority.
The UI may identify David Goldin as Prime Founder because that is a human profile designation. It must not infer the Founder role or attach Founder Controls authority from the name, profile, or login alone. Until actor identity, verified role binding, consent, session safety, and delegation boundaries are ready, consequential persistence remains blocked.
David Goldin · Prime FounderHuman account/profile designation
Founder roleAuthorization class · verification required
falseIdentity Ready
falsePersistence Can Use Identity
1Ready Rules
9Review Required
Founder identity is intentionally not ready until authenticated actor, role classification, founder authority, session integrity, consent capture, MFA boundaries, delegation, and identity provider selection are finalized.
review-required
Actor Role ClassificationEach actor must have a role such as founder, operator, reviewer, system, or observer.
Permissions must come from role boundaries, not vibes.review-required
Founder Authority ConfirmationFounder-level actions must prove the actor has founder authority before confirmation.
Do not allow non-founder roles to authorize safe mode, autonomy pause, or persistence activation.review-required
Session IntegrityPersisted actions must include a safe session reference without exposing cookies or tokens.
Use redacted session IDs or hashes only. Never store raw session secrets.review-required
Explicit Consent CaptureCritical persisted actions must record explicit human confirmation.
No inferred consent for critical control actions.ready
Identity RedactionIdentity records must avoid storing sensitive raw identity payloads.
Persist actor IDs, roles, and safe labels only; avoid raw auth payloads.review-required
Actor/Action BindingEach audit record must bind actor identity to receipt ID, action, timestamp, and mutation status.
No orphaned receipts without accountable actor linkage.review-required
MFA For Critical ActionsCritical actions should require stronger verification before persistence or execution.
Safe mode activation, autonomy pause, or real persistence activation should require elevated confirmation.review-required
Delegation BoundaryIf operators are allowed, their scope must be explicit and revocable.
Delegated users cannot silently inherit founder authority.review-required
Identity Provider SelectionChoose the identity source later: Vercel auth, Clerk, Auth.js, Google OAuth, custom admin auth, or another provider.
Do not attach real identity until roles, redaction, and audit linkage are defined.Allowed NowRender identity readiness status.Define future actor identity shape.Display identity requirements in cockpit surfaces.Keep audit persistence blocked until identity is trustworthy.Continue simulated receipt flows without storing real actor identity.Display David Goldin · Prime Founder as a human profile designation without attaching Founder role authority.
Not Allowed YetPersist real actor identity.Store raw auth payloads.Store cookies, tokens, credentials, or private session data.Treat simulated actions as authenticated founder actions.Allow anonymous users to confirm real control actions.Activate real audit persistence using unverified identity.Infer Founder role or Founder Controls authority from the David Goldin or Prime Founder profile label.
actorId: stable internal actor idactorDisplayName: safe display labelprofileDesignation: optional public profile label such as Prime Founder; never authorizationactorRole: founder/operator/reviewer/system/observerauthorityLevel: founder/admin/operator/read-onlysessionRef: redacted session reference or hashconsentId: explicit confirmation id for critical actionsmfaLevel: none/standard/elevateddelegatedBy: optional founder actor idcreatedAt: ISO timestampredactionStatus: redacted-safe
auditId: audit event idreceiptId: linked receipt idactorId: authenticated actor idactorProfileDesignation: display-only profile designation at confirmation timeactorRole: verified authorization role at confirmation timeaction: normalized action labelactionAuthorityRequired: authority level requiredconsentCaptured: true/falseproductionMutation: true/falsecreatedAt: ISO timestamp