review-required
Authenticated Actor RequiredEvery persisted founder/operator action must include a verified actor identity.
Never persist real control actions from anonymous or unknown actors.AUTHENTICATED FOUNDER IDENTITY READINESS LAYER
TheoB should never trust a control action from a ghost.
An identity readiness layer that defines actor identity, role authority, session integrity, consent capture, delegation boundaries, and MFA requirements before real audit persistence is allowed.
Universal Time Scroll
Every TheoB pathway can move through Past, Present, and Future without losing context.
Present
Read current signals, conditions, and live context.
🎙
Universal Voice Orb
Voice ready
SYSTEM STATE
StableFounder ControlledHuman Reviewed
IDENTITY READINESS
No ghost operators. No anonymous authority.
Authenticated Founder Identity Readiness Layer defines the identity rules that must exist before any real founder action, audit receipt, or persistence event can be trusted. Until actor identity, role authority, consent, session safety, and delegation boundaries are ready, persistence remains blocked.
falseIdentity Ready
falsePersistence Can Use Identity
1Ready Rules
9Review Required
Founder identity is intentionally not ready until authenticated actor, role classification, founder authority, session integrity, consent capture, MFA boundaries, delegation, and identity provider selection are finalized.
review-required
Actor Role ClassificationEach actor must have a role such as founder, operator, reviewer, system, or observer.
Permissions must come from role boundaries, not vibes.review-required
Founder Authority ConfirmationFounder-level actions must prove the actor has founder authority before confirmation.
Do not allow non-founder roles to authorize safe mode, autonomy pause, or persistence activation.review-required
Session IntegrityPersisted actions must include a safe session reference without exposing cookies or tokens.
Use redacted session IDs or hashes only. Never store raw session secrets.review-required
Explicit Consent CaptureCritical persisted actions must record explicit human confirmation.
No inferred consent for critical control actions.ready
Identity RedactionIdentity records must avoid storing sensitive raw identity payloads.
Persist actor IDs, roles, and safe labels only; avoid raw auth payloads.review-required
Actor/Action BindingEach audit record must bind actor identity to receipt ID, action, timestamp, and mutation status.
No orphaned receipts without accountable actor linkage.review-required
MFA For Critical ActionsCritical actions should require stronger verification before persistence or execution.
Safe mode activation, autonomy pause, or real persistence activation should require elevated confirmation.review-required
Delegation BoundaryIf operators are allowed, their scope must be explicit and revocable.
Delegated users cannot silently inherit founder authority.review-required
Identity Provider SelectionChoose the identity source later: Vercel auth, Clerk, Auth.js, Google OAuth, custom admin auth, or another provider.
Do not attach real identity until roles, redaction, and audit linkage are defined.Allowed NowRender identity readiness status.Define future actor identity shape.Display identity requirements in cockpit surfaces.Keep audit persistence blocked until identity is trustworthy.Continue simulated receipt flows without storing real actor identity.
Not Allowed YetPersist real actor identity.Store raw auth payloads.Store cookies, tokens, credentials, or private session data.Treat simulated actions as authenticated founder actions.Allow anonymous users to confirm real control actions.Activate real audit persistence using unverified identity.
actorId: stable internal actor idactorDisplayName: safe display labelactorRole: founder/operator/reviewer/system/observerauthorityLevel: founder/admin/operator/read-onlysessionRef: redacted session reference or hashconsentId: explicit confirmation id for critical actionsmfaLevel: none/standard/elevateddelegatedBy: optional founder actor idcreatedAt: ISO timestampredactionStatus: redacted-safe
auditId: audit event idreceiptId: linked receipt idactorId: authenticated actor idactorRole: actor role at confirmation timeaction: normalized action labelactionAuthorityRequired: authority level requiredconsentCaptured: true/falseproductionMutation: true/falsecreatedAt: ISO timestamp