Praesidias

Authority before execution.

Praesidias is an independent authority layer that determines whether AI agents and automated systems are authorized to take specific actions before they execute.

Access determines what a system can do. Praesidias determines what it is authorized to do.

Talk to usExplore the architecture

01 — Access vs. authority

CAN≠MAY

Identity, credentials and access can establish that a system is able to reach a resource. Praesidias asks a different question before a consequential action executes: does this actor have valid organizational authority for this exact action, under the organization’s current policy and conditions?

Technical ability

  • Authenticated
  • API reachable
  • Credentials valid
  • Tool available

The system can technically perform the action.

Organizational authority

  • Delegated scope confirmed
  • Current policy active
  • Approval conditions met
  • Requested amount within limit

Authorization depends on more than access.

Limitamount ≤ $50,000
Requested$42,000
ThereforeALLOW

02 — Where it sits

A separate authority boundary.

The system requesting an action should not be the final authority over whether that action is permitted.

Praesidias sits outside the agent or application requesting an action. It evaluates explicit authority and organizational policy deterministically before execution, then returns an authorization decision for the connected execution layer to enforce.

AI Agentrequesting system
Praesidias
AuthorityPolicyApprovalsLimits
ALLOW
Execution Layergateway / broker
Target Systemtreasury-prod

The authorization decision is deterministic. No LLM makes the final ALLOW/DENY decision.

03 — Provenance

Authority has provenance.

Praesidias resolves where authority came from, what was delegated, how far it may travel, whether it remains valid, and whether it applies to the requested action.
  1. Organization
  2. Finance Executive
  3. Treasury Service
  4. AI Finance AgentVALID

Authority Grant

Subjectfinance-agent-07
Scopepayment.create
Systemtreasury-prod
Limit$50,000
Expires18:00 UTC
Delegationpermitted
StatusVALID

Delegation narrows authority

Organization
≤ $500k
Treasury Service
≤ $100k
AI Finance Agent
≤ $50k

Delegation can narrow authority. It cannot silently invent more authority than it received.

04 — The decision

One action. One deterministic decision.

For each governed request, Praesidias evaluates the actor, asserted authority, active organizational policy and required conditions before returning ALLOW or DENY. Every decision remains tied to the governing state under which it was made.
REQUESTpayment.create
ACTORfinance-agent-07
AUTHORITYvalid
POLICYv18 · active
APPROVALS2 / 2
LIMITSwithin bounds
ALLOW
Policy v18Request 7F2A9C1E…Decision dec_91AF3D…

05 — Enforcement

Decision before execution.

Praesidias supplies the authority decision. The connected gateway, broker, application or execution system enforces it before the target action occurs.
Agent
Praesidias
ALLOW
Execution Layer
Target
Agent RuntimeWorkflow EngineExecution GatewayInternal ServiceTool Broker

06 — Evidence

Authorization should leave evidence.

For authorized actions that complete, Praesidias can produce cryptographically signed evidence tying the outcome back to the exact decision, policy and authority that permitted it.

Outcome Proof

Decisiondec_91AF3D…
Authorityagr_72C1E9…
Policyv18
Actionpayment.create
Outcomecompleted
Executed14:08:31 UTC
SignatureEd25519
PortableTamper-evidentIndependently verifiable

07 — Institutional memory

Know why it happened. Years later.

Decisions remain bound to the policy, authority and request state under which they were made. Praesidias preserves the control context needed to understand a governed action later, rather than reducing the event to an isolated log line.

At the moment of execution

Policyv18
Authorityvalid
Actorfinance-agent-07
Actionpayment.create
DecisionALLOW
Outcomecompleted

What policy existed?

Who held authority?

What was delegated?

What action was requested?

Why was it allowed?

What outcome was recorded?

08 — Shared infrastructure

One authority layer. Different systems.

Praesidias is designed as shared authority infrastructure across heterogeneous systems, so organizations do not need every agent, workflow and application to reinvent the same delegation, policy, decision and evidence model independently.
AI agentsFinancial operationsHealthcare workflowsInternal automationPrivileged infrastructureEnterprise systemsCompliance-sensitive workflows
Praesidiasshared authority boundary
connected execution environments

Systems should not merely have permission to act.
They should be able to prove they had authority.

Talk to usContact