One Root. Every agent provable against it.
Authority is a Merkle tree: the Root is a cryptographic fingerprint of every agent beneath it. Change anything, anywhere, and the Root changes.
proof path (a few hashes)
the rest of the tree (never revealed)
01 · One source of truth
There is exactly one Root. An agent is provably under it — or it has no authority at all.
02 · Proof without exposure
Any agent proves it's authorized with a short path of hashes to the Root. No server call. No exposing the org.
03 · Tamper-evident
Change any agent and its fingerprint changes — the path no longer reaches the Root, so it's denied by construction.