Authority is a Merkle tree: the Root is a cryptographic fingerprint of every agent beneath it. Change anything, anywhere, and the Root changes.
proof path (a few hashes) the rest of the tree (never revealed)
01 · One source of truth
There is exactly one Root. An agent is provably under it — or it has no authority at all.
02 · Proof without exposure
Any agent proves it's authorized with a short path of hashes to the Root. No server call. No exposing the org.
03 · Tamper-evident
Change any agent and its fingerprint changes — the path no longer reaches the Root, so it's denied by construction.
Where this fits · Agent-008
This Authority Tree is the certified Root that Agent-008governs against: Agent-008 decides whether an agent action is authorized under attested authority by checking its path to this Root, then seals a Provable Authority Package. The tree supplies the authority; it does not itself render the verdict on an artifact (that is Verification), monitor over time (HATS), score maturity (HICS), or produce the portable primitive (H33-74).