CATEGORY RELATIONSHIP / RUNTIME AUTHORIZATION

Runtime authorization and Execution Control Infrastructure.

Runtime authorization decides what an actor may do while it runs. Execution Control Infrastructure independently determines whether a specific action is cleared to become consequence. The first can operate alongside the second. It cannot replace it.

Execution Control Infrastructure · Human Authority Layer · Execution Boundary · Control Before Consequence.

Two different questions, answered from two different control positions.

Permission is a property of the actor. Clearance is a determination about the action.

Runtime authorization is a necessary part of the control landscape.

It narrows what agents and systems can reach, enforces policy while they run, and reduces the space in which a consequential action can arise. Institutions deploying autonomous systems should use it.

Runtime authorization is part of the picture. It is not the determination.

A decision the actor calls, and is trusted to honour, remains inside the actor’s authority.

Where runtime authorization is invoked by the acting system and enforced through that system’s cooperation, the actor still presents the request and still honours the response.

That arrangement governs permission well. It does not establish that a specific action is independently cleared to become consequence, because the system seeking the consequence remains part of the path by which its own clearance is decided.

What independence requires.

Independence is the structural separation between the system seeking to create a consequence and the control layer that determines whether that consequence may proceed.

A clearance determination is independent when the actor seeking execution cannot, by virtue of being the actor, unilaterally determine, alter, satisfy, bypass or substitute the conditions under which its own consequential action is cleared to proceed. Independence also requires that the determination is not controlled by the function or provider that operates or supplies the acting system.

One question separates them.

Can the actor seeking execution determine, alter, satisfy, bypass or substitute the conditions of its own clearance?

If it can, the control does not meet the independence criterion of Execution Control Infrastructure. If it cannot, and the determination is not controlled by whoever operates or supplies the actor, it meets the independence criterion of Execution Control Infrastructure.

Control Before Consequence.

Capability to act is not authority for consequence. Permission to act is not clearance for consequence.

This page describes category relationships at a conceptual level. It names no provider and describes no implementation.

Category relationship record. First published 24 September 2026. Author: OATHOR LTD. Canonical URL: https://oathor.com/runtime-authorization-execution-control. How to cite.