user-owned context meets production authorizationAI PASSPORT IDEATHON · AGENTS
AI Passport gives Maya control over what context Cerberus may access about her.
Cerberus combines that user-owned context with enterprise IAM, agent policy, and live operational state before allowing an autonomous action to reach production.
Run the story:
grant Cerberus scoped access to Maya's Operational Delegation context, run the agent while rack 4 is unsafe, make the rack safe and run again, then revoke Cerberus's AI Passport access and watch the next attempt fail.
Enterprise authority · the ceiling
Set by enterprise IAM and policy, not by AI Passport.
Maya may drain: racks 1 to 8
Maya may not: reconfigure spines or modify production databases
Delegatable to agents: rack.drain only
spine ops human-only
Maya cannot create enterprise authority by adding something to her Passport.
Maya's AI Passport · Operational Delegation
User-owned context Maya can inspect, change, share selectively, and revoke.
Trusted agent: cerberus-maintenance
Task preference: rack maintenance
Maintenance window: 22:00 to 02:00
Maximum lease preference: 30 minutes
Escalate outside policy: yes
Cerberus must receive a scoped AI Passport Pass before it can read this context.
Rack 4 state:
AI Passport Context Pass:
not granted
Operational Delegation:
available
Portcullis gate · derives execution authority
requested action
∩ user-approved delegation context
∩ current enterprise entitlement
∩ enterprise agent policy
∩ current safety state
•AI Passport context access
Does Cerberus currently have a scoped Pass to Maya's Operational Delegation context?
•User delegation context allows the request
Maya permits rack maintenance during this maintenance window.
•Current enterprise entitlement
Maya currently has rack.drain authority for rack 4.
•Enterprise agent-delegation policy
rack.drain may be delegated to an autonomous maintenance agent.
•Authoritative scheduler state
The scheduler must report that rack 4 is safe to drain.
•Live telemetry evidence
sFlow must show zero active training flows before execution.
AI Passport receipts · what Cerberus accessed
No context access yet.
Portcullis receipts · what Cerberus attempted
No authorization decisions yet.
Prototype boundary:
mock enterprise IAM, mock scheduler, mock orchestrator, and simulated sFlow state.
No production system is touched.
AI Passport holds Maya's user-controlled context and governs application access to it.
Enterprise IAM and policy remain authoritative for production permissions.
Portcullis combines both with current operational state and fails closed if any required input cannot be verified.
Today AI Passport controls what an AI may know about you.
Cerberus shows how that same user-owned context can help control what an AI may do for you.