Apply authority to model deployment and use.
Organizations already decide which model versions may enter production, which environments and data they may serve, and which uses require additional approval. Authority Control applies those decisions before a deployment or use takes effect, and returns Permit, Defer, or Block.
A model can be technically capable of a use before the organization has authorized that use.
Where the model may operate.
The organization may approve a model for some environments, data classes, jurisdictions, or purposes and withhold approval for others.
- Model and version
- Production or development environment
- Programs, customers, or jurisdictions
- Approved data classes
- External interfaces and exposure
- Uses that require additional authority
The organization owns the operating scope. Authority Control applies it before a deployment or use takes effect.
The same model can carry different authority in different settings.
A model in internal evaluation, before any production decision has been made.
- Research
- Development environment
- Named data classes
- Production
- Customer-facing use
- External publication
A model’s capability does not establish authority for every setting. The organization decides its approved scope and governs changes to that scope.
Model use leads to the next authority question.
When a model participates in an operational workflow, Authority Control evaluates the result against the authority that applies.
Where may this model and version be deployed and used?
What authority does this operational actor have?
May this proposed result take effect for the organization?
Model evaluation describes capability and behavior. Security controls address technical conditions. Authority Control evaluates deployment, use, and resulting commitments against organizational authority.
Model authority, applied before deployment and use.
The organization defines where each model may operate and what it may be used for. Authority Control evaluates each proposed result against the authority the organization has established.