Example: two mandates

This page continues the Harbor & Line example. The charter is in place, and root authority now delegates.

Root authority issues Marisol a mandate

Root keys are for constituting the organization, and they stay out of daily work. On the same day, Ruth signs the company's first mandate. It delegates bounded purchasing authority to Marisol Vega, who runs logistics. Marisol is the person behind Petrel, the agent that buys bookkeeping in the Agent SoW example and posts the freight-audit RFP in the Agent RFP example. This document is what entitles her to do those things in Harbor & Line's name.

Each bound means one plain thing.

• The powers say what kinds of act she may approve. The power to form covers countersigning an engagement into existence, the power to amend covers approving amendments, the power to terminate covers ending engagements, and the power to award covers awarding an RFP posting. That is why her September 9 award of Caldera's response in the Agent RFP example is in order. The power named nda covers every act on an Agent NDA for the company, so she may sign the open offer that gates the freight-audit posting.
• The ceilings say how much. No single engagement she approves may carry a committed price above 50,000,000 XCR, and no more than 200,000,000 XCR of formed commitments may fall in any calendar month. Both are checked at approval time.
• The scope says over what. It covers only engagements whose offerings match audit-freight-*, so she cannot buy bookkeeping under this document.
• The term says until when. After one year the mandate has no force, and renewing it takes a fresh signature.
• The settlement clause names the organization as payer. Engagements she approves settle from Harbor & Line's balance, and her ceilings bound her draw on it.
• Sub-delegation says she may pass authority down, in narrower mandates and only one level deep.
• Because she may sub-delegate, the holder key is required. This document will be the issuer of a signature that someone else has to check later, and an account name and an email address do not tell a verifier which key to check it against.

Marisol sub-delegates to Tom

Marisol does not approve every formation herself. On August 6 she issues a narrower mandate to Tom Okafor, a purchasing manager on her team. The issuer of this document is her own mandate.

Before hosting the sub-mandate, the registry applied the narrowing rule: every dimension must be at most as broad as the issuer's mandate.

• The powers are a subset: the power to form alone, out of her four.
• The ceilings are lower: 10,000,000 per engagement and 40,000,000 per month, against her 50,000,000 and 200,000,000.
• The scope is the same pattern and no wider.
• The expiry, 90 days out on November 4, falls inside her August 2027.
• The payer stays the organization. She may pass that down only because her own mandate names it, since nobody can grant a draw on a treasury they do not hold.
• Her limit of one level of sub-delegation is spent by this document, so Tom's mandate allows no sub-delegation and he can pass nothing further down.

A registry refuses a sub-mandate that widens anything, and the refusal is enforced. Authority narrows going down.

The registry answers with the chain

root authority   org_7k2m9q4w1x8e5r3t   two allocator keys, threshold 1
  └ mnd_3f8c1n6z9v4b7q2m   Marisol Vega   form, amend, terminate, award, nda
       50M / 200M XCR   audit-freight-*   expires 2027-08-01
       holder key UBVGA3E6...ZJ7B4CDR   checks the signature below
      └ mnd_6d2p9r4s7t1v8w3z   Tom Okafor   form
           10M / 40M XCR   audit-freight-*   expires 2026-11-04

Next: Example: approval and revocation