Authority Risk Signal

A governed, signed feed of authority-failure events. Every governed action in your tenant already emits an evidence event when authority fails — an admissibility denial, an escalation to human approval, an attempt to act outside scope, declared-vs-deployed authority drift, an evidence gap, a finality suspension, a revocation. The Authority Risk Signal is a derived, tenant-scoped, time-windowed projection over those events: seven event-class counts plus references back to the underlying audit rows, sealed with an Ed25519 signature recomputable from the public trust keys alone.

KYE emits the authority-risk signal; your board / insurer / risk platform prices the exposure. This is not financial-risk quantification or advice. KYE proves which authority events occurred (counts + signed references). It runs no likelihood×loss model, no exposure-range math, and offers no investment or risk advice — that is the customer’s, insurer’s, or risk-quant platform’s job. This is the exact boundary the KYE Model & Risk-Data pack already drew.
SAMPLE DATA · the tenant below (acme) is fictional sample data bundled with the app. Every count is a projection over real governed evidence events; here they are rendered from a committed, signed sample record. All logic runs in your browser and is deterministic — the SHA-256 and the signature are recomputable offline. Live mode binds the same projector to your tenant’s evidence stream, scoped to your trust domain.

1 · Feed record

2 · Authority-failure event counts

Seven event classes. Each count is a tally of governed events — never a dollar value. Each class is derived from a real evidence-event family on the §0.3 audit chain.

3 · Severity mix

A classification of the events by operational severity — not a financial-risk score, loss estimate, or exposure quantity.

4 · Top event references

Opaque references to the most material underlying authority events (evt-…). The signal is a projection — every reference resolves to a real audit row you can independently verify from the public trust keys.

event_ref event_class severity occurred_at

5 · Recompute & verify

The feed record is replay-verifiable from the public trust keys alone. The app recomputes a real SHA-256 over the canonical JSON (signature field excluded) and verifies the Ed25519 signature against the published trust JWKS — no KYE secret required.

signal_id ·

SHA-256 over canonical record ·

Signature · verifying…

Verify offline: export the feed below, strip the signature field, canonicalise (sorted keys, no whitespace) and run shasum -a 256; the digest must equal the value above, and the Ed25519 signature must verify against the kid in the public trust JWKS.

6 · Export feed

Download the signed feed record as JSON for your board pack, your insurer, or your risk-quant platform. They price the exposure; KYE provides the proven signal.


  

What each count is derived from

  1. denials — admissibility DENY decisions (kye.purpose.admissibility.v1)
  2. escalations — actions routed to human / two-person / legal approval (kye.evidence.decision_map.v1)
  3. unauthorised_attempts — attempts to act outside scope (kye.purpose.admissibility.v1 + cross-tenant attempts)
  4. authority_drift — declared-vs-deployed drift (kye.resilience.drift_event.v1)
  5. evidence_gaps — EVIDENCE_INSUFFICIENT / missing pack (kye.resilience.drift_event.v1)
  6. finality_suspensions — irreversible actions held pending evidence / sign-off (kye.resilience.drift_event.v1)
  7. revocations — authority withdrawn, cascaded to dependents (kye.replay.proof.v1)

Honest scope (§0): KYE Authority Risk Signal™ emits the signal and the signed evidence of which authority events occurred. It does not quantify financial risk, does not model likelihood or loss, and is not investment or risk advice. Boards, insurers, and external risk-quant platforms price the exposure from this signal.