Authority is resolved through the canonical Human Gate — the singular resolution surface. There is no alternate approve, sign, or authorize path.
Workspace owners resolve the Human Gate through their owner membership.
A platform admin may resolve the Human Gate through a platform_admin override.
Capability ≠ Authority. Holding the chief role is a capability; it is not itself authority. Permission is resolved per-action through the frozen core. Key possession is not permission.
No canonical delegation records are exposed. The backend does not persist a mandate, scope, or time-bound delegation registry. Delegation truth is not available to the application and is not fabricated.
No delegation management mutation API exists. Delegation administration is not surfaced — no speculative permission admin.