Every privileged operation MUST be attributable to a tenant, service principal or operator. A wallet address may support an authentication flow, but it does not by itself authorize data access, workload execution or settlement.
Swipe or scroll to view all columns →
| Role | Responsibility | Authority limit |
|---|---|---|
| Requester | Submit, inspect and request cancellation of tenant tasks | Cannot read another tenant's objects |
| Coordinator | Enforce policy, allocate capacity and maintain task state | Cannot substitute allocation for delivery evidence |
| Executor | Run leased work; submit outputs and usage claims | Cannot approve its own delivery or confirm payment |
| Checker | Evaluate a frozen acceptance profile and record evidence | Cannot change the request or transfer customer funds |
| Accounting service | Reconcile usage, quotes, invoices and payment evidence | Cannot infer output quality from a payment |
| Operator | Deploy, investigate, rotate keys and recover services | Cannot alter historical records without an audit trail |
Authorization rules#
AUTH-01 The server MUST derive tenant ownership from authenticated context and verify it on every object operation. Client-supplied ownership fields are untrusted. AUTH-02 Credentials MUST restrict operations, resources and validity periods; executor credentials MUST be scoped to the active task or lease.
Human administrators and service accounts SHOULD use separate credentials and audit categories. Changes to production artifacts, billing policy, settlement permissions or quarantined-node eligibility SHOULD require independent review. Review records identify the actor, approver, affected version and reason.
Trust assumptions#
The proposed coordinator is authoritative for state ordering and lease generations. A trusted registry binds provider identities to keys. External model providers remain trust dependencies. Evidence signed by an executor establishes an attributable statement; it does not independently establish hardware identity, model quality or correct execution.