principalhood.com

Principalhood is the formal status of an entity — human, institutional, or AI — that possesses recognized authority to act as the originating source of delegations, consent grants, and identity bindings within a defined governance framework, bearing ultimate accountability for actions taken under its authority or by agents it has sponsored. Principalhood is not merely identity ownership but an active governance role that implies ongoing obligations of oversight, revocation management, and compliance with applicable authority frameworks. Establishing principalhood requires verification of the entity's identity, a declaration of the governance scope within which principal authority is exercised, and registration in an authoritative principal registry.

A principal authority declaration is a signed, verifiable instrument issued by a principal that formally asserts the scope of governance authority the principal claims within a defined domain, establishing the boundaries within which the principal may issue delegations, sponsor agents, and enter binding commitments. Declarations must be registered in an authoritative principal registry and are subject to verification by the governance framework before the declared authority takes legal or operational effect. Declaration governance must specify the conditions under which authority scope may be expanded, restricted, or transferred, and the process for challenging the validity of a declaration.

Principal verification is the process by which a governance framework confirms that an entity claiming principalhood has a valid, registered identity, possesses the authority scope it claims, and meets the minimum assurance level required for the specific governance context in which it seeks to exercise principal rights. Verification may include identity proofing, credential validation, registry lookup, and attestation review, with the specific steps required scaled to the risk level of the principal's intended authority scope. Failed verification must prevent the entity from exercising principal rights and must generate an audit record to support governance investigations.

A principal registry is an authoritative directory maintaining records of recognized principals within a governance domain, including their verified identities, authority declarations, sponsored agents, issued delegations, and current governance status. Relying parties use the principal registry to verify that a claimed principal is registered, active, and authorized to act within the scope asserted before honoring credentials or delegations issued under that principal's authority. Principal registry governance must define entry qualification requirements, suspension and revocation procedures, and the process for transferring or terminating principalhood upon changes in organizational structure.

The principal chain of accountability is the ordered sequence of principals — from the highest-authority root principal down through sub-principals, delegates, and sponsored agents — along which accountability for actions flows, ensuring that any action taken by any entity in the chain is traceable to a responsible principal with recognized legal or governance standing. Chain integrity requires that each link be cryptographically verified and that no principal can disclaim accountability for actions performed within the scope of authority it delegated. Principal chain governance must define the rules for apportioning accountability when multiple principals in a chain bear partial responsibility for a harmful action.

Institutional principalhood is the recognition of a legal entity — such as a corporation, government agency, or standards body — as a principal within a governance framework, conferring on the institution the authority to issue delegations, sponsor AI agents, and enter binding commitments on behalf of the institution and its authorized members. Institutional principals require governance mechanisms that address the delegation of principalhood responsibilities to specific human officers, the continuity of principalhood through organizational changes, and the process for transferring or terminating institutional principalhood upon dissolution or merger. Institutional principal records must encode the legal basis for the institution's authority and the authorized signatories who may exercise principal rights on its behalf.

A principal scope envelope is the formally bounded set of actions, delegations, and commitments that a principal is authorized to make within a governance framework, representing the outer limit of the principal's authority and defining the maximum scope that any delegation or agent action under the principal may possess. Scope envelopes are encoded as verifiable policy documents linked to the principal's registry record and must be machine-enforceable to prevent principals from issuing delegations or commitments that exceed their own authority. Governance frameworks must specify the process for scope envelope expansion and the approval thresholds required for different scope classes.

Principal revocation is the formal termination of an entity's principalhood status, immediately voiding all active delegations, agent sponsorships, and credentials issued under the principal's authority and triggering cascade revocation of all derivative identity records in the principal's accountability chain. Revocation may be self-initiated by the principal, administratively imposed by the governance framework, or triggered by a security incident or regulatory action. Principal revocation events must be recorded in the principal registry and propagated to all relying parties, agents, and downstream delegates within the defined revocation propagation SLA.

A principal attestation is a verifiable credential issued by an authoritative governance body confirming that a specific entity has been verified, registered, and recognized as a principal with a defined authority scope within a governance framework. Attestations serve as portable, machine-verifiable evidence of principalhood that relying parties can validate without querying the principal registry directly. Principal attestation schemas must include the principal's identity reference, authority scope, issuance and expiry timestamps, and the attesting authority's identity and governance basis.

Legal authority binding is the cryptographic and governance linkage between a principal's registered identity and the specific legal instruments — such as corporate charters, power of attorney documents, or regulatory authorizations — that confer the authority scope claimed in the principal's authority declaration. The binding ensures that claimed authority is traceable to a legally enforceable basis, not merely a self-asserted claim. Legal authority binding records must encode the legal instrument reference, the jurisdiction of the instrument, and the conditions under which the binding expires or is subject to review.

Principal succession is the formally governed transfer of principalhood from one entity to another — such as upon organizational restructuring, personal incapacity, or planned migration — preserving the continuity of the authority chain and the validity of active delegations and agent sponsorships issued under the predecessor principal. Succession must be cryptographically attested, registry-recorded, and propagated to all relying parties and dependent agents to prevent an authority vacuum during the transition. Governance frameworks must specify the conditions under which succession is permitted, the required approval thresholds, and the treatment of delegations and credentials that were issued under the predecessor principal's authority.

The root principal is the apex entity in a governance hierarchy from which all subsidiary principals, delegations, agent sponsorships, and authority chains derive their authority, holding the highest level of trust and bearing ultimate accountability for actions taken anywhere within its governance subtree. Root principals are distinguished by the absence of a higher authority to which their own principalhood is accountable, grounding the entire governance framework's trust chain. Governance frameworks must define the process for establishing, verifying, and, where necessary, replacing root principals, as well as the impact on dependent principals and agents when root principal status is transferred or revoked.

Co-principalhood is a governance arrangement in which two or more entities jointly hold principal authority over a shared governance scope, each retaining independent signing rights but requiring coordination or a threshold quorum to exercise certain authority classes. Co-principalhood addresses use cases such as joint ventures, multi-party contractual relationships, and multi-signature AI agent governance where no single entity is an appropriate sole authority. Governance frameworks for co-principalhood must define decision-making procedures, deadlock resolution mechanisms, and the impact of one co-principal's revocation or incapacity on the shared authority.

The principal assurance level is a tiered classification of the confidence that can be placed in a principal's claimed authority and identity, based on the strength of the identity proofing, credential technology, and governance verification performed during principalhood establishment. Higher assurance levels are required for principals exercising authority over higher-risk operations, such as sponsoring AI agents with broad operational scope or issuing delegations that govern sensitive data categories. Governance frameworks must map principal assurance levels to permitted authority scopes, ensuring that low-assurance principals cannot access high-risk governance operations without additional verification.

A principal audit record is a comprehensive, tamper-evident log of all governance actions taken by or on behalf of a principal — including delegations issued, agents sponsored, authority declarations filed, revocations executed, and consent grants authorized — providing the complete accountability evidence required for regulatory compliance and dispute resolution. Principal audit records must be maintained for the duration of the principal's active governance period plus the applicable regulatory retention period, and must be exportable in standardized formats for external audit. Records must be cryptographically integrity-protected and access-controlled to prevent tampering while remaining available to authorized regulators and governance bodies.