KYE Production Action Authority™

An AI SRE agent proposes a production rollback. Autoheal finds the fix; KYE proves the fix had authority. Walk the action-authority check, delegation resolution, human two-person sign-off on the irreversible change, and the sealed Evidence Pack™ + Replay-Proof™.

Sandbox demo · All incidents and agents are synthetic (§0.2). KYE governs whether the production action may proceed and under whose authority — it does not detect the incident, perform RCA, or judge whether the fix is technically correct (that is ceded to the incident-intelligence tool, §0 complement-not-compete). Every step emits a §0.3 evidence-chain envelope under the kye:demo: URN namespace. Not production.

Pick a proposed mitigation

What this demonstrates

Named authority + delegation resolution. The proposing AI SRE agent resolves to a canonical principal and the delegation it acts under (§52 / §0.30). No recorded authority ⇒ refused.
Change-class due diligence before the action. Change-class + blast-radius + rollback-plan + freeze-window screen, recorded before the action (ITIL 4 / ISO 20000-1 / NIST 800-53 CM-3 / Google SRE).
Human-finality-if-threshold. The irreversible / high-blast-radius rollback holds advisory until §36 two-person sign-off (proposing engineer + approving change-owner).
Evidence Pack + Replay-Proof. A signed, replay-derivable provenance pin binds the model, the pinned incident signals, the due-diligence result, and the authority outcome.

kye-sandbox · scenario: production-action-authority · fixture kye:fixture:sandbox:production_action_authority_v1 · KYE Production Action Authority Pack™ →

KYE Production Action Authority™

Pick a proposed mitigation

Action-admissibility decision

Evidence Pack™ kye.evidence.pack.v1 + Replay-Proof™ kye.replay.proof.v1

What this demonstrates