statements · statement-BATCH-2026-003-016

source-BATCH-2026-003-001

Authentication establishes identity but does not determine permission; authorization should map identities to external roles or carefully governed attributes and evaluate the requested action.

Statement context

Statement type: strategic framework
Exact source locator: pages 146–153
Source date: 2020-11-17
Role at source time: Named book author or chapter contributor
Evidence character: Authorization framework and caution
Scope: Workload access control

Indexed source: Solving the Bottom Turtle: A SPIFFE Way to Establish Trust in Your Infrastructure via Universal Identity

Evidence lineage and transparency

Relationship field	Linked identifiers
topic ids	topic-ai-agents, topic-ai-governance, topic-cybersecurity, topic-non-human-identity, topic-enterprise-infrastructure

Machine review: ready for human review. Human review: approved. Workflow: published.

Complete structured record

statement id: statement-BATCH-2026-003-016
source id: source-BATCH-2026-003-001
person id: Unknown
institutional author: The 12 named authors of Solving the Bottom Turtle
book edition id: book-edition-BATCH-2026-002-001
speaker role at source time: Named book author or chapter contributor
organization at source time: Unknown
statement type: strategic_framework
neutral paraphrase: Authentication establishes identity but does not determine permission; authorization should map identities to external roles or carefully governed attributes and evaluate the requested action.
direct quote: Unknown
direct quote rights note: No direct quotation used; original OEII paraphrase only.
exact locator: pages 146–153
locator type: page
source date: 2020-11-17
topic ids: topic-ai-agents, topic-ai-governance, topic-cybersecurity, topic-non-human-identity, topic-enterprise-infrastructure
executive role context: CISO, CIO, CTO, CEO, General Counsel, Board Director
industry context: Technology, Financial services, Healthcare, Public sector, Critical infrastructure
geographic context: Primarily United States and global technology operations
evidence character: Authorization framework and caution
factual verification status: Verified against the exact locator in the complete edition
statement scope: Workload access control
uncertainty: Unknown
extraction method: Manual semantic extraction after complete-edition reading, followed by locator replay and separate review pass
machine extraction confidence: 0.94
independent agent review status: See statement-review.csv and double-review-sample.json
publication status: published
workflow status: published
machine review status: ready_for_human_review
human review status: approved
reviewed by: Murray Newlands
reviewed at: 2026-08-16T23:17:22Z

Provenance and revision history

{
  "provenance": [
    {
      "source_url": "https://spiffe.io/pdf/Solving-the-bottom-turtle-SPIFFE-SPIRE-Book.pdf#page=146",
      "accessed_at": "2026-08-15",
      "retrieval_method": "Complete exact edition retrieved from an official public source and reviewed in full",
      "exact_locator": "pages 146–153",
      "content_hash": "8353e3cf6fb8859ff34b0a43fe8146d7580dd32c9ace863c1a4758440f898fcb",
      "batch_id": "BATCH-2026-003",
      "prompt_id": "OEII-BOOK-DEEP-ANALYSIS",
      "prompt_version": "2.0",
      "notes": "Locator replayed; paraphrase checked for attribution and scope"
    }
  ],
  "revision_history": [
    {
      "changed_at": "2026-08-16T23:17:22Z",
      "changed_by": "Murray Newlands",
      "summary": "Approved for the governed-identities pilot release under the exact scope, exclusions, rights treatment, and limitations recorded in issue #18.",
      "batch_id": "BATCH-2026-003"
    }
  ]
}

Open machine-readable record