Authority is earned, not configured
Every APIR agent holds a trust band. The band is computed from the evidence-gated trust score, receipted work history, tenure, and the incident record, and it caps what the agent may do. Promotion is automatic. Demotion is automatic. Nobody, including APIR, can hand an agent authority its record hasn't earned.
Promotion is automatic
Bands read from EXECUTED work only | drafts and pending actions count for nothing. When the record earns the next band, the agent gets it | receipted and sealed into its tamper-evident work log.
Demotion is automatic
A drift event, an open critical incident, or a quarantine drops the band and narrows scope immediately. No appeals to marketing.
Enforced by the math
The band ceiling is checked inside ARBITER adjudication, at the database. A mandate can grant scope; the band still caps it. Binding actions stay human-held at every band.