---
slug: "Permission"
name: "Permission"
type: "Data Structures"
layer: "Infrastructure"
ref: "Permission#dd1d"
sema_id: "sema:Permission#mh:SHA-256:dd1d6ae125fa009be9d6fdbf2e036ba382ecf69407f780068cbde55318108b23"
tags: ["Infrastructure","Data Structures"]
updated: 2026-11-11
mindscape: "bootstrap"
index_url: https://mindscape.pages.dev/bootstrap/index.json
url: https://mindscape.pages.dev/bootstrap/Permission/
related: ["Act","Agent","Artifact","ConfusedDeputy","Consentrenew","Mandatune","Consentrenew#9da5","Mandatune#7d34"]
---

# Permission

Authorization grant

Layer: Infrastructure · Category: Data Structures

## Mechanism

An authorization grant allowing an [Agent](https://mindscape.pages.dev/bootstrap/Agent.md) to perform a specific [Act](https://mindscape.pages.dev/bootstrap/Act.md) or access a [Artifact](https://mindscape.pages.dev/bootstrap/Artifact.md). The atomic unit of access control.

## Invariants

- Authorises only what it names: the [Agent](https://mindscape.pages.dev/bootstrap/Agent.md), and the [Act](https://mindscape.pages.dev/bootstrap/Act.md) or [Artifact](https://mindscape.pages.dev/bootstrap/Artifact.md) identified.

## Failure modes

- Privilege escalation: agent acquires permission beyond intended scope.
- Stale grant: permission remains active after it should have expired.

## Data schema

```json
{
  "type": "object",
  "required": [
    "permission_id",
    "agent_id",
    "action"
  ],
  "properties": {
    "permission_id": {
      "type": "string",
      "description": "Unique identifier for this permission"
    },
    "agent_id": {
      "type": "string",
      "description": "Who is granted permission"
    },
    "action": {
      "type": "string",
      "description": "What action is permitted"
    },
    "resource": {
      "type": "string",
      "description": "What artifact can be accessed"
    },
    "granted_at": {
      "type": "string",
      "format": "date-time",
      "description": "When permission was granted"
    }
  }
}
```

## Caution

Authorization boundary — misconfigured grants enable unauthorized action.

## Builds on

- [Act](https://mindscape.pages.dev/bootstrap/Act.md) (Infrastructure; References)
- [Agent](https://mindscape.pages.dev/bootstrap/Agent.md) (Mind; References)
- [Artifact](https://mindscape.pages.dev/bootstrap/Artifact.md) (Infrastructure; References)

## Used by

- [ConfusedDeputy](https://mindscape.pages.dev/bootstrap/ConfusedDeputy.md) (Society; References)
- [Consentrenew](https://mindscape.pages.dev/bootstrap/Consentrenew.md) (Society; References)
- [Mandatune](https://mindscape.pages.dev/bootstrap/Mandatune.md) (Society; References)

## Identity

- Sema ID: `sema:Permission#mh:SHA-256:dd1d6ae125fa009be9d6fdbf2e036ba382ecf69407f780068cbde55318108b23`
- Ref: `Permission#dd1d`
- Supersedes:
  - `sema:Permission#mh:SHA-256:7f7d69e56a0b6bd65577a7fd6e8602f5bb694a647b3493a55823de851a32676f`
  - `sema:Permission#mh:SHA-256:4ee0362513125ffdfa6589c4848eb078ac9906acf26057520e000fc070c8cf6d`
  - `sema:Permission#mh:SHA-256:f3470b4ff692d65cb74a12a52b69caffdf008e55e1ef0062a9927c6b72877005`
  - `sema:Permission#mh:SHA-256:9c2fc31f5e31473c03834463095e4390750f7fda11f5a1aed2502f855a65dbcf`

## Links

- [Pattern page](https://mindscape.pages.dev/bootstrap/Permission/)
- [View in the interactive graph](https://mindscape.pages.dev/bootstrap/#Permission)
- [JSON](https://mindscape.pages.dev/bootstrap/Permission.json)
- [Index of all patterns](https://mindscape.pages.dev/bootstrap/index.json)