Founding thesis · M2 Argued · 2026-09-28
Portable Authority
Identity for agents is a chain, not a login: a workforce of software must prove not just who it is but who authorised it and to what extent, and the only credential that answers that is an attenuated grant chain a counterparty can verify without trusting the issuer.
| Formed | 2026 — the identity question the agent workforce forces |
|---|---|
| Origin | Originated by the studio |
| Grade | M2 Argued — The reasoning is sound and falsifiable and the thing exists. Nobody has used it yet. |
| Written | Transcribed from a dated document of the period |
| Dated | 2026-09-28 |
| Surface | github.com/FlashyLabs/flashyid-spec |
Why then
A thesis with no timing argument is an observation. This is what changed that made the company possible in that year and not three years earlier.
Every prior attempt at portable identity was absorbed into a platform login at the moment it became useful. Agents cannot be absorbed that way, because the counterparty is another organisation by definition — which finally makes portability a requirement rather than a preference, and makes the chain the thing that has to travel.
The wedge
The narrow first thing. A thesis without one is a market map, and a market map is not a company.
Ship enforcement before minting: a grant may only ever carry a subset of its granter’s scopes, the gate that refuses a superset runs before anything is issued, and identity that nothing checks is never shipped.
What has to be true
Each assumption stated so it can be checked rather than agreed with. A reader who disagrees with one of these disagrees with the company, which is the point of writing them down separately.
| 01 | Standing and credentials that survive leaving the surface that issued them are worth more than ones that do not |
| 02 | A counterparty who does not trust the issuer can still verify the delegation chain offline |
| 03 | Solving identity for agents solves it for people as a side effect, rather than the other way round |
What would kill it
One falsifier, not a list. A thesis with five has none, because no one of them ever quite happens and the company survives every partial version.
The large identity vendors extend OAuth scopes downward with a widely adopted delegation profile that is good enough — at which point portable authority is a preference a buyer can decline rather than a requirement they cannot.
What dates it
The earliest artefact that could only exist if the thesis already did. It bounds the thesis from above rather than dating its formation — the belief precedes the commit, always.
2026-09-28 — to the day.
The identity layer on the Web 4 map: github.com/FlashyLabs/flashyid-spec, contract `delegation/1`, listed public and draft on the 2026-09-28 stack map, with the implementation held private.
How far it has got
The grade, and the register the grade was read from. A grade with no basis is an opinion wearing a badge.
Proven
Running against a population outside this estate, with a number that moves without our help.Evidenced
Running in production. Every consumer is inside the estate, which is the ceiling until somebody outside adopts it.Argued
This company is herePre-thesis
A real observation about the world. Not yet a company, and named here rather than dressed as one.Basis. Draft and unadopted: github.com/FlashyLabs/flashyid-spec carries `delegation/1` as a public draft on the 2026-09-28 map with the implementation private and no independent relying party named. Specified and enforceable, not yet used outside the estate.
Sources
Dated documents from the period. This page cites; it does not restate.
Where this goes next
The vocabulary this thesis is written in, the cycle it was formed against, and the properties it touches. Every internal link is checked against the register that generates it, so a renamed term fails a test rather than becoming a 404 somebody finds later.
| Portable authority | The term in one paragraph: agent identity as a chain of attenuated grants rather than a login. |
|---|---|
| Delegation chain | The same structure seen from the audit side — every action traceable to a person who can answer for it. |
| Flashy ID | The venture that mints the credential and enforces attenuation before anything is granted. |
| 02 Someone to be | The condition this supplies, and the one agents made urgent rather than optional. |
| flashyid-spec | The public delegation/1 specification, draft on the map, that a relying party would read. |
The other theses
Every venture, its grade, and the register the grade came from. The ladder is on the ventures index.
| Venture | Grade | Origin |
|---|---|---|
| FinanceOS | M1 Pre-thesis | Inherited |
| Flashy Gold | M3 Evidenced | Inherited |
| Flashy Network | M3 Evidenced | Inherited |
| Flashy Group | M3 Evidenced | Inherited |
| FlashyOS | M3 Evidenced | Inherited |
| Flashy ID | M3 Evidenced | Inherited |
| Flashy Mind | M2 Argued | Inherited |
| IntentMesh | M2 Argued | Studio |
| AssetMesh | M2 Argued | Studio |
| Magician | M2 Argued | Studio |
| RitualOS | M2 Argued | Studio |
| BuildOS | M2 Argued | Studio |
| rare.fun | M1 Pre-thesis | Studio |
| NFT Capital | M2 Argued | Studio |
| h3alth Group | M2 Argued | Studio |
| Flashy Academy | M3 Evidenced | Inherited |
| ClaimYour.Gold | M3 Evidenced | Inherited |
| Metaverse Group | M4 Proven | Inherited |
| BitMap Holdings | M4 Proven | Inherited |
| NFT BAZL | M3 Evidenced | Inherited |
| The Agency Layer | M2 Argued | Studio |
| Declared Existence | M2 Argued | Studio |
| Published Intent | M2 Argued | Studio |
| Consented Trust | M2 Argued | Studio |
| The Machine Door | M2 Argued | Studio |
| Chartered Organisations | M2 Argued | Studio |
| The Mesh | M2 Argued | Studio |
| Policy-Bound Value | M2 Argued | Studio |
| Sealed Record | M2 Argued | Studio |
| Fewer Businesses Than Brands | M2 Argued | Studio |