AUTHORITY-001™
The SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™
Establishing Legitimate, Verifiable and Accountable Institutional Authority Across Decision-Making, Delegation, Safeguarding, Escalation and Governance
Framework Reference: AUTHORITY-001™
Framework Series: SAFECHAIN™ Governance Architecture Series — Governance Authority, Reasoning & Accountability
Author: Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA
Founder — SAFECHAIN™
Version: 1.0
Year: 2026
1. Framework Purpose
The SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™ (AUTHORITY-001™) establishes a structured governance methodology for determining:
Who possesses institutional authority;
where that authority comes from;
what decisions it permits;
what limits apply;
whether authority may be delegated;
how delegation must be evidenced;
when authority expires or is withdrawn;
who may act in urgent circumstances;
how conflicts affect authority;
and how organisations verify that consequential decisions were made by legitimately authorised persons or bodies.
Governance cannot depend upon assumed authority.
A senior title does not automatically establish authority.
Custom and practice do not necessarily create decision rights.
Attendance at a meeting does not necessarily confer decision-making power.
Expertise does not automatically create institutional jurisdiction.
Delegation cannot safely exist only in organisational memory.
And a decision should not acquire legitimacy merely because nobody challenged the authority under which it was made.
AUTHORITY-001™ therefore establishes a fundamental governance proposition:
Every material exercise of institutional power should be capable of being traced to an identifiable source of legitimate authority.
The framework establishes the authority pathway:
Source → Mandate → Scope → Delegation → Decision Rights → Limits → Exercise → Record → Accountability → Review
2. Framework Objectives
AUTHORITY-001™ is designed to:
2.1 Establish Authority Clearly
Identify who is empowered to make which institutional decisions.
2.2 Verify the Source of Authority
Ensure consequential authority can be traced to an appropriate legal, constitutional, contractual, regulatory, governance or delegated source.
2.3 Define Decision Rights
Clarify which individuals, offices, boards, committees and functions may approve, recommend, advise, escalate or implement decisions.
2.4 Control Delegation
Ensure delegated authority is explicit, proportionate, traceable and reviewable.
2.5 Prevent Unauthorised Decision-Making
Identify decisions taken outside legitimate authority.
2.6 Establish Authority Limits
Define financial, operational, safeguarding, geographic, temporal and substantive boundaries.
2.7 Strengthen Safeguarding Authority
Ensure responsibility for urgent protective action is clearly allocated.
2.8 Govern Emergency Authority
Establish controlled mechanisms for exceptional decision-making.
2.9 Strengthen Accountability
Connect every exercise of authority to identifiable responsibility.
2.10 Improve Governance Assurance
Enable organisations to demonstrate that material decisions were made by appropriately authorised persons.
3. The SAFECHAIN™ Authority Legitimacy Principle™
AUTHORITY-001™ establishes the SAFECHAIN™ Authority Legitimacy Principle™:
Institutional power should not be exercised merely because a person is able to exercise it; legitimate authority should be identifiable, appropriately conferred, within scope and capable of verification.
Authority and capability are not the same.
Authority and seniority are not the same.
Authority and expertise are not the same.
Authority and influence are not the same.
4. Governance Authority
For the purposes of AUTHORITY-001™, governance authority means:
The legitimate institutional power conferred upon a person, role or body to make, approve, direct, refuse, escalate, review or implement specified decisions within defined boundaries.
5. Sources of Authority
Authority may arise from:
Legislation;
regulation;
constitutional documents;
articles of association;
statutory instruments;
contractual arrangements;
governance instruments;
board resolutions;
schemes of delegation;
terms of reference;
formal appointment;
professional mandate;
policy;
expressly authorised emergency arrangements.
The appropriate source will depend upon organisational context.
6. SAFECHAIN™ Authority Source Principle™
The source of material authority should be identifiable independently of the person claiming to possess it.
7. Authority Evidence
Evidence of authority may include:
Appointment records;
resolutions;
delegation instruments;
terms of reference;
statutory provisions;
contracts;
governance policies;
written authorisations;
committee mandates;
decision-rights matrices.
8. The SAFECHAIN™ Authority Architecture™
AUTHORITY-001™ establishes twelve authority domains:
AA1 — Source
Where does authority originate?
AA2 — Holder
Who possesses it?
AA3 — Scope
What does it permit?
AA4 — Decision Rights
What decisions may be made?
AA5 — Delegation
Can authority be transferred?
AA6 — Limits
What boundaries apply?
AA7 — Independence
Can authority be exercised impartially?
AA8 — Safeguarding
Who can act to protect against harm?
AA9 — Emergency Authority
What happens when ordinary structures cannot respond quickly enough?
AA10 — Evidence
How is authority demonstrated?
AA11 — Accountability
Who answers for its exercise?
AA12 — Review
Does the authority remain appropriate?
9. Decision Rights
Decision rights establish who may:
Decide;
approve;
recommend;
advise;
veto;
escalate;
review;
implement.
These functions should not be confused.
10. SAFECHAIN™ Decision Rights Distinction™
Participation in a decision process does not necessarily confer authority to make the decision.
An adviser may advise.
A committee may recommend.
An executive may approve.
A board may retain final authority.
The distinctions should be clear.
11. The SAFECHAIN™ Decision Rights Map™
Organisations should maintain a proportionate SAFECHAIN™ Decision Rights Map™ identifying:
☐ Decision category
☐ Decision owner
☐ Approval authority
☐ Delegated authority
☐ Consultation requirements
☐ Escalation authority
☐ Review authority
☐ Limits
☐ Evidence source
12. Authority Mapping
Authority mapping should identify material decision-making power across:
Board;
executive;
management;
safeguarding;
finance;
risk;
compliance;
operations;
specialist functions.
13. SAFECHAIN™ Authority Map™
The SAFECHAIN™ Authority Map™ provides an organisational view of where significant decision power sits and how it moves between governance levels.
14. Authority Clarity
People exercising material authority should understand:
What they can decide;
what they cannot decide;
when approval is required;
when escalation is mandatory.
15. SAFECHAIN™ Authority Clarity Test™
The test asks:
Can the decision-maker identify the source of their authority?
Can they describe its limits?
Can another person independently verify both?
16. Assumed Authority
AUTHORITY-001™ establishes SAFECHAIN™ Assumed Authority Risk™.
This occurs where authority is treated as existing because:
A person is senior;
they have historically made similar decisions;
nobody has objected;
others believe they have authority;
the organisation has always operated that way.
17. SAFECHAIN™ No Authority by Assumption Principle™
Repeated exercise of unverified authority should not be treated as proof that legitimate authority exists.
18. Informal Authority
Organisations frequently contain individuals with significant informal influence.
Informal influence should not be confused with formal decision rights.
19. SAFECHAIN™ Informal Power Risk™
A SAFECHAIN™ Informal Power Risk™ arises where individuals materially determine institutional outcomes without corresponding formal authority or accountability.
20. Shadow Decision-Making
AUTHORITY-001™ establishes SAFECHAIN™ Shadow Decision-Making Risk™.
This occurs where the formal decision-maker appears to make the decision, but another person or group effectively determines the outcome without transparent authority.
21. SAFECHAIN™ Authority Transparency Principle™
Material institutional influence should not be permitted to operate as invisible decision authority.
22. Delegation
Delegation occurs where an authorised person or body permits another person or role to exercise specified authority.
Delegation should be deliberate.
23. SAFECHAIN™ Delegation Integrity Principle™
Delegation should identify what authority is transferred, to whom, for what purpose, within what limits and for what period.
24. Delegation Does Not Erase Accountability
Delegation may transfer authority to act.
It does not necessarily remove accountability from the delegating authority.
25. SAFECHAIN™ Delegation Accountability Principle™
Where authority is delegated, governance accountability should remain traceable both to the person exercising delegated power and, where appropriate, to the authority responsible for the delegation.
26. Delegation Requirements
A material delegation should ordinarily identify:
☐ Delegating authority
☐ Delegate
☐ Decision rights
☐ Scope
☐ Limits
☐ Conditions
☐ Start date
☐ End/review date
☐ Escalation requirements
☐ Reporting obligations
27. SAFECHAIN™ Delegation Record™
AUTHORITY-001™ establishes the SAFECHAIN™ Delegation Record™ as evidence of significant delegated authority.
28. Oral Delegation
Some operational environments may permit oral instructions.
However, significant or continuing authority should ordinarily be documented where practicable.
29. Delegation Ambiguity
A SAFECHAIN™ Delegation Ambiguity Risk™ arises where:
Authority is unclear;
scope is undefined;
duration is unknown;
conditions are undocumented.
30. Sub-Delegation
The ability to sub-delegate should be expressly addressed where material.
31. SAFECHAIN™ Sub-Delegation Control Principle™
A delegate should not assume authority to transfer delegated power further unless that ability is itself legitimately conferred.
32. Delegation Chains
Complex organisations may contain multiple levels of delegation.
These should remain traceable.
33. SAFECHAIN™ Delegation Chain™
The framework establishes:
Original Authority → Delegation → Sub-Delegation if permitted → Exercise → Accountability
34. Broken Delegation Chain™
A SAFECHAIN™ Broken Delegation Chain™ exists where an organisation cannot establish how decision authority moved from its legitimate source to the person who exercised it.
35. Authority Scope
Authority should have defined scope.
Scope may be:
Substantive;
financial;
geographic;
operational;
temporal;
professional;
safeguarding-specific.
36. SAFECHAIN™ Authority Scope Principle™
Authority should be interpreted within the boundaries under which it was conferred rather than as a general licence to exercise institutional power.
37. Authority Creep™
AUTHORITY-001™ establishes SAFECHAIN™ Authority Creep™.
This occurs where authority gradually expands beyond its original scope without formal approval.
38. Authority Limits
Limits may include:
Monetary thresholds;
subject matter;
geography;
duration;
risk level;
safeguarding severity;
contractual restrictions.
39. SAFECHAIN™ Authority Boundary Test™
Before exercising material authority, ask:
Is this decision within the subject matter of my authority?
Within my financial limit?
Within my geographic or organisational remit?
Within the period for which authority exists?
40. Acting Outside Authority
Where a person acts outside authority, the organisation should determine:
What happened;
why;
impact;
whether the decision is valid;
whether corrective action is required;
whether systemic controls failed.
41. SAFECHAIN™ Authority Breach™
An Authority Breach™ occurs where institutional power is exercised beyond the authority legitimately conferred.
42. Authority Breach Classification™
AUTHORITY-001™ establishes:
AB1 — Technical
Minor procedural authority defect with limited impact.
AB2 — Material
Authority weakness capable of affecting decision legitimacy.
AB3 — Serious
Consequential decision made materially outside authority.
AB4 — Critical
Unauthorised exercise of power creates serious safeguarding, legal, financial or institutional harm.
AB5 — Systemic
Authority controls are persistently unreliable across the organisation.
43. Authority Gap
An Authority Gap™ exists where action is required but nobody possesses sufficiently clear authority to act.
44. SAFECHAIN™ Authority Gap Principle™
Where responsibility exists without sufficient authority to discharge it, governance design is incomplete.
45. Relationship Between Duty and Authority
DUTY-001™ identifies responsibility.
AUTHORITY-001™ asks whether the responsible person possesses sufficient power to discharge that responsibility.
46. SAFECHAIN™ Duty–Authority Alignment Test™
For every significant duty:
Who is responsible?
What authority do they possess?
Is that authority sufficient?
If not, where must escalation occur?
47. Responsibility Without Authority
Assigning responsibility without authority can create accountability failure.
48. Authority Without Responsibility
Authority without clear responsibility can create uncontrolled power.
49. SAFECHAIN™ Authority–Responsibility Balance Principle™
Sound governance aligns sufficient authority with clear responsibility and traceable accountability.
50. Safeguarding Authority
Safeguarding authority should be clearly allocated.
Organisations should know who can:
Initiate protective action;
override ordinary processes;
escalate risk;
obtain specialist review;
refer externally where appropriate.
51. SAFECHAIN™ Safeguarding Authority Principle™
No serious safeguarding concern should remain unresolved merely because organisational authority to act is unclear.
52. Safeguarding Authority Gap™
A SAFECHAIN™ Safeguarding Authority Gap™ exists where individuals identify risk but lack clear authority or escalation pathways to secure protective action.
53. Safeguarding Override
In high-risk circumstances, ordinary hierarchy may require controlled override mechanisms.
54. SAFECHAIN™ Protective Authority Override™
Where credible evidence indicates serious or imminent harm, appropriately designated safeguarding authority should be capable of triggering proportionate protective action without being blocked by ordinary organisational hierarchy.
Applicable legal and regulatory requirements must be observed.
55. Emergency Authority
Emergency circumstances may require temporary authority.
Emergency authority should not become an informal alternative governance system.
56. SAFECHAIN™ Emergency Authority Principle™
Exceptional urgency may justify exceptional authority, but exceptional authority should remain defined, temporary, recorded and reviewable.
57. Emergency Authority Requirements
Emergency authority should identify:
☐ Trigger
☐ Authorised person
☐ Scope
☐ Duration
☐ Safeguards
☐ Notification
☐ Retrospective review
58. Emergency Authority Expiry™
Emergency authority should expire automatically unless legitimately renewed.
59. SAFECHAIN™ Emergency Authority Sunset Rule™
Temporary authority should not silently become permanent authority through continued use.
60. Acting Authority
Organisations should establish arrangements for temporary absence.
61. SAFECHAIN™ Acting Authority Protocol™
The protocol should identify:
Who may act;
when acting authority begins;
scope;
restrictions;
when it ends.
62. Authority and Competence
Authority does not necessarily establish competence.
A person may be authorised but insufficiently skilled for a specialist decision.
63. SAFECHAIN™ Authority–Competence Principle™
Legitimate authority and appropriate competence are separate governance requirements; consequential decisions may require both.
64. Competence Restrictions
Delegation should consider whether the delegate possesses:
Knowledge;
training;
professional qualification;
experience;
safeguarding competence.
65. Authority and Conflict
CONFLICT-001™ applies where authority is affected by:
Personal interest;
prior involvement;
financial interest;
relational conflict;
institutional interest.
66. SAFECHAIN™ Conflicted Authority Principle™
Possession of formal authority does not remove the obligation to consider whether conflict, bias or prior involvement makes its exercise inappropriate.
67. Recusal
A person may retain formal authority but need to recuse themselves from a particular decision.
68. Replacement Authority
Where recusal occurs, the organisation should identify who legitimately assumes decision authority.
69. SAFECHAIN™ Replacement Authority Principle™
Recusal should not create an authority vacuum; replacement authority should itself be legitimate, sufficiently independent and appropriately evidenced.
70. Collective Authority
Boards and committees may possess collective authority.
Individual members should not assume the authority of the collective body unless separately authorised.
71. SAFECHAIN™ Collective Authority Principle™
Authority vested in a board, panel or committee belongs to the authorised collective decision structure and should not automatically be attributed to individual members.
72. Quorum
Where collective authority depends upon quorum, quorum should be verified.
73. SAFECHAIN™ Quorum Integrity Rule™
A decision requiring collective authority should not be represented as duly authorised where mandatory quorum requirements were not satisfied.
74. Voting Authority
Voting rights should be distinguished from:
Attendance;
advisory participation;
observer status.
75. Chair Authority
A chair's procedural authority should not automatically be interpreted as unrestricted substantive decision authority.
76. Committee Terms of Reference
Material committees should have clear terms of reference identifying:
Purpose;
authority;
membership;
quorum;
decision rights;
escalation;
reporting.
77. Reserved Decisions
Certain decisions may be reserved for:
Board;
shareholders;
trustees;
designated officers;
statutory bodies.
78. SAFECHAIN™ Reserved Authority Register™
Organisations may maintain a SAFECHAIN™ Reserved Authority Register™ identifying decisions that cannot be delegated below specified levels.
79. Financial Authority
Financial authority should establish:
Approval limits;
procurement authority;
expenditure limits;
contractual authority;
exceptions.
80. Split Approval
High-risk decisions may require more than one authorised person.
81. SAFECHAIN™ Dual Authority Safeguard™
A SAFECHAIN™ Dual Authority Safeguard™ may require independent approval from two appropriately authorised persons for designated high-risk decisions.
82. Authority Concentration
Excessive decision power concentrated in one individual may increase governance risk.
83. SAFECHAIN™ Authority Concentration Risk™
Authority concentration should be assessed particularly where one person can:
Initiate;
approve;
implement;
review;
the same consequential decision.
84. Separation of Authority
Organisations should consider separation between:
Proposal → Approval → Implementation → Review
where risk warrants it.
85. SAFECHAIN™ Authority Separation Principle™
High-impact decisions should not unnecessarily concentrate initiation, approval, execution and review within the same unchecked authority.
86. Authority and Independent Challenge
CHALLENGE-001™ applies where the legitimacy, scope or exercise of authority is disputed.
87. SAFECHAIN™ Authority Challenge Right™
The exercise of institutional authority should remain capable of legitimate challenge concerning its source, scope, delegation, conflict or application.
88. Challenged Authority
Where authority is credibly challenged before a highly consequential decision, the organisation should consider verifying authority before proceeding.
89. SAFECHAIN™ Authority Verification Trigger™
Verification should be triggered where credible evidence suggests:
Authority does not exist;
delegation is defective;
authority expired;
scope is exceeded;
decision-maker is materially conflicted.
90. Authority Evidence Burden
The organisation exercising institutional power should ordinarily be capable of demonstrating the governance basis upon which that power was exercised.
91. SAFECHAIN™ Authority Evidence Principle™
A person affected by institutional power should not ordinarily be expected to prove that authority did not exist where the institution itself cannot demonstrate the basis upon which it claims authority existed.
This principle remains subject to applicable legal and evidential rules.
92. Authority Records
Records should be maintained proportionately to risk and significance.
93. SAFECHAIN™ Governance Authority Register™
AUTHORITY-001™ establishes the SAFECHAIN™ Governance Authority Register™.
It may contain:
☐ Authority reference
☐ Source
☐ Holder
☐ Role
☐ Scope
☐ Decision rights
☐ Delegation rights
☐ Restrictions
☐ Effective date
☐ Expiry/review date
☐ Evidence location
☐ Status
94. Authority Version Control
Authority instruments should be version-controlled where appropriate.
Outdated schemes can cause decision errors.
95. SAFECHAIN™ Authority Currency Principle™
Decision-makers should rely upon the authority structure in force at the time of the decision, not an obsolete or superseded delegation arrangement.
96. Authority Change
Changes should be communicated to affected decision-makers.
97. Revocation
Delegated authority may require revocation where:
Role changes;
competence concerns arise;
conflict emerges;
misconduct occurs;
organisational structure changes.
98. SAFECHAIN™ Authority Revocation Record™
Material revocation should be documented and communicated.
99. Authority Expiry
Time-limited authority should have an identifiable expiry date.
100. Expired Authority Risk™
A SAFECHAIN™ Expired Authority Risk™ occurs where a person continues exercising power after the authority has ended.
101. Retrospective Authorisation
Organisations should not routinely rely on retrospective approval to cure weak authority controls.
102. SAFECHAIN™ Retrospective Authority Risk™
Retrospective authorisation may obscure whether legitimate authority existed when the decision was actually made.
103. Ratification
Where applicable governance or legal rules permit ratification, the organisation should record:
Original defect;
ratifying authority;
basis;
limitations;
consequences.
104. SAFECHAIN™ Ratification Transparency Principle™
Where an authority defect is subsequently ratified, the record should distinguish the original decision from the later act of ratification.
105. Authority and External Providers
Outsourcing a function does not automatically transfer governance authority.
Contracts should identify decision rights clearly.
106. SAFECHAIN™ Outsourced Authority Principle™
An institution should distinguish between outsourcing activity and delegating institutional authority.
107. Third-Party Decision Rights
Third parties should not exercise authority beyond that legitimately conferred through appropriate arrangements.
108. Partnership Governance
Multi-agency environments should identify:
Which organisation holds which authority;
joint decision rights;
escalation routes;
safeguarding responsibility.
109. SAFECHAIN™ Multi-Agency Authority Principle™
Shared involvement should not create ambiguity about who has authority to decide, protect, escalate or act.
110. Regulatory Authority
Regulated organisations should map internal authority against applicable external requirements.
111. Professional Authority
Professional expertise may create specific decision rights.
Those rights remain subject to:
Scope of practice;
professional duties;
organisational mandate;
applicable law.
112. Authority and Automated Systems
AI and automated systems may influence decisions but should not obscure who possesses institutional decision authority.
113. SAFECHAIN™ Human Authority Principle™
Where an automated system materially informs a consequential institutional decision, identifiable human or institutional authority should remain accountable for the decision unless applicable law expressly provides otherwise.
114. Automated Authority Illusion™
AUTHORITY-001™ establishes SAFECHAIN™ Automated Authority Illusion™.
This occurs where an algorithmic output is treated as though it possesses decision authority merely because the system produced it.
115. Algorithmic Recommendation
Automated recommendations should be distinguished from authorised decisions.
116. Authority and Data Access
Authority to make a decision does not automatically create unrestricted authority to access all information.
Data access should remain governed separately.
117. SAFECHAIN™ Authority Segmentation Principle™
Decision authority, information-access authority, financial authority and implementation authority should be distinguished where governance risk requires it.
118. Authority Audit
Organisations should periodically audit authority arrangements.
119. SAFECHAIN™ Authority Audit™
The audit may test:
Source validity;
delegation;
expiry;
scope;
decision rights;
conflicts;
evidence;
authority breaches.
120. Authority Assurance
ASSURANCE-001™ may test whether authority controls provide justified confidence.
121. Authority Validation
VALIDATION-001™ may test whether documented authority structures operate in practice.
122. Authority Monitoring
MONITORING-001™ may monitor:
Expiring delegations;
authority breaches;
gaps;
concentration;
emergency authority.
123. Authority Remediation
REMEDIATION-001™ should govern corrective action where authority weaknesses are identified.
124. Authority Oversight
OVERSIGHT-001™ should receive visibility of serious or systemic authority failures.
125. Relationship with INTEGRITY-001™
INTEGRITY-001™ establishes the ethical conditions under which institutional authority should be exercised.
126. Relationship with CONFLICT-001™
CONFLICT-001™ determines whether a person possessing authority is sufficiently independent and impartial to exercise it.
127. Relationship with DUTY-001™
DUTY-001™ establishes responsibility.
AUTHORITY-001™ establishes whether sufficient legitimate power exists to discharge that responsibility.
128. Relationship with CHALLENGE-001™
CHALLENGE-001™ provides mechanisms for questioning authority, delegation and decision rights.
129. Relationship with DECISION-001™
DECISION-001™ requires legitimate authority as part of evidence-based governance decision-making.
AUTHORITY-001™ provides the detailed authority architecture supporting that requirement.
130. Relationship with ACCOUNTABILITY-001™
Authority and accountability should remain connected.
The greater the authority, the greater the need for clear answerability.
131. Authority Culture
Formal authority structures can be undermined by organisational culture.
Risk indicators include:
“Everyone knows who decides”;
informal seniority;
undocumented delegation;
fear of questioning authority;
shadow decision-makers.
132. SAFECHAIN™ Authority Culture Principle™
A mature governance culture does not require people to infer where institutional power sits; material authority is visible, explainable and challengeable.
133. Leadership Responsibility
Leaders should ensure that authority arrangements remain current and understood.
134. SAFECHAIN™ Leadership Authority Principle™
Leadership responsibility includes ensuring that institutional power is appropriately distributed, controlled, evidenced and accountable.
135. Authority Concentration Review
High concentrations of authority should receive periodic review.
136. Authority Dashboard™
A SAFECHAIN™ Governance Authority Dashboard™ may display:
Active delegations;
expiring delegations;
authority gaps;
authority breaches;
safeguarding authority;
emergency authority;
concentrated authority;
review status.
137. Authority Indicators
Potential indicators include:
Percentage of material decisions with verified authority;
undocumented delegations;
expired delegations;
authority breaches;
unresolved authority gaps;
emergency authority use;
concentration exceptions.
138. Authority Classification™
AUTHORITY-001™ establishes the SAFECHAIN™ Authority Integrity Classification™:
AI1 — Verified
Authority clearly established and within scope.
AI2 — Verified with Limitation
Authority exists but material conditions or restrictions apply.
AI3 — Uncertain
Authority cannot yet be sufficiently verified.
AI4 — Defective
Material weakness exists in source, delegation, scope or exercise.
AI5 — Unauthorised/Systemic Failure
Authority is absent or governance controls are systemically unreliable.
139. Escalation
AI3–AI5 findings should be escalated proportionately.
Potential responses include:
Verification;
suspension;
reconsideration;
replacement decision-maker;
ratification where lawfully available;
remediation;
independent review.
140. SAFECHAIN™ Authority Maturity Model™
AUTHORITY-001™ establishes five maturity levels:
AM1 — Informal
Authority depends significantly upon custom, hierarchy or organisational knowledge.
AM2 — Documented
Formal authority and delegation arrangements exist.
AM3 — Controlled
Authority, decision rights, limits and delegations are systematically managed.
AM4 — Assured
Authority structures are independently tested, monitored and reviewed.
AM5 — Adaptive
Authority architecture is continuously improved using governance intelligence, challenge, incident learning and organisational change.
141. Authority Maturity Ceiling™
Advanced maturity should not be claimed where material weaknesses persist in:
Authority source;
delegation;
safeguarding authority;
authority evidence;
decision rights;
conflicts;
accountability.
142. SAFECHAIN™ Authority Legitimacy & Decision Rights Test™
Before a material exercise of institutional power, organisations should ask:
1. What authority is being exercised?
2. What is its source?
3. Who legally or institutionally holds it?
4. Is the authority currently valid?
5. Is this decision within its scope?
6. Has authority been delegated?
7. Is that delegation documented?
8. Does the delegate possess sufficient competence?
9. Is sub-delegation permitted?
10. Are applicable limits satisfied?
11. Is the decision reserved to another authority?
12. Are quorum or collective-decision requirements satisfied?
13. Is the decision-maker conflicted?
14. Is safeguarding authority clear?
15. Is emergency authority being used appropriately?
16. Can the authority be independently verified?
17. Is the exercise of authority recorded?
18. Can the decision be challenged?
19. Who is accountable for the exercise of authority?
20. If the legitimacy of this decision were challenged tomorrow, could the organisation produce a clear, contemporaneous and independently verifiable chain showing exactly where the decision-maker's authority came from, what it permitted, what limits applied and why the decision fell within those limits?
The twentieth question is the central authority test.
143. Framework Outcomes
Effective implementation of AUTHORITY-001™ is intended to support:
✓ Clear authority structures
✓ Verifiable decision rights
✓ Stronger delegation controls
✓ Reduced assumed authority
✓ Reduced shadow decision-making
✓ Clearer authority limits
✓ Better duty-authority alignment
✓ Stronger safeguarding authority
✓ Controlled emergency authority
✓ Better replacement arrangements
✓ Reduced authority concentration
✓ Stronger collective governance
✓ Better third-party controls
✓ Clearer multi-agency responsibility
✓ Stronger AI decision accountability
✓ Better authority records
✓ Greater challengeability
✓ Stronger assurance
✓ Greater institutional accountability
✓ Increased trust in institutional decisions
144. Governing Statement
Institutional authority matters because authority determines who may exercise power over:
People.
Resources.
Risk.
Safeguarding.
Rights.
Opportunities.
Information.
And organisational outcomes.
Yet authority is often treated as though it is self-evident.
Someone holds a senior position.
Someone chaired the meeting.
Someone has always made the decision.
Someone was told they could act.
Someone believed authority had been delegated.
That is not enough.
The SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™ establishes a more rigorous standard:
Identify the source. Verify the mandate. Define the decision right. Record the delegation. Establish the limits. Check competence and conflict. Protect safeguarding authority. Control exceptional powers. Record the exercise. Preserve challenge. Connect authority to accountability.
The central question is simple:
Who gave this person or body the power to make this decision?
And the answer should never depend solely upon:
“Because that is how we have always done it.”
Legitimate governance requires more.
It requires an institution to be able to demonstrate that the power it exercised was lawfully or legitimately sourced, properly delegated, within scope, sufficiently independent, transparently recorded and accountable.
Because institutional power should never have to be assumed.
It should be capable of being proven.
Copyright and Intellectual Property Notice
© 2026 Samantha Avril-Andreassen. All Rights Reserved.
AUTHORITY-001™ — The SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™ is an original governance authority, delegation, decision-rights, safeguarding-authority and accountability framework developed and authored by Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA, Founder of SAFECHAIN™.
The original expression, structure, architecture, arrangement, terminology, authority methodology, delegation architecture, decision-rights structure, classifications, principles, tests, registers, controls, maturity mechanisms and associated framework materials contained within this publication constitute proprietary intellectual property.
This includes, where original to this framework, the:
SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™;
AUTHORITY-001™ designation;
SAFECHAIN™ Authority Legitimacy Principle™;
SAFECHAIN™ Authority Source Principle™;
SAFECHAIN™ Authority Architecture™;
SAFECHAIN™ Decision Rights Distinction™;
SAFECHAIN™ Decision Rights Map™;
SAFECHAIN™ Authority Map™;
SAFECHAIN™ Authority Clarity Test™;
SAFECHAIN™ Assumed Authority Risk™;
SAFECHAIN™ No Authority by Assumption Principle™;
SAFECHAIN™ Informal Power Risk™;
SAFECHAIN™ Shadow Decision-Making Risk™;
SAFECHAIN™ Authority Transparency Principle™;
SAFECHAIN™ Delegation Integrity Principle™;
SAFECHAIN™ Delegation Accountability Principle™;
SAFECHAIN™ Delegation Record™;
SAFECHAIN™ Delegation Ambiguity Risk™;
SAFECHAIN™ Sub-Delegation Control Principle™;
SAFECHAIN™ Delegation Chain™;
SAFECHAIN™ Broken Delegation Chain™;
SAFECHAIN™ Authority Scope Principle™;
SAFECHAIN™ Authority Creep™;
SAFECHAIN™ Authority Boundary Test™;
SAFECHAIN™ Authority Breach™;
SAFECHAIN™ Authority Breach Classification™;
SAFECHAIN™ Authority Gap Principle™;
SAFECHAIN™ Duty–Authority Alignment Test™;
SAFECHAIN™ Authority–Responsibility Balance Principle™;
SAFECHAIN™ Safeguarding Authority Principle™;
SAFECHAIN™ Safeguarding Authority Gap™;
SAFECHAIN™ Protective Authority Override™;
SAFECHAIN™ Emergency Authority Principle™;
SAFECHAIN™ Emergency Authority Sunset Rule™;
SAFECHAIN™ Acting Authority Protocol™;
SAFECHAIN™ Authority–Competence Principle™;
SAFECHAIN™ Conflicted Authority Principle™;
SAFECHAIN™ Replacement Authority Principle™;
SAFECHAIN™ Collective Authority Principle™;
SAFECHAIN™ Quorum Integrity Rule™;
SAFECHAIN™ Reserved Authority Register™;
SAFECHAIN™ Dual Authority Safeguard™;
SAFECHAIN™ Authority Concentration Risk™;
SAFECHAIN™ Authority Separation Principle™;
SAFECHAIN™ Authority Challenge Right™;
SAFECHAIN™ Authority Verification Trigger™;
SAFECHAIN™ Authority Evidence Principle™;
SAFECHAIN™ Governance Authority Register™;
SAFECHAIN™ Authority Currency Principle™;
SAFECHAIN™ Authority Revocation Record™;
SAFECHAIN™ Expired Authority Risk™;
SAFECHAIN™ Retrospective Authority Risk™;
SAFECHAIN™ Ratification Transparency Principle™;
SAFECHAIN™ Outsourced Authority Principle™;
SAFECHAIN™ Multi-Agency Authority Principle™;
SAFECHAIN™ Human Authority Principle™;
SAFECHAIN™ Automated Authority Illusion™;
SAFECHAIN™ Authority Segmentation Principle™;
SAFECHAIN™ Authority Audit™;
SAFECHAIN™ Authority Culture Principle™;
SAFECHAIN™ Leadership Authority Principle™;
SAFECHAIN™ Governance Authority Dashboard™;
SAFECHAIN™ Authority Integrity Classification™;
SAFECHAIN™ Authority Maturity Model™;
SAFECHAIN™ Authority Legitimacy & Decision Rights Test™;
and associated governance, authority, delegation, safeguarding, decision-rights, accountability, challenge, monitoring, validation, remediation, assurance, oversight, certification, accreditation, training and implementation materials.
No part of this publication may be reproduced, copied, republished, adapted, translated, distributed, licensed, sublicensed, sold, commercially exploited or incorporated into another governance framework, authority methodology, delegation system, decision-rights model, safeguarding architecture, assurance programme, certification scheme, accreditation programme, training product, consultancy methodology, artificial-intelligence system, analytics platform, software product, digital platform or derivative commercial offering without prior written permission from the applicable rights holder, except to the extent otherwise permitted by applicable law.
Publication, disclosure or public accessibility of AUTHORITY-001™ does not grant any licence, permission or authority to reproduce, operate, commercially exploit, certify against, license or represent independent authorisation under the SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™.
No unauthorised person, organisation, consultant, auditor, investigator, assessor, reviewer, verifier, certification body, accreditation body, training provider, technology provider, software provider or other entity may represent itself as:
SAFECHAIN™ authorised to conduct formal AUTHORITY-001™ assessments;
SAFECHAIN™ authorised to undertake official SAFECHAIN™ authority or delegation reviews;
authorised to award SAFECHAIN™ Authority Integrity Classifications™, Authority Maturity ratings or associated credentials;
SAFECHAIN™ accredited to assess institutional authority or delegation capability;
authorised to certify conformity with AUTHORITY-001™;
authorised to issue SAFECHAIN™ authority, delegation, decision-rights or associated marks, seals, certificates, credentials or ratings;
authorised to license AUTHORITY-001™ or its proprietary methodologies to third parties;
unless such authority has been expressly and validly granted under applicable SAFECHAIN™ governance, certification, accreditation and licensing arrangements.
Any authorised implementation, authority assessment, delegation review, monitoring, validation, remediation, audit, assurance, verification, certification, accreditation, oversight, training, licensing, consultancy, artificial-intelligence implementation, technology implementation or institutional application may be subject to separate written terms, competence requirements, safeguarding requirements, quality controls, intellectual-property conditions, confidentiality requirements, surveillance requirements, brand controls, independence requirements, impartiality requirements, evidence-integrity requirements and governance obligations.
An authority system, delegation methodology, decision-rights architecture, safeguarding-authority system, consultancy service, training programme, artificial-intelligence application, analytics platform or software product incorporating concepts contained within this framework must not be represented as an official SAFECHAIN™ system, methodology, assessment, certification, accreditation or authorised implementation unless the relevant authority has expressly been granted.
References within AUTHORITY-001™ to generally established concepts including authority, delegation, decision rights, governance, accountability, quorum, recusal, professional competence, safeguarding, emergency authority, ratification, separation of duties, collective decision-making, audit and oversight do not constitute claims of exclusive ownership over those underlying concepts.
Similarly, references to legislation, regulation, constitutional documents, corporate-governance principles, professional duties, safeguarding requirements, human-rights principles, public standards, certification principles, accreditation principles or third-party intellectual property remain subject to the rights of their respective owners.
The proprietary claim relates to the original SAFECHAIN™ expression, selection, arrangement, architecture, terminology, classifications, methodologies, tests and framework materials developed by the author.
The use of the ™ symbol identifies names, concepts, methodologies and framework identifiers being asserted as proprietary brand or framework designations. It does not, by itself, constitute a representation that any particular designation has been registered as a trade mark in any jurisdiction.
Nothing within AUTHORITY-001™ should be interpreted as legal advice, a legal opinion concerning the validity of any particular decision or delegation, statutory guidance, regulatory approval, governmental accreditation or a substitute for applicable legislation, constitutional requirements, regulatory obligations, contractual provisions, professional standards or binding governance instruments.
Where AUTHORITY-001™ is implemented within a regulated environment, applicable legislation, statutory obligations, constitutional provisions, regulatory requirements, professional standards and binding governance requirements take precedence where required.
SAFECHAIN™ authority assessments, Authority Integrity Classifications™, Authority Maturity ratings or governance conclusions should only ever be represented within the precise scope, organisational context, period, evidence base, methodology, authority instruments, assumptions, limitations and conditions actually assessed.
A favourable authority assessment does not constitute a guarantee that every decision taken by an authorised person is legally valid, ethically appropriate, factually correct or otherwise compliant. Authority is one component of legitimate governance and should be considered alongside evidence, competence, integrity, conflict, safeguarding, procedural fairness and accountability.
Similarly, identification of an authority weakness should not automatically be represented as proof that a decision is legally void, unlawful, fraudulent, negligent or professionally improper. The legal consequences of authority defects depend upon the applicable legal and factual context and may require independent professional determination.
Any certification, accreditation or formal authority-assessment infrastructure subsequently established using AUTHORITY-001™ should maintain appropriate safeguards concerning competence, independence, impartiality, evidence integrity, safeguarding, transparency, conflicts of interest, methodological integrity, privacy, human oversight, challenge, reviewer competence and quality assurance.
Where serious governance or safeguarding failure occurs despite apparently documented authority arrangements, the authority architecture itself should be examined to determine whether assumed authority, informal power, shadow decision-making, delegation ambiguity, broken delegation chains, authority creep, responsibility-authority mismatch, safeguarding authority gaps, expired authority, conflicted authority, authority concentration, retrospective authorisation, unclear third-party authority or weak oversight contributed to the outcome.
Author and Framework Developer:
Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA
Founder — SAFECHAIN™
Framework: The SAFECHAIN™ Governance Authority, Delegation & Decision Rights Framework™
Framework Reference: AUTHORITY-001™
Framework Series: SAFECHAIN™ Governance Architecture Series — Governance Authority, Reasoning & Accountability
Version: 1.0
Year: 2026
Copyright: © 2026 Samantha Avril-Andreassen. All Rights Reserved.