Consequence-time authorization is a fresh exact-action authorization decision made immediately before a proposed consequential effect becomes real.
An approval can be valid when issued and invalid when execution occurs. Mandate, identity, policy, resource state, legal basis, limits or evidence may change between planning and effect. Consequence-time authorization resolves the authoritative state again at the boundary where the effect would become real.
Current mandate, rights, purpose, scope, constraints, authoritative state and required evidence for the exact proposed consequence.
Prior approval is not necessarily a current right to act. Capability is not authority. Access is not authorization.
In the VALO architecture, REHT performs this boundary evaluation and binds the outcome to the RACS decision contract: ALLOW / DENY / ESCALATE. The Gateway/PEP enforces the decision and Veritas preserves evidence.
Execution Authorization Infrastructure · Governed Effect Path · REHT quickstart