AI governance begins with each person.
PAVREN is open institutional infrastructure for governing AI use and actions. Its specification and artifacts help establish legitimate authority, boundaries and evidence. Start with an everyday task, then see how those controls can be put to work.
Your AI can do it. Who authorized it?
An agent prepares a refund. It can access the payment system but attempts to change the destination bank account.
A DEFINITION, NOT JUST A LABEL
Why PAVREN is institutional infrastructure
“Institutional” identifies the authority that governs an action, not a requirement that PAVREN be a government agency or regulator. “Infrastructure” means its specification, instruments and contracts can be adopted by different organizations and systems, beyond a single application.
Legitimate source, competence, delegation and boundaries.
Govern 3.0, 21 controls, annexes, profiles and adoption decisions.
Formal semantics, JSON Schema, OpenAPI and conformance corpus CF0–CF5.
Checks at integrated action points, with results and reconstructable evidence.
PAVREN does not grant permissions by itself or replace institutional authority. Read the complete definition and architecture →
AI should not operate on blind authority.
When an AI executes an action because it has technical access, without checking who is authorized to permit that action, blind authority appears.
Technical capability makes an action possible. Only legitimate authority can permit it.
Start with a real activity, not an institutional questionnaire.
Distinguish what can be proposed, what may be executed and who answers for it.
When it matters, reconstruct what was requested, authorized and done.
Start with what you already do.
You do not need to learn 21 controls before taking a first step. Open the AI First Aid Kit, choose a real activity and produce one practical measure.
Choose what you need to achieve
No mandatory diagnosis. Pick one path, complete a task, and return whenever you need.
Turn the idea into an action you can understand.
Learn from a startup release or a real protocol delegation scenario. Both are interactive experiences, not documentation gates.
From your idea to a first governed release.
Choose your product track and obtain the minimum editable evidence — no account required.
Start with your product →INTEROP · AP2 / OAUTHA valid signature can still be unauthorized.
A payment that exceeds Ana’s authority reveals what the protocol can prove—and what PAVREN must check.
Explore the Ana case →From principle to instrument.
Govern 3.0 is an open specification. The explorer makes it readable, searchable and linked to original assets.
EXPERIENCE · PEOPLE · AUTHORITY
PAVREN becomes clearer through real stories.
What we learned designing agents for CAINCO, applying the approach inside DAcorp, and asking who may authorize an action.
CAINCO: three functions, one responsibility when designing AI agents
From Administration to Procurement and Accounting: designing three governed agents around institutional processes without transferring human approval powers to AI.
Read story →CASE STUDY · FIRST INTERNAL ADOPTERDAcorp: building our own infrastructure while developing products
Our own product work became the first environment in which to apply PAVREN’s questions. What we learned about connecting experience, engineering and authority.
Read story →STORY · ORIGINSWhy I created PAVREN: authority before autonomy
After years working with systems and institutions, one question kept returning: a technology’s ability to act does not establish its right to act.
Read story →INSIGHTS · BLIND AUTHORITYBlind authority: when an AI can act without legitimate permission
The problem does not always begin when technology fails. Sometimes it begins when it works—and no one checks who was entitled to authorize the action.
Read story →OPEN INFRASTRUCTURE · OPTIONAL SERVICES
Open to use. Expert help when you need it.
Govern 3.0
Read the official corpus, download the editable instruments and reuse the technical specifications under their stated licenses.
Read Govern without an account →Adoption and integration with DAcorp
Organizations may seek implementation, training or integration services. These are not required to use the public Govern corpus.
Explore adoption options →No one should have to govern AI alone.
Start with one measure. Explore infrastructure that connects people, authority and action.