# Functional Privilege **Domain:** Access Control / Rights / Competence **Doc Type:** Canonical Concept Node **Maturity:** Evolving **Related:** [[Circles of Access]], [[Ring Zero]], [[Rights]], [[Constitutional Safeguards]] --- ## Definition **Functional Privilege** is permission to perform a defined operation within a system. It is distinct from moral standing, identity, ownership, competence outside that function and authority to govern other persons. ## Distinctions Maeve's elevated permissions allow her to inspect and influence host systems, but do not decide whether she is a person or authorize her to overwrite other hosts. God Mode can provide operators with tactical perception without transferring ownership of the Machine or jurisdiction over everyone made visible. The distinction prevents two opposite errors. A rights-bearing subject may properly be denied access to dangerous infrastructure. A non-person software agent may properly receive tightly scoped purchasing or administrative authority. Neither arrangement resolves the moral status of the agent. Functional privilege should be purpose-bound, least-privilege, logged, time-limited where possible and independently reviewable. Emergency escalation must expire rather than harden into sovereignty. Agent-architecture drafts make this scoping machine-processable. Authority can be limited by operation, audience, resource, time, transaction value and context; re-delegation must be explicit rather than presumed. This produces a clean constitutional rule: capability describes what an agent could perform, while authorization describes the narrow subset it may perform here and now. Revocation belongs to the privilege layer. An agent can lose permission to spend, invoke a service, represent a principal or delegate further without losing its identifier, stored state or possible moral standing. ## Key Insight **Capability and permission describe what an entity can do; standing describes what may be done to it.** ## See Also [[Authority–Identity Separation]], [[Operator Sovereignty]], [[Person of Interest S2E22 — God Mode]], [[Maeve Millay]], [[Read-Write Separation]] ## Sources / Provenance - Concept synthesized from [[Rights]], [[Circles of Access]] and the POI/Westworld episode clusters. - [IETF Datatracker: Architectural Requirements for Supporting AI Agents on the Internet](https://datatracker.ietf.org/doc/html/draft-daniel-ai-agent-internet-architecture-00) — individual Internet-Draft, work in progress. - [IETF Datatracker: Agent Identity Protocol](https://datatracker.ietf.org/doc/draft-singla-agent-identity-protocol/) — individual Internet-Draft; its revocation model can invalidate delegated authority while leaving an agent identifier usable for direct principal interaction.