Use Cases
Public decisions must be explainable to the public.
Administrative action carries a duty to give reasons. A benefits determination, a permit denial, a licensing decision — each must be explainable to the person it affects and defensible on appeal. An agentic system that cannot produce the authority behind a determination, and the basis on which it was made, cannot lawfully make one.
Government also operates under transparency obligations that private institutions do not face. Records requests reach the working file, not just the outcome. Legislative oversight reaches the process. That means the evidentiary bar for agentic execution in the public sector is higher than in most regulated industries, and it applies from the first production workflow rather than after an incident.
Orcher fits the constitutional structure rather than working around it. Delegated authority already exists in statute and in every agency's delegation orders. The Role Identity Fabric expresses those delegations directly, so a determination issued under a caseworker's directive carries exactly the authority the delegation grants. The Audit Ledger produces the reasoned record that due process requires, and residency controls keep constituent data inside the jurisdictions law permits.
Where liability lands
Administrative law demands a named decision-maker and a reasoned basis, records-retention statutes reach the working file, and emerging state ADMT rules add notice, human-review, and risk-assessment duties on top. Procurement authority is bounded by warrant, and constituent data is bounded by jurisdiction. Orcher enforces delegated authority at execution and writes the reasoned, retainable record those obligations assume.
Pressure points
01
An appellant is entitled to know why. A determination whose rationale cannot be reproduced is vulnerable regardless of whether the outcome was correct, and reversals at volume become a program-integrity finding.
02
Automated decision-making technology rules increasingly require notice, opt-out, human review, and documented risk assessments. Programs deploying agents without an evidence layer will be building compliance artifacts retroactively.
03
Retention schedules and public-records law cover the working record. Vendor-side logs the agency cannot produce, export, or retain do not satisfy that obligation.
Named use cases
Real government & public sector workflows, each bound to the authority that permits it and reconciled against the systems of record before anything commits.
01
Determinations execute under a caseworker's delegated authority and reconcile against statutory criteria, verified income data, and prior determinations before issuance. The reasoned basis is written at decision time, not assembled for the hearing.
02
Reviews produce a hashed, reasoned record suitable for appeal, with code and ordinance versions in force on the application date recorded alongside the determination.
03
Case actions are traceable end to end under a named public servant, with jurisdictional residency enforced so resident data never leaves the boundary law permits.
04
Solicitation evaluation and contract actions carry the contracting officer's warrant authority. Actions above warrant escalate automatically, which is the control auditors most often find missing.
05
Award and drawdown decisions reconcile against grant terms, allowable-cost rules, and subrecipient risk status before funds move, producing an evidence chain for single-audit review.
06
Redaction and release decisions execute under a records officer's authority with exemption rationale recorded per document, which is exactly what a disclosure challenge tests.
01 · In depth
Government does not need to be persuaded that authority must be explicit. Warrants, delegation orders, and signature authority matrices already define who may bind the agency and to what limit. The problem is that none of those instruments were machine-readable, so agentic deployment quietly moved execution outside them.
Orcher makes the delegation the runtime control. A directive can only exercise authority its issuer actually holds, expiring when the directive completes. Auditors get something better than a policy binder: a record of the authority that was in force at the moment of each action.
02 · In depth
The obstacle to agentic adoption in government is not capability. It is the reasonable expectation that a public institution can explain itself. A program that automates determinations and cannot answer 'who decided, and on what basis' will lose the political mandate to continue, no matter how good the outcomes look in aggregate.
Evidence is what protects the program. A verified execution cycle gives agency leadership a defensible answer for oversight, an appellant a real basis to contest, and a records officer something they can lawfully retain and produce.
Components engaged
These are the components that carry the weight in this industry. Each one is a control, not a recommendation.
Layer 1
Plain language becomes the permanent record of what was asked.
Layer 1
Binds the directive to a human and a role, cryptographically and revocably.
Layer 1
Hashes the verified action permanently. Evidence, not logs.
Layer 2
Training exclusion and data boundaries verified before routing.
Layer 1
Verifies the proposed action against systems of record before commit.
Mechanism
Four stages, in order. Layer 1 components gate execution; Layer 2 components run continuously and never block.
01
The directive is stated and frozen
A delegated officer holding the statutory authority for the determination states the outcome in plain language — for example, "Determine eligibility for this application under the current rule set." It is signed and versioned before any model is called.
02
Authority is minted for this directive only
The Role Identity Fabric resolves the person and their current government & public sector role, then mints task-bound, time-bound credentials — median scope around 14% of the underlying account.
03
The proposed action is verified, not reviewed
Before a benefit determination, licence decision, or citizen-facing notice commits, the Logic Scrubber re-derives the facts it depends on from Case management, eligibility rules, statutory authority, records retention schedule. The proposed determination applies a rule version that was not in force on the application date — that is a halt, not a warning.
04
The cycle is hashed into the record
The action, the human, the role, the verification and the cost are hashed together. An ombudsman, an inspector general, an appeal, or judicial review receives an evidence package, not a reconstruction project.
Operational contract
What this is not
This is not automated decision-making without a human
Every determination resolves to an officer holding delegated statutory authority. Removing that binding is exactly what makes automated determinations indefensible on appeal.
Failure behaviour
The proposed determination applies a rule version that was not in force on the application date. The directive halts, nothing partial is written, and the halt is recorded with its reason.
Rollout outcomes
Appealable decisions
Each determination exposes the officer, the rule version, and the verified facts.
Sovereign routing
Citizen data stays inside the jurisdictions law requires, proved per call.
Retention satisfied
Records are append-only and held for the statutory period.
What the record proves
Orcher writes the proof at execution time. Nothing here depends on reconstructing intent from logs after the fact.
Appealable
Every determination reconstructable for a hearing or an appeal
Named
A public servant of record behind each action taken on a citizen
Disclosable
Records structured for freedom-of-information response
Deployment path
One workflow, one role, one verified execution cycle. Scope widens only after the first cycle holds up under review.
01
Start with one determination or service workflow where a citizen has a statutory right to an explanation.
02
Delegated authority — the statutory basis a public servant actually holds — is expressed in the identity fabric and inherited by every agent step.
03
Eligibility rules, the regulation version in force, and the case record are verified before a determination is issued.
04
Appeal, audit and disclosure all read the same record: authority, directive, verification, result.
Questions
Direct answers, in the language of the people who carry the consequence.
No. A public servant holding delegated authority issues the directive; agents execute inside that scope. The decision remains attributable to a person, which is what administrative law requires.
The verified execution cycle reproduces the rule version applied, the evidence checked and the authority relied on — the substance of an adequate statement of reasons.
The data boundary is verified per call. Work that must stay in-jurisdiction routes only to providers that satisfy that constraint, and calls that cannot are refused rather than downgraded.
The Immutable Audit Ledger is a records system by construction: hashed, time-ordered, and queryable by subject, role and directive.
The control plane is deployment-flexible; routing policy determines which providers and which regions are ever eligible for a given directive.
Request a briefing
A working session, not a pitch: your workflow, the role that holds authority for it today, and the seven components that would govern it. Sixty minutes.
Go deeper
The solutions that carry this industry, the research behind the model, and the neighbouring industries with the same accountability problem.
Solution
Verify where data goes before it goes there.
Solution
Turn agent activity into evidence a regulator will accept.
Solution
Authority belongs to a person and a role — never to a service account.
Research
The full thesis: why oversight failed and what replaces it.
Research
How a directive is cryptographically bound to a person and a role.
Industry
The same accountability model, applied to military & defense.
Industry
The same accountability model, applied to healthcare.
Industry
The same accountability model, applied to education.
Keep reading
Surfaced automatically from the Orcher components this industry relies on.
Layer 1
Plain language becomes the permanent record of what was asked.
Layer 1
Binds the directive to a human and a role, cryptographically and revocably.
Layer 1
Hashes the verified action permanently. Evidence, not logs.
Layer 2
Training exclusion and data boundaries verified before routing.
Layer 1
Verifies the proposed action against systems of record before commit.
Solution
Turn agent activity into evidence a regulator will accept.
Solution
Authority belongs to a person and a role — never to a service account.
Solution
Verify where data goes before it goes there.
Use case
Clinical authority cannot be delegated to a process.
Use case
Validated systems demand verifiable authority.
Use case
Decisions about students require an accountable educator.
Every deployment starts with one workflow, one role, and one verified execution cycle. Bring the workflow; we will map it to the seven components before you commit to anything.
Case studies
Modelled reference scenarios with the measurement window, the components enforced and the numbers attached. Each one downloads as a PDF.
Government & Public Sector
Non-human identities outnumbered staff 144 to 1. Role-scoped authority made every one of them answer to a caseworker who could be named.
