Flashy ID

Flashy ID answers the question every other property eventually asks: who may act, on whose behalf, and with what authority. It is an OIDC provider plus a grant kernel, and its governing rule is that delegation is attenuation — a grant may only ever carry a subset of the granter’s scopes, so a child can never hold authority its parent lacks.

The second rule matters as much: enforcement ships before minting. Identity that nothing checks is theatre, so the gate that decides ALLOW, DENY or ESCALATE exists before any way to issue authority does.