The product model: Organization → Project → Goal → Department → Seat → Human/Agent → Provider/Model → Capability → Tool → Authority → Work → Approval → Execution → Evidence → Outcome → Audit.
Models provide intelligence; seats define responsibility; authority determines permission; evidence establishes what happened. Authorization is evaluated server-side on every consequential request.
Evidence: app/authority.py; tests/test_authority.py
A requirement's origin (corpus, note) is provenance. Only proof evidence — commit, report, audit, handoff, run — can move it to SATISFIED.
Evidence: app/objectives.py; GET /api/objectives/coverage