Owner-controlled
The individual remains in control of whether authority exists and can end it without asking the recipient.
The category
SDARC
Sovereign Delegated Access and Revocation Chain
A protocol that separates holding data from the authority to use it. Not better security around the copy. A different relationship to the copy: the holder borrows authority, and the owner can end the loan.
Sovereignty Theft
The enemy is irrevocable authority.
Every upload quietly transfers authority away from the individual. Permanently. SDARC is the architecture that makes that transfer unnecessary: live authority, delegated by the owner, usable for as long as needed, and revocable at any time.
Withdraw consent and future use ends, including after an older system state is restored. SDARC does not unsay what was already disclosed. It stops the raw record from becoming a reusable file in the first place.
What SDARC is not
- Not federated identity
- Not a consent dashboard
- Not a promise to delete
- Not permanent authority handed to a recipient
It binds delegated access to continuous, revocable authority while the individual keeps control.
The guarantees
Four properties. One architectural correction.
Zero Trust corrected implicit trust. SDARC corrects Sovereignty Theft. Enforced by cryptography, not by policy, trust, or a promise to delete.
Exact-scope
Permission is limited to the approved recipient, purpose, data, operation, and lifetime.
Revocable
Withdrawn authority can no longer be used, and restoring an older system state does not revive it.
Verifiable outputs
Applications receive the approved result and evidence of its scope, not reusable source data.
For the person
A biometric prompt. That is the whole experience.
They approve, or they do not. Control does not end at approval. Every grant can be revoked by the person whenever they choose: all access at once, a single type of data, or an entire area. Complete. Immediate. Asking no one's permission.
Start in your workspace
Install the SDKs, create an intent, and prove delegated access in sandbox. Owner keys remain on the owner's device. Your server stores ciphertext and receives only authorised results.
$ npm install @zerogrant/browser @zerogrant/node
The internet learned how to identify people.SDARC teaches it how to leave authority with them.
Build with ZeroGrant.
ZeroGrant builds SDARC. Delegated by consent. Bounded by purpose. Revocable by design. Provable by cryptography. Sovereign for life.