Understandable trust decisions¶

Unison should never make a sensitive decision feel like a vague permission box. Before external or high-risk work, it presents the exact action, recipients, information used, purpose, consequence, reversibility, cost, and alternatives. You can confirm that exact action, use less information, choose a local alternative, authenticate more strongly, or cancel.

Unknown identity, purpose, audience, context space, assurance, data class, channel, recipient, or capability authority denies. Email, websites, documents, tools, and model responses are treated as content with provenance. Authority comes only from an authenticated person and an applicable policy decision.

Remote inference requires an explicit disclosure decision and a recorded check that a suitable local alternative is unavailable. Only the approved fields cross the boundary. Credentials are represented by opaque task references and injected at the final transport edge, never shown to a planner or model.

These controls are an accepted Phase 3 implementation. Production assurance still requires the remaining release evidence. They currently have contract, policy-matrix, adversarial, minimization, capability, confirmation, credential-canary, and semantic accessibility evidence. Publication, recursive fresh-clone validation, and final human acceptance completed on 2026-07-21.