Access, Admission & Permissions¶

← Back to Mechanisms by Solution Family

Solutions that decide who or what may enter, act, consume capacity, or cross a protected boundary, including eligibility rules, quotas, credentials, and scoped authority.

29 mechanisms across 4 solution archetypes in this solution family. A mechanism inherits the primary family of the archetype it instantiates; family is about the move the solution makes, not the domain where it originated.

Accountable Gatekeeping Design¶

Design choke-point selection so passage decisions use explicit criteria, bounded discretion, traceable reasons, review paths, and distribution audits rather than opaque gatekeeper preference.

10 mechanisms · View full solution archetype

Algorithmic Ranking Audit — Tests an automated ranking or recommendation gate for the hidden demotion, bias, drift, and objective-mismatch that its published outputs alone never reveal.
Appeals or Reconsideration Workflow — Gives a contested decision a defined second path — timed review, new-evidence handling, and a route to escalation — so a denial can be corrected or confirmed by someone other than the gate that made it.
Blind or Double-Blind Review — Withholds identity and status signals from the decider so passage turns on the merits of the case rather than on who is behind it.
Editorial Standards Board — A standing body that owns the gate's purpose, authority, and criteria — setting the standard, resolving the hard cases the rules don't cover, and revising the rules as the world changes.
Gatekeeping Decision Log — Records every passage decision — outcome, reason code, decider, evidence, timing, and any override — so the gate's choices, including the denials no one downstream can see, become an inspectable trail.
Independent Review Panel — Puts contested and pattern-level gate decisions before reviewers structurally separated from the original gatekeeper, so the second look is not the first one wearing a different hat.
Published Selection Criteria — Publishes the standards and worked examples a gate selects on, before the fact, so anyone can see what passage actually requires.
Quota or Portfolio Guardrail — Sets a hard floor or ceiling on the mix of what passes, so case-by-case selection cannot quietly erase a distribution the gate is meant to protect.
Random Sample Audit — Pulls a random sample of gate decisions — including the rejected and demoted ones — and re-judges them to measure consistency and surface criteria nobody wrote down.
Reasoned Decision Notice — Gives an affected party the specific reasons the gate decided their case as it did — enough to understand it, fix it, or contest it.

Least-Privilege Access Design¶

Grant actors only the access needed for their role, task, or context, with escalation and audit paths for exceptions.

5 mechanisms · View full solution archetype

Access Control List — Lists which actors or groups may take which actions on a specific resource, so that anyone not on the list is denied by default.
Access Log Review — Examines records of how permissions were actually used — successful accesses, failed attempts, escalations, and anomalies — to detect misuse, dormant grants, and scope failures after the fact.
Access Recertification — On a fixed cadence, asks each resource owner or manager to review the access their people hold and explicitly confirm, narrow, or revoke it, so grants that outlived their purpose expire instead of accumulating.
Need-to-Know Policy — States that access to sensitive information is granted only when it is genuinely necessary for a legitimate, authorized purpose — never by rank, clearance, or curiosity alone.
Permission Matrix — Lays actors and roles against resources and actions in a single reviewable grid, so gaps, over-grants, and dangerous combinations become visible at a glance.

Priority-Based Admission¶

Admit candidates at a boundary by an explicit priority policy so scarce capacity is reserved for higher-priority flows.

0 mechanisms · View full solution archetype

No mechanism currently instantiates this archetype as its primary archetype.

Property Rights Bundle Governance¶

When access to a resource must be stable, enforceable, and transferable, define the property-rights bundle—use, exclusion, transfer, income, stewardship duties, limits, and remedies—rather than treating ownership as a single undifferentiated claim.

14 mechanisms · View full solution archetype

Access License or Permit — Grants a scoped, conditional, revocable permission to use a resource — without handing over any ownership of it.
Anti-Commons Clearance Process — Dissolves gridlock when too many separate rights-holders can each veto a resource, by consolidating or pooling the scattered claims into usable form.
Benefit-Sharing or Royalty Agreement — Splits the income a resource generates among defined stakeholders on a standing formula, so the right to benefit is shared without the underlying resource changing hands.
Commons Access Rule — Governs a shared resource that no one owns exclusively, setting who may draw from it and how much, so collective use does not collapse into overuse.
Compensation or Takings Review — Tests whether the public interest justifies overriding a private right — and, if it does, what compensation makes the compulsory taking legitimate.
Dispute Adjudication Clause — Pre-commits the parties to a named forum, governing law, and remedy path for resolving conflicts over a resource — decided before any conflict arises.
Easement, Covenant or Use Restriction — A durable burden that attaches to the resource itself — carving out a specific right for a non-owner, or forbidding a specific use — and travels with it through every sale.
Exclusion Enforcement Protocol — Turns the right to exclude into an operational routine — how the boundary is watched, who gets challenged, and what remedy follows a breach — so exclusivity is enforced rather than merely asserted.
Property Rights Impact Assessment — Tests a proposed rights arrangement before it is enacted for who gains, who is dispossessed, and whether it risks overuse or anti-commons gridlock — so the distribution of sticks is chosen with eyes open.
Reversion or Abandonment Rule — Sets the conditions under which a granted right lapses and returns — non-use, breach, or a fixed sunset — so rights don't ossify in hands that no longer use or deserve them.
Rights Bundle Matrix — Lays ownership out as an explicit grid of who holds which stick over which resource, so 'who owns it?' dissolves into a cell-by-cell map of use, exclusion, transfer, income, and modification rights.
Stewardship or Nonwaste Covenant — Binds a holder to a schedule of care-and-nonwaste duties that run with the resource, so a right to use never becomes a license to degrade what successors and the public inherit.
Title or Entitlement Registry — Maintains the authoritative record of who holds which entitlement, how they came to hold it, and what encumbrances ride on it, so claims can be trusted and traced instead of relitigated.
Transfer, Assignment, or Sale Contract — The instrument that moves specified sticks from one holder to another — fixing which rights convey, on what terms, and with what warranties — so a transfer is clean, complete, and hard to unwind.