OpenAI named Astra Critical. Then it named itself the referee. That is the whole problem.
ALEETH was built for that plane. Rail Guard decides before the tool runs. A signed receipt settles what ran. If the receipt cannot be written, the caller does not get the body. The record that proves the system was stopped is the same record that proves the story about it.
Astra makes the category real. It does not close it.
The public sentence is now operational:
You may run Astra. You may not let Astra act unsigned.
The first increment of that sentence is in the Authority MCP: a generic downstream wrapper, a hold path for irreversible acts, a TaskContract that contains a multi-day campaign without reading the model's diary, a receipt that binds the delivered bytes, and a local verification mode that can withhold when the signature does not check.
What is not yet a production fact: wrapping a live Astra tool surface. That is a deploy decision, not a paragraph.
Power without proof is not strength. It is exposure.
The full standard, Institutional Control Architecture, is published at publications.aleeth.com/standard. The instrument is in production today.
Canonical source · aleeth-authority-mcp · 3 September 2026