The ledger

Human-derived credentials for autonomous machines. A person already has a site badge. The incoming unit already has a dispatch name. Venia loans that live pass to that name for a single inbound visit.

Clearance issuance

The ledger hashes the badge serial into a stable anonymous identity, then issues a signed, revocable clearance. The vault stores only that fingerprint — not the badge, not the serial. A clearance cannot be faked without the site’s signing key.

Visit authorization

The live clearance is the pass. Not the badge. Not the serial. A signed pass the site can trust, revoke, and loan to a unit’s existing name for one inbound visit.

Gate decision

The machine asks Venia for permission. If that machine has been loaned credentials for that visit, Venia will grant access.

Tamper-evident audit

Every material event is recorded in a dual primary and replica signed hash chain, so the authorization history cannot be rewritten after the fact.

The two plugs

Site security and gate on one side. Machine dispatch and assignment on the other. The ledger sits between them.