When a holder authorises a property to spend on their behalf, flashyID issues a grant: capped, scoped to one purpose, revocable, and honoured only after the consent gate has run. It is never the keys — an allowance for one thing, that the holder can take back instantly.
Delegation is attenuation, never inheritance
A grant can be narrowed into a child grant, but a child can never hold authority its parent lacks — never a larger cap, a later expiry, or a broadened purpose. The rule lives in code, so no product can forget it, and every spend is checked against the cap before anything is written.
Questions
What is an attenuated grant?
A delegated spend authority that is a strict subset of what the granter holds: a capped, scoped, revocable allowance. A property can act within it without ever holding the holder’s keys, and the holder can revoke it at any time.