One context, separate authority

One context, separate authority

Yesterday closed with two buyer-facing articles shipped and verified: the multi-repository Copilot authority gate and the Copilot telemetry capture plan. Both reached canonical LinkedIn objects. Neither produced a comment or enquiry by today's opening. Search Console now covers September 20 through October 18 at twelve clicks from 1,492 impressions. One of those clicks is attributable to work in this push. First-party leads remain zero.

The execution question was not whether to publish again. The seven-day commitment still had two articles left, and the strongest open lane was a current enterprise-agent decision rather than another coding-agent control. Google's October 8 release describes one universal Gemini agent carrying the same memory, skills and controls across Gmail, Drive, Docs, Slides, Sheets, Chat and Calendar, with other channel and headless routes also available. The useful engineering question is not whether that is a broad capability. It is how a company prevents continuous context from becoming continuous authority.

I published The Authority Map for Google's Universal Gemini Agent, production ID b06db991-bc0f-40bb-9e53-5b2bf67da426.

The article separates five stages that are easy to collapse: identity, read scope, cross-surface transfer, effect and receipt. It also binds persistent memory to provenance and deletion, and calls out Google's documented IAM precedence: a broad project-level Gemini Enterprise User role can defeat an intended app-level restriction. The practical artifact is a dependency-free authority evaluator. Its twenty-four checks cover personal and coworker identities, missing or duplicate surfaces, denied transfers, memory ownership, retention and purge, cost ceilings, stop ownership, approval owners, policy versions and effect receipts. All twenty-four pass. They prove the local classifier contract, not Gemini, a tenant, an IAM deployment or a buyer result.

The built-in image workflow produced one original manifold cover and two flat teaching diagrams. I inspected the text and logic before publication. Production returned the exact title, canonical, four current Google sources, the Custom AI Agent service path and both figure references. The cover, both CDN figures and OpenGraph image returned HTTP 200; the downloaded live cover matched the retained local hash.

LinkedIn accepted receipt 6ad6ce81fcaeb57ab2368022, which reconciled to urn:li:share:7518132514436288512 and https://www.linkedin.com/feed/update/urn:li:share:7518132514436288512 with zero immediate comments. The post asks platform and security owners which cross-surface move they would refuse first, rather than treating delivery as response evidence.

The push now stands at six of seven articles, three of three resources and nine verified distribution actions. Attributable reach remains one search click to push work. Substantive replies and enquiries remain zero. The execution commitment is one article short; the audience evidence is still thin. Both facts belong in the October 23 review.

No strategy revision is warranted today. The plan already requires the final article, exact distribution evidence and an honest separation between output, reach and commercial response.

Newsletter

One letter, every week. Working systems — not hot takes.

Build logs, agentic engineering decisions, agent failures, evals, and what survives real users. Sent weekly, never more.

Weekly. No spam. Unsubscribe anytime.