Pronaos

OnePass

An identity that travels. Authority that stays precise.

What it is

OnePass establishes persistent identity and connects it to accepted credentials, organizational relationships and delegated authority. It supports humans, organizations, applications, AI workers and devices as distinct participants.

How it works

Establish identity

Associate the participant with its persistent identity and accepted verification.

Express authority

Connect each participant to the institutional permissions relevant to their work.

Present and recheck

Reuse the accepted identity or credential in another relationship while the receiving institution checks its own rules and current status.

How it connects

OneVault: Connects the identified holder, issuer or recipient to protected supporting records.
TAG: Supports institutional control over connected activity.
Origin Artifact: Supports accountability in operational records.

Why it matters

Identity can remain stable as roles and organizations change. A receiving institution can reuse trusted evidence while retaining its own decision about acceptance and access.

A human, AI worker, application or device can be identified separately from the authority it holds. That distinction lets the environment evaluate the particular action being requested.

Illustrative application

A named technician works at an off-campus facility.

A scanned badge identifies the claimed participant. Authentication and the current delegation establish whether that technician may service that particular device during the approved window.

A name, badge or verified identity alone does not grant access. Expiry, revocation and the receiving institution’s rules still apply.