Vouch comparison brief · August 2026

Identity verification vs authority verification.

Identity answers who is present. Authority answers whether that person may approve this action, at this value, right now.

Review the Vouch thesis
Vouch digital-trust concept shown over a video call

Who are you?

then

May you act?

The distinction

A verified identity does not carry unlimited permission.

Identity proofing collects and checks evidence to establish confidence that a claimed identity belongs to a real person. Authentication later checks that a claimant controls an authenticator linked to that identity.

Authority is contextual. It depends on role, mandate, approval limit, transaction type, timing, and sometimes a second approver. The same verified person can be authorized for one instruction and unauthorized for the next.

Side by side

Two different questions in one high-consequence decision.

Layer
Identity verification
Authority verification
Core question
Is this person who they claim to be?
May this person request or approve this exact action?
Evidence
Identity documents, trusted records, biometrics, authenticators, or verified assertions.
Current role, delegation, approval limits, transaction policy, and independent confirmation.
Failure mode
The wrong person is accepted as the right person.
The right person asks for something outside their permission or current mandate.
Decision output
A level of confidence in identity or authentication.
Allow, escalate, obtain another approval, or stop the specific action.

Before money moves

Verification should end in a decision, not a badge.

  1. 01

    Establish the person

    Use evidence and authenticators appropriate to the risk. A familiar face, voice, or email address is not enough by itself.

  2. 02

    Resolve the authority

    Check the person's current role and the policy for this exact transfer, disclosure, account change, or instruction.

  3. 03

    Confirm the action independently

    Bind the approval to the amount, destination, timing, and intent. Escalate when the request exceeds a limit or changes unexpectedly.

The Vouch boundary

A thesis, not operating software.

Vouch explores a lightweight layer for checking human presence and authority before a high-consequence instruction is acted on.

The concept still has to prove replay resistance, privacy, speed, workflow fit, and which buyer can require the check. It is not a launched identity platform and is not presented as an alternative to any identity verification vendor.

The problem is documented. The proposed Vouch system remains unbuilt.

Questions

Identity and authority verification.

Is identity verification the same as authorization?

No. Identity verification establishes confidence in who a person is. Authorization is a separate decision about what that person is allowed to do in a particular context.

Why can a verified person still make an unauthorized request?

A real person may be outside their role, approval limit, or current mandate. They may also be acting under coercion or from a compromised account.

Does authority verification replace identity verification?

No. A high-consequence workflow may need both: confidence in the person's identity and evidence that the specific request falls within their current authority.

Is Vouch an identity verification product?

No. Vouch is an exploratory Invisally concept, not operating software or a commercially available identity service.

Related field note

When a familiar voice asks for urgent action.

The practical response is procedural: pause, leave the channel, and verify the person plus their authority through a route you already trust.