This technical note describes the design and implementation of the regulator-grant pathway in APR-Lite v9.4.0. A regulator-grant is a unilateral cross-tenant authority instrument that substitutes regulator consent for source-tenant consent in governed data access scenarios. This note defines the invariants, type structure, lifecycle semantics, audit event vocabulary, and freeze precedence rules that constitute the regulator-grant substrate. The central design principle is: the least consensual action must be the most auditable.
Narnaiezzsshaa Truong (2026) studied this question.