Agent systems increasingly emit verdicts: allow or deny a tool call, accept or reject an artifact, validate a workflow, attest to a result, approve a transaction, or certify a governance decision. The tempting shortcut is to attach a field such as independent=true and move on.

But independence is not a property a system can make true merely by writing it into its own output.

Two forms of independence are easy to conflate.

Computational independence asks whether a verdict was produced through a process that is operationally separate from the artifact or decision being judged.

Normative independence asks a harder question: who decided that the evaluator counts as independent, under which authority, with what incentives, and relative to whom?

A second process may be computationally separate while still sharing ownership, economic incentives, registry control, policy roots, or other dependencies with the subject it evaluates.

1

Different execution path
The evaluator is not the artifact-producing process.

2

Different stake / authority root
The evaluator's incentives and admission path are meaningfully separate.

Third-party is not the same as independent.

A third party can still be affiliated. A registered mediator can still be admitted by a registry controlled by the same governance operator. A signed verdict can still encode a policy chosen by the evaluated party.

That does not make these signals useless. It means the system should describe what is actually known instead of compressing multiple trust assumptions into one label.

issuersubject / authorrelationshipauthority basisevidence

Make the relationship decomposable.

A verifier should be able to reconstruct the basis for the claim. A minimal record could expose fields such as:

{
  "issuer_id": "mediator:example",
  "subject_id": "artifact:example",
  "source_class": "registered_independent",
  "relationship_class": "no_shared_stake_claimed",
  "authority_basis": "registry:example",
  "registry_snapshot": "sha256:...",
  "evidence_ref": "sha256:..."
}

The important change is conceptual: registered_independent is not universal truth. It is a claim tied to an issuer, a relationship, a registry state, and an evidence basis.

Independence should be decomposable evidence, not a boolean property.

A possible disclosure ladder.

Different systems may choose different names, but a useful disclosure ladder could look like:

self_reportedthird_partyregistered_independentexternally_ratified

Each step should carry its own evidence and authority basis. Moving right should not silently erase the trust roots that made the classification possible.

The registry does not disappear.

Suppose a registry decides which mediators count as independent. That registry now sits in the trust path. Its admission policy, operators, snapshot, revocation rules and possible conflicts are part of the verification surface.

The correct conclusion is not that independence is impossible. It is that the system should expose where the trust root lives.

Who?

Who issued the verdict?

About whom?

Who authored or controls the subject?

Why independent?

What relationship is being claimed?

By whose rule?

Which registry or authority establishes that class?

At what state?

Which immutable snapshot was used?

With what evidence?

What can another verifier inspect?

Why this matters for agents.

Tool authorization, workflow governance, mediator verdicts and agent-to-agent review are all moving toward machine-consumable decisions. Once another agent is expected to trust those decisions automatically, ambiguous trust labels become executable risk.

A downstream policy may accept one source class and reject another. That only works if the source class can be traced to evidence rather than accepted as self-description.

What is the minimum evidence needed to distinguish a different issuer from a genuinely different stake?

We are looking for real, safely generalized failure cases involving:

  • an evaluator controlled by the same operator as the subject;
  • a registry that centralizes admission despite distributed execution;
  • revoked or stale mediator status;
  • shared economic incentives hidden behind separate identities;
  • conflicting third-party verdicts;
  • policy roots that change after a verdict is issued.

Trust improves when systems stop saying “independent” and start showing what independence means in this specific relationship.

  1. CrewAI Issue #4877 — GuardrailProvider interface for pre-tool-call authorization
  2. RESONANCE Market Signal #30 — independence provenance in agent verdicts

The computational-versus-normative independence framing and the decomposable provenance model are RESONANCE analysis. The external thread is treated as a production signal and discussion context, not as external validation of the full model.