The authorization plane must be more trustworthy than what it authorizes. Kastra's own security model — signed builds, sealed keys, tamper-evident evidence.