The scope of independent judgment entrusted to a system: decision subjects, permissible consequences, required evidence and conditions, and limits on adopting changes to its authoritative operating model. The permission envelope records and enforces those bounds.