External Admission Boundary for Pre-Execution AI Action Control

This document defines an external admission boundary for pre-execution AI action control. The boundary is a control point at which execution cannot proceed unless an allow decision has been issued by an authority outside the executor trust domain. The document distinguishes evidence records, policy evaluations, approval logs, and signed pre-execution authorization records from the stronger boundary property of authority separation. A signed pre-execution record can prove that a decision was made before dispatch. It does not by itself prove that final execution authority was outside the executor trust domain. This document provides a practical test for determining whether a claimed pre-execution control is a real external admission boundary or a surrogate boundary.