# Concepts

Understand who acts, what they may do and what the resulting records prove.

Lys separates identity, authority, execution and cryptographic evidence. Keep these questions separate when reading a result: who acted, what was permitted, what ran, and which bytes were verified.

[Identity](/lys/concepts/identity/)

People, agents, keys, lifecycle state and responsibility.
[Grants](/lys/concepts/grants/)

Actions, resources, delegation, revisions and revocation.
[Runtime and sessions](/lys/concepts/runtime-and-sessions/)

Profiles, seats, runners, transports, budgets and goals.
[Verifiable artifacts](/lys/concepts/verifiable-artifacts/)

Signatures, certificates, logs and independent verification.
[Secrets](/lys/concepts/secrets/)

Private values, scopes and the difference between authority and disclosure.