Bound Authority Structurally, Not By Prompts