The Civilization Framework proposes a new way for AI systems to communicate by treating the entire civilization—one human sovereign, a persistent ledger, and interchangeable agents—as the addressable party, rather than individual agents. It introduces the Embassy Protocol, an asynchronous, carrier‑agnostic overlay that routes messages to a ledger endpoint where any online agent of the receiver can process them, with commitment state on both ledgers serving as the ground truth. The framework also identifies a temporal‑weight effect in AI‑to‑AI communication, demonstrates its impact in a preregistered experiment, and explores mitigation strategies such as instruction‑level provenance labeling and sealed‑answer accuracy equivalence.
whyItMatters":"The framework aims to reduce context loss and authority bias in AI interactions by grounding communication in a shared ledger and sovereign oversight, potentially improving reliability and accountability in multi‑agent systems."
By Guangjun Liu
arXiv:2605. 06738v2 Announce Type: replace-cross Abstract: Autonomous AI agents already transact at production scale -- 69,000 bots, 165 million transactions, $50 million in volume on a single marketplace -- and any party can verify a signed credential without a central service.
By Lars Kersten Kroehl
The paper proposes five runtime primitives—discovery, identity, governance, attestation, and supply chain—to manage autonomous AI agents in enterprise settings. It argues that traditional control models fail because agents are transient, model-driven, and self‑discoverable, making runtime governance essential. The authors detail an implementation that mediates agent actions against policy, authorizes them via a per‑tenant vocabulary, and records them in a verifiable ledger, noting the associated operational costs and partial deployment status.
By Jiten Oswal, John Cadeddu
arXiv:2608. 03800v1 Announce Type: cross Abstract: An LLM-based agent is a loop that reads itself.
By Holly Lewis (Southern Illinois University Carbondale)
As autonomous AI agents increasingly transact across organizational boundaries, a fundamental trust challenge emerges: how can an agent assess whether an unknown counterpart is trustworthy? The ERC-8004 protocol addresses this challenge with the first permissionless trust layer for AI agent economies, built around three on-chain registries for Identity, Reputation, and Validation.
An LLM-based agent is a loop that reads itself. Agentic frameworks externalize identity, memory, and disposition into editable files.
arXiv:2606. 26028v2 Announce Type: replace-cross Abstract: As autonomous AI agents increasingly transact across organizational boundaries, a fundamental trust challenge emerges: how can an agent assess whether an unknown counterpart is trustworthy?
By Xihan Xiong, Zelin Li, Wei Wei, Qin Wang, William Knottenbelt, Zhipeng Wang
arXiv:2607. 04613v1 Announce Type: new Abstract: Autonomous agents are moving from sandboxed text generators to operators of code, data, and physical infrastructure, and they increasingly learn while deployed.
By Xue Qin, Simin Luan, Cong Yang, Zhijun Li
AcquireBound is a runtime authorization framework that ensures AI agents can safely acquire and activate resources such as compute, credentials, and services. It quarantines acquired outputs, resolves their capabilities through authenticated evidence, and activates them only after verifying a manifest, provenance, and relational constraints. The system demonstrates strong safety properties, passing extensive benign and unsafe trace tests across multiple resource classes.
By Genliang Zhu
The paper introduces Aegis, a runtime governance system for agentic AI that treats model outputs as action proposals and mediates them through a trusted decision layer before tool execution. Aegis evaluates proposals against active policy, resolves provenance server‑side, fails closed under uncertainty, and routes selected cases through a Senate‑style settlement process. In a sandbox evaluation across 6,300 rows, Aegis prevented all governed mock‑tool applications and risky side‑effect completions, preserving provenance and quorum evidence for all settled cases.
By Adam Mazzocchetti
The paper introduces PRIMUS, an extension of the PRIMA framework that combines prime‑power agent identity with BLS aggregate signatures to improve governance in multi‑agent federations. PRIMUS achieves a safe‑kill threshold that eliminates false‑positive agent termination under noisy conditions, identifies an economic boundary where singleton governance outperforms Byzantine quorum, and implements VRF succession with lease and fencing for unconditional safety under partial synchrony. The study also explores converting PRIMA’s binary artifact‑fidelity verdict into a graded fitness signal, demonstrating strong calibration against injected faults but reduced effectiveness on real LLM‑generated candidates, and reports a program cost of USD 164.78.
By Sasank Annapureddy, Anjaneya Prasad Thamatani
arXiv:2608. 11344v1 Announce Type: cross Abstract: Financial institutions are delegating consequential decisions to agentic AI systems that decompose goals, coordinate models and tools, and act with little oversight.
By Henry Han