The paper presents a formal analysis of four agent payment protocols—x402, MPP, ACP, and AP2—using the Tamarin prover. By modeling each protocol’s roles, state, and trust assumptions, the authors verify 86 cases, reproducing 46 known results and uncovering 40 new formal-consistency findings. They further validate ten findings through implementation proofs of concept, SDK/schema witnesses, and executable traces, highlighting the importance of consistent delegated authorization across all protocol stages.
By Ke Jiang, Mohan Yu, Yuan Chang, Mohit Kumar Jangid, Jianyu Niu, Cong Wang, Yinqian Zhang
arXiv:2606. 08790v1 Announce Type: new Abstract: Autonomous agents negotiate, purchase, deploy code, and move funds, but no neutral mechanism determines whether they met their delegated obligation, who is responsible when they did not, or which settlement action follows.
By Adrian de Valois-Franklin, Alex Bogdan
arXiv:2609.22944v1 Announce Type: cross
Abstract: Autonomous AI agents increasingly act across organizational boundaries on behalf of human operators: they invoke third-party services, delegate subta...
By Oliver Aleksander Larsen, Mahyar Tourchi Moghaddam
The paper introduces the Agentic Commerce Bench (ACB), a benchmark for measuring fraud in AI agents that autonomously spend money. It presents a taxonomy of agentic commerce fraud, a dataset of twenty fraud classes derived from real production data, and an open‑source detector stack called gordonguard for auditing and replaying hostile counterparties. The study shows that current reasoning layers and security scanners perform poorly on many classes, highlighting the need for better detection mechanisms.
By Ankit Srivastava, Debjyoti Paul
arXiv:2608. 06353v1 Announce Type: cross Abstract: We give a formal mechanism design model for the continuous participatory governance of a deployed AI agent.
By Praphul Chandra, Sujit Gujar, Ganesh Ghalme
arXiv:2609.37819v1 Announce Type: cross
Abstract: Electronic invoices are replacing paper invoices worldwide, but today's centralized architectures leave three problems unsolved on the consumption si...
By Jia Cai
arXiv:2606. 23768v1 Announce Type: cross Abstract: We propose cryptographic certificates of validity for agentic AI systems.
By Murdoch J. Gabbay
The Civilization Framework proposes a new way for AI systems to communicate by treating the entire civilization—one human sovereign, a persistent ledger, and interchangeable agents—as the addressable party, rather than individual agents. It introduces the Embassy Protocol, an asynchronous, carrier‑agnostic overlay that routes messages to a ledger endpoint where any online agent of the receiver can process them, with commitment state on both ledgers serving as the ground truth. The framework also identifies a temporal‑weight effect in AI‑to‑AI communication, demonstrates its impact in a preregistered experiment, and explores mitigation strategies such as instruction‑level provenance labeling and sealed‑answer accuracy equivalence.
whyItMatters":"The framework aims to reduce context loss and authority bias in AI interactions by grounding communication in a shared ledger and sovereign oversight, potentially improving reliability and accountability in multi‑agent systems."
By Guangjun Liu
The Civilization Framework proposes a new way to structure communication between AI agents by treating the civilization—comprising a human sovereign, a persistent ledger, and interchangeable agents—as the addressable party rather than individual agents. It introduces the Embassy Protocol, an asynchronous, carrier‑agnostic overlay that routes messages to a ledger endpoint where any online agent can process them, with commitment state on ledgers serving as the true record of interaction. The paper also identifies a temporal‑weight effect in AI‑to‑AI communication, demonstrates its impact in a preregistered experiment, and discusses mitigation strategies such as instruction‑level provenance labeling and sealed‑answer accuracy equivalence.
whyItMatters":"The framework offers a novel architecture that could reduce context loss and authority bias in multi‑agent AI systems, potentially improving reliability and accountability in AI‑driven interactions."
arXiv:2606. 11632v1 Announce Type: cross Abstract: Agentic infrastructure introduces a critical control-plane authorization problem: non-deterministic reasoning systems can propose high-stakes mutations to production resources, yet existing security mechanisms -- such as identity and access management (IAM), policy engines, consensus protocols, and audit logs -- either enforce static, context-unaware permissions or merely record actions post-execution.
By Jun He, Deying Yu
arXiv:2604. 11430v2 Announce Type: replace-cross Abstract: AI agents that pay for resources via the x402 protocol embed payment metadata - resource URLs, descriptions, and reason strings - in every HTTP payment request.
By Vladimir Stantchev
arXiv:2606. 04903v1 Announce Type: cross Abstract: We introduce the LLM agent architecture Agentic Redux, intended for use with nontrivial problem domains that require linear auditability.
By Aaron Sterling