arXiv AI
Jul 8
Proof of Execution: Runtime Verification for Governed AI Agent Actions
arXiv:2607. 05397v1 Announce Type: cross Abstract: Agent systems increasingly execute rather than advise.
The Acknowledgment Point Is the System: Durable Policy-Decision Receipts for AI Audit Evidence
arXiv:2608. 17176v1 Announce Type: cross Abstract: An AI audit record is useful only if its durability and trust boundary are explicit.
Related stories
arXiv AI
Jul 23
Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents
arXiv:2607. 19449v1 Announce Type: cross Abstract: Evaluation frameworks for tool-augmented LLM agents focus overwhelmingly on capability metrics or explicit tool crashes, leaving silent infrastructure failures and HTTP 200 responses with empty, null, or malformed payloads largely unaudited.
arXiv AI
Jun 2
PrivacyPeek: Auditing What LLM-Based Agents Acquire, Not Just What They Say
arXiv:2606. 00152v1 Announce Type: cross Abstract: LLM-based agents are rapidly advancing, autonomously invoking external tools to complete multi-step tasks for users.
arXiv AI
Jul 14
Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents
arXiv:2607. 10487v1 Announce Type: cross Abstract: LLM agents can commit durable effects from authority evidence that was valid earlier in execution: a DOM snapshot, approval epoch, version witness, branch token, or worker result.
arXiv AI
23h ago
PACE: Policy-Attested Contract Execution for Safe AI Agents in Decentralized Finance
arXiv:2608. 17220v1 Announce Type: cross Abstract: Autonomous AI agents are emerging as interfaces for decentralized finance (DeFi) actions such as swaps, lending operations, and yield management.
arXiv AI
Jul 29
Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales
arXiv:2607. 25364v1 Announce Type: new Abstract: Tool-using agents expose structured calls but commonly attach free-form rationales.
arXiv AI
2d ago
Mandato: Protocol-Level Enforcement of Digitally Signed Mandates on AI Agent Actions with Cryptographically Chained Audit Trails
arXiv:2608. 14074v1 Announce Type: new Abstract: AI agents increasingly act on external systems through standardized tool-calling protocols such as the Model Context Protocol (MCP), yet no infrastructure layer constrains their actions to what a principal has verifiably authorized: authorization logic lives in application code, is neither signed nor independently auditable, and the resulting logs lack evidentiary value.
arXiv AI
23h ago
Auditing Self-Evolution in Financial Agents: Capability Gains, Security Drift, and Execution-Interface Mismatch
arXiv:2608. 17684v1 Announce Type: new Abstract: Self-evolving agents turn experience into reusable skills, workflows, or memories, but post-evolution accuracy alone does not show whether learned behavior preserves previously correct behavior or security.
arXiv AI
Jul 7
Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives
arXiv:2604. 16870v2 Announce Type: replace-cross Abstract: AI agents increasingly call external tools (file system, network, APIs) through the Model Context Protocol (MCP).
arXiv AI
Jul 8
aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents
arXiv:2607. 05518v1 Announce Type: cross Abstract: AI agents issue tool calls on the basis of text they cannot verify, so any party who controls part of the context can forge the appearance of authority.
arXiv AI
Aug 7
Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture
arXiv:2608. 06130v1 Announce Type: cross Abstract: AI agents performing cryptographic operations (signing Git commits, authenticating API calls, issuing certificates) currently store private keys in software-accessible locations: plaintext files, environment variables, or container memory.
arXiv AI
Jul 3
Has This Checkpoint Been Abliterated? A Two-Signal Audit and Its Failure Map
arXiv:2607. 01854v1 Announce Type: cross Abstract: Can a platform tell, before deployment, whether an open-weight checkpoint has had its refusal mechanism stripped?