arXiv AI
Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
Related stories
arXiv AI
Aug 18
Bounded Agents: Delegation Security for Multi-Agent AI Systems
arXiv:2608. 15888v1 Announce Type: new Abstract: LLM-based agents can act on behalf of a user to access cloud services, call tools, or invoke agents.
arXiv AI
Jun 10
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation
arXiv:2606. 10749v1 Announce Type: cross Abstract: Large language model (LLM) agents are rapidly moving from conversational interfaces to software components that plan, invoke tools, maintain memory, and act on external environments.
arXiv AI
Aug 11
Prompts Don't Protect: Architectural Enforcement via MCP Proxy for LLM Tool Access Control
arXiv:2605. 18414v2 Announce Type: replace-cross Abstract: Large language models increasingly operate as autonomous agents that select and invoke tools from large registries.
arXiv AI
Aug 13
Cryptographically verifiable authorization for autonomous AI agents: A falsifiable hypothesis and proof-of-concept
arXiv:2607. 21325v2 Announce Type: replace-cross Abstract: Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight.
arXiv AI
Jul 24
Toward cryptographically verifiable authorization for autonomous AI agents: A security hypothesis, preliminary formal model, and proof-of-concept implementation
arXiv:2607. 21325v1 Announce Type: cross Abstract: Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight.
arXiv AI
Jul 28
Decentralized Granular Access Control for Agentic AI Systems in Critical Infrastructure
arXiv:2607. 22611v1 Announce Type: new Abstract: The deployment of autonomous AI agents in production infrastructure introduces fundamental security challenges that traditional role-based access control (RBAC) models cannot address.