arXiv AI
ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
Related stories
arXiv AI
Sep 2
Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems
The paper examines the security challenges of delegating authority to autonomous LLM agents that act on users’ behalf. It introduces a threat model with four adversaries and eight security requirements, demonstrates that current frameworks (LangGraph, CrewAI, AutoGen, MCP) fail to meet these standards, and presents an authorization broker that blocks all identified threats with minimal overhead. The broker is shown to resist numerous attacks and limits compromised sub‑agents to their delegated tasks, and its principles are implemented in VotalAI’s LLM Shield.
arXiv AI
Oct 23
SUDP: Secret-Use Delegation Protocol for Agentic Systems
The paper introduces the Secret-Use Delegation Protocol (SUDP), a method for agentic systems to perform user-authorized operations without granting reusable authority to untrusted requesters. It formalizes the Agent Secret Use (ASU) problem, outlines seven required security properties, and demonstrates that SUDP satisfies six of them under standard cryptographic assumptions, with the remaining property addressed via hardware-rooted runtime composition. A reference implementation shows minimal overhead for mediated calls.
arXiv AI
Sep 21
Authorization Revocation for Long-Running AI Agents: Root-Scoped Quiescence under Delegation and Asynchronous Execution
arXiv:2609.21284v1 Announce Type: cross Abstract: Long-running AI agents outlive initiating processes through credentials, delegated tasks, queues, callbacks, reservations, and provider-side operatio...
arXiv AI
Aug 5
When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary
arXiv:2608. 01679v2 Announce Type: replace Abstract: Persistent memory allows (self-evolving) LLM agents to adapt across tasks by consolidating heterogeneous interaction histories into reusable facts, preferences, observations, and rules.
arXiv AI
Aug 13
Beyond Memory: A Transactional Continuity Kernel for Long-Lived AI Agents
arXiv:2608. 11632v1 Announce Type: cross Abstract: Persistent AI agents accumulate versioned state across long horizons, but storage retention alone does not identify authoritative state.
arXiv AI
Sep 21
Runtime Authorization for Resources Acquired by AI Agents
arXiv:2609.14744v2 Announce Type: replace Abstract: By acquiring compute, credentials, accounts, services, and other agents, autonomous AI agents can introduce new authority into a task. Payment, bud...