EHV实现硬件级实时安全管控,让智能系统即时遵守政策
Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systems
- 将政策执行点嵌入推理流程,通过即时编译实现毫秒级响应
- 在1738个状态中验证无违规行为,正式证明安全不变量成立
- 适合医疗、金融等需强合规的高风险系统部署
随着自主代理系统在受监管关键基础设施中的规模化,高频政策更新缺乏机制化、硬件根植的执行手段,构成根本性安全缺口。本文提出伦理超高速(EHV)架构,为代理系统提供治理感知的运行时强制执行能力,结合语法约束解码(GCD)实现内联策略约束的令牌生成、基于因果图CRDT与向量时钟排序的策略同步、可信执行环境(TEEs)中的硬件认证执行,以及OSCAL格式的机器可读审计日志。相较于引入14-30天政策延迟的事后审计框架(如ISO/IEC 42001、NIST AI RMF),EHV通过治理感知的即时编译器将策略执行点(PEP)移入推理流水线。在明确假设下,该架构降低执行延迟、提升可追溯性,并支持在有界模型中对安全不变量进行形式化验证。通过TLA+模型检查,在生成的1738个状态(324个不同状态,深度8)中未发现违规行为,零违反。O(1)运行时执行将传统部署速度与治理完整性间的权衡转变为可兼得,使治理延迟从天级降至常数级。其核心贡献在于首次将GCD、因果CRDT、TEE认证缓存与有界形式化验证整合为单一硬件根植的强制架构——这是现有系统未能实现的组合。该架构通过儿科肿瘤剂量决策用例验证,适用于医疗、金融合规及关键基础设施控制等受监管领域。
原文摘要 · Abstract (English)
As autonomous agentic systems scale across regulated critical infrastructures, the lack of mechanistic, hardware-rooted enforcement for high-frequency policy updates presents a fundamental safety gap. We present Ethical Hyper-Velocity (EHV), a governance-aware runtime enforcement architecture for agentic systems that combines Grammar-Constrained Decoding (GCD) for inline policy-constrained token generation, Causal Graph CRDT-based policy synchronization with vector-clock ordering, hardware-attested execution in Trusted Execution Environments (TEEs), and OSCAL-formatted machine-readable audit logging. Unlike retrospective auditing frameworks (ISO/IEC 42001, NIST AI RMF) that introduce 14-30 day policy latencies, EHV relocates the Policy Enforcement Point (PEP) into the inference pipeline via a Governance-Aware Just-In-Time (JIT) Compiler. Under explicitly stated assumptions, the architecture reduces enforcement latency, improves traceability, and supports formal verification of safety invariants in a bounded model. We demonstrate via TLA+ model checking that non-compliant agentic actions were unreachable in the verified bounded operating state space (1,738 states generated, 324 distinct, depth 8, zero violations). Under these conditions, O(1) runtime enforcement reduces the traditional trade-off between deployment velocity and governance integrity, targeting Governance Latency from O(days) toward O(1). EHV's differentiating contribution is the integration of GCD, Causal CRDT, TEE attestation caching, and bounded formal verification into a single, hardware-rooted enforcement architecture -- a combination not achieved by any contemporaneous system. The architecture is demonstrated through a pediatric oncology dosage use case, with applicability to regulated critical infrastructures including healthcare, financial compliance, and critical infrastructure control.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。