arXiv:2605.25376cs.CRcs.AI2026-05

KYA为自治系统提供可验证的可信层,让行为授权、合规性可查。

KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition

论文配图:KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition
图 1 · 摘自论文原文
  • 五项原语构建跨框架信任层,支持多租户策略组合
  • 在36个测试环境中全通过,99%延迟低于1毫秒,每秒处理近1800次操作
  • 适合需审计与安全治理的AI系统,如多代理协作场景

KYA(Know Your Agents)是一个开源、框架无关的自治系统可信与治理层,包含五个核心组件:(1) 四门入站应用管道;(2) 基于三通道多租户层级的仅收紧策略组合代数;(3) KYP(Know Your Principal),统一人类用户、AI代理与服务账户的信任评分体系;(4) 可审计的交互放大机制,基于AIVSS形状的加性基线;(5) 双轴委托归因:静态风险溢价与运行时实际误行为扣减。该系统覆盖信任、治理与证据保障三大支柱,使自治系统的行为具备授权性、策略一致性与事后可验证性。其与可观测性互补而非替代。系统内置15+代理框架适配器。在4×9跨后端矩阵中所有36个组合均通过测试,纯函数评分器在p99下延迟低于1毫秒,系统在20个并发工作负载下稳定维持约1,800次操作/秒,端到端HMAC链完整性完好。对来自PyRIT和Garak的1,200次对抗探测,检测率达89%,包括新发布的拓扑引导型多代理攻击。项目以Apache 2.0许可发布,可通过PyPI获取veldt-kya包。

原文摘要 · Abstract (English)

KYA (Know Your Agents) is an open-source, framework-agnostic trust and governance layer for autonomous systems, composed of five primitives: (1) a four-gate inbound apply pipeline; (2) an only-tighten composition algebra over a three-channel multi-tenant hierarchy; (3) KYP (Know Your Principal), a schema-level unification of trust scoring across human users, AI agents, and service accounts; (4) auditable interaction-multiplier amplification over an AIVSS-shaped additive baseline; and (5) two-axis delegation attribution: a static premium for risky delegates and a runtime debit for actual delegate misbehavior in multi-agent fan-out. Together these span three pillars (trust, governance, and evidentiary assurance), making an autonomous system's actions authorized, policy-conforming, and post-hoc verifiable: where observability answers how long, how much, and what path, KYA answers was it authorized, did it conform, and can it be verified; it composes with observability rather than replacing it. It ships native adapters for 15+ agent frameworks. On a 4 by 9 cross-backend matrix all 36 cells pass; the pure-function scorer runs sub-millisecond at p99 and the system sustains ~ 1,800 ops/sec at 20 concurrent workers with HMAC chain integrity preserved end-to-end. KYA detects 89% of 1,200 adversarial probes from PyRIT and Garak, including the recently-published topology-guided multi-agent attack. The system is available under Apache 2.0 as the veldt-kya package on PyPI.

可信系统多代理安全治理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。