为自主代理设计可验证、可撤销的运行时授权机制，防止随意修改生产环境。
Sovereign Assurance Boundary: Certificate-Bound Admission for Agentic Infrastructure
- 通过证书绑定执行合约，实现运行时准入控制。
- 在2500次测试中成功拦截非确定性操作，保证授权可追溯。
- 适合需要高安全性的自动化运维系统使用。
自主代理基础设施引入了关键的控制平面授权问题：非确定性推理系统可能提出对生产资源的高风险变更，而现有安全机制（如IAM、策略引擎、共识协议和审计日志）要么实施静态、上下文无关的权限，要么仅在操作后记录行为。本文提出主权保障边界（SAB），一种面向自主执行权限的证书绑定运行时准入层。SAB在保障气闸处拦截代理提案，将其编译为类型化执行合约$C$，并绑定至加密证据摘要$H(E)$与策略版本。合约通过后果感知的认证路径流转。成功准入后，系统生成严格限定于特定执行身份、撤销周期和有效窗口的签名主权保障证书$Ω$。最终，主权执行代理验证$Ω$，并在调用基础设施API前执行新鲜的撤销与漂移检查。我们详述了气闸-代理架构，形式化其准入与撤销不变式，并报告了基于Go原型在2500次准入尝试中的初步可行性测量。该代理强制模型阻止自主推理直接修改状态，将委托执行权限转化为密码学可验证、证据绑定、可撤销且可重放的运行时实体。
原文摘要 · Abstract (English)
Agentic infrastructure introduces a critical control-plane authorization problem: non-deterministic reasoning systems can propose high-stakes mutations to production resources, yet existing security mechanisms -- such as identity and access management (IAM), policy engines, consensus protocols, and audit logs -- either enforce static, context-unaware permissions or merely record actions post-execution. This paper introduces the Sovereign Assurance Boundary (SAB), a certificate-bound runtime admission layer for autonomous execution authority. SAB intercepts agent proposals at an assurance airlock, compiles them into typed execution contracts $C$, and binds these contracts to cryptographic evidence digests $H(E)$ and policy versions. The contracts are then routed through consequence-aware certification paths. Upon successful admission, the system emits a signed Sovereign Assurance Certificate ($Ω$) that is strictly scoped to a specific execution identity, revocation epoch, and validity window. Finally, a sovereign execution broker verifies $Ω$ and performs fresh pre-execution revocation and drift checks before invoking infrastructure APIs. We detail the airlock-broker architecture, formalize its admission and revocation invariants, and report preliminary feasibility measurements from a Go prototype evaluated over 2,500 admission attempts. Ultimately, this broker-enforced model prevents autonomous reasoning from directly mutating state, transforming delegated execution authority into a cryptographically verifiable, evidence-bound, revocable, and replayable runtime artifact.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。