为自主AI代理提供可验证的行为监管框架,确保操作合规。
Behavioral Governance for Autonomous AI Agents: The AgentBound Framework

- 三重独立判断:授权、行为宪章、站点合约共同决策
- 动作前判断是否允许、审查或拒绝,支持加密可验证记录
- 适合需高可信度治理的金融、企业级AI应用
自主AI代理越来越多地代表人类执行重要操作,包括金融交易、外部通信和企业流程。现有基础设施依赖身份联邦和委托授权来认证工作负载并控制资源访问,但无法判断授权操作在当前行为与运行上下文中是否应被执行。我们提出AgentBound,一个运行时治理框架,为自主AI代理提供可验证的行为监督。AgentBound通过三个独立权威评估每个提议操作:委托授权、所有者签名的行为宪章、站点行动合约。其判断通过形式化决策模型保守组合,决定操作在执行前是否被允许、需审查或拒绝。为保障问责性,AgentBound生成加密可验证的治理凭证,将每项操作绑定至确切的委托、策略和语义实体,支持独立回放验证与策略溯源。框架还引入持续委托机制,使长期运行的代理可在定期更新的治理策略下运行,同时保持可撤销性和权限边界。我们提出了形式基础、系统架构、治理凭证协议及AgentBound-Bench基准框架,用于评估治理正确性、权限组合与问责性。AgentBound不取代模型对齐,而是作为授权与执行之间的确定性治理层,将治理从需信任的过程转变为可独立验证的过程。
原文摘要 · Abstract (English)
Autonomous AI agents increasingly perform consequential actions on behalf of human principals, including financial transactions, external communications, and enterprise workflows. Existing agent infrastructure relies on identity federation and delegated authorization to authenticate workloads and control resource access, but it cannot determine whether an authorized action should be executed under the current behavioral and operational context. We present AgentBound, a runtime governance framework that provides verifiable behavioral oversight for autonomous AI agents. AgentBound evaluates each proposed action using three independent authorities: delegated authorization, owner-signed behavioral constitutions, and site action contracts. Their judgments are conservatively composed through a formal decision model to determine whether an action should be permitted, reviewed, or denied before execution. To provide accountability, AgentBound generates cryptographically verifiable governance receipts that bind every action to the exact delegation, policy, and semantic artifacts governing the decision, enabling independent replay verification and policy provenance. The framework also introduces standing delegation for long-running agents, allowing periodic workloads to operate under continuously refreshed governance policies while preserving revocability and bounded authority. We present the formal foundation, system architecture, governance receipt protocol, and AgentBound-Bench, a benchmark framework for evaluating governance correctness, authority composition, and accountability. Rather than replacing model alignment, AgentBound complements it by providing a deterministic governance layer between authorization and execution, transforming governance from a process that must be trusted into one that can be independently verified.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。