提出可验证的边撤销机制，精准控制联邦智能体工作流中的权限失效范围。
VERA: Authority-Preserving Edge Revocation for Federated AI-Agent Workflows
- 设计基于可达性分析的精确撤销策略，仅移除依赖被撤权限的智能体
- 在25个测试单元中成功识别13个跨域共享与8个跨部署依赖问题
- 支持多框架迁移，9条轨迹均通过签名与模式校验，抗伪造攻击
现代智能体框架将规划器、工具代理、远程服务与共享专家构建成运行时委托图，但其撤销接口仍类似令牌或子树失效。当一个委托被撤回时，运行时需准确判断哪些代理失去权限，而独立授权的代理应继续运作。本文研究权限一致性问题，提出VERA（可验证代理边撤销），一种由代理运行时适配器生成并签名的可验证撤销合约与API。在析取权限下，撤销边e会精确失效所有路径中必须经过e的代理集合，即T_intent(e,G) = reach(G) \ reach(G \ {e})。该目标作为合约可暴露两类运行时错误：树级传播导致过度撤销共享代理，部署者作用域传播则造成跨域后代欠撤销。在LangGraph框架重复20次的repl cells中生成500条编译后框架轨迹与2,000个有效签名委托决策；其中13/25单元存在多父共享，8/25含跨部署依赖。VERA成功保留全部320例替代父节点共享代理场景（树级传播会误删），且拒绝非法签发者与遗漏攻击。基线重播在1,900+持有者/节点上无法表达此行为。进一步验证在A2A、AutoGen与CrewAI上的模式可移植性：共9条轨迹，包括5个可执行的交叉代理委托事件，均通过模式与签名检查。
原文摘要 · Abstract (English)
Modern agent frameworks compose planners, tool agents, remote services, and shared specialists into runtime delegation graphs, but their revocation APIs still resemble token or subtree invalidation. When one delegation is withdrawn, the runtime must know which agents lose authority while independently authorized agents keep working. We study this authority consistency problem and introduce VERA (Verifiable Edge Revocation for Agents), a verifier-checkable revocation contract and API emitted by agent-runtime adapters as signed evidence. Under disjunctive authority, revoking edge e invalidates exactly T_intent(e,G) = reach(G) \ reach(G \ {e}), the agents whose every authorizing root path used e. Used as a contract, this target exposes two runtime failures: tree cascades over-revoke shared agents, while deployer-scoped cascades under-revoke cross-domain descendants. In a LangGraph framework-replt cells repeated 20 times yield 500compiled-framework traces and 2,000 valid signed delegation decisions; 13/25 cells contain runtime multi-parsharing and 8/25 contain cross-deployer shies 500/500 target proofs, preserves all320 alternate-parent shared-agent cases that tree cascade revokes, and rejects unauthorized signers and omission attacks. Baseline replay over 1,9that holder/node and tree-style targetscannot express this behavior. We further validate schema portability on A2A, AutoGen, and CrewAI artifacts: nine traces, including five executable Cregned delegation events that pass schema and signature checks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。