We have 8 of 20 papers
We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.
Not the right person? Other researchers publish under this name.
Long-horizon tool-using AI agents create subgoals, replan, delegate work, and compose sibling results. Per-tool permission checks cannot establish that a changing goal graph remains within the principal-approved task. We address this authorization gap in a finite structured domain with one principal and one authorizati...
Large language models incur language-dependent representation and inference costs, but existing comparisons often conflate input language, assigned observable-trace language, and answer realization. We specify a prospective paired study that separates these interfaces while holding the semantic item, checkpoint, and an...
An indistinguishability result shows that partition-local availability requires exclusive preallocation, and it is proved that ownership partition, ledger and effect conservation, descendant non-amplification, at-most-once settlement, late-completion safety, and partition confinement under explicit mediation, durabilit...
A provenance-bounded runtime authorization architecture that quarantines acquired outputs, resolves their actual capabilities from authenticated provider evidence through a versioned resolver, and activates them only through a current activation transaction that checks the resolved manifest, provenance, epochs, and a d...
Under stated assumptions, it is proved post-cut issuer non-expansion, support-sound projection, compositional soundness under exact channel conservation, independent-support preservation, merge-order independence, and crash/replay stability.
By acquiring compute, credentials, accounts, services, and other agents, autonomous AI agents can introduce new authority into a task. Payment, budget, OAuth, mandate, and fulfillment checks can validate transaction conditions without deciding whether a returned resource may become usable authority. This post-fulfillme...
This work presents ClosureBound, a reference monitor that prevents authorization transfer across material changes to this heterogeneous closure, and establishes metadata non-authority, closure determinism, version non-inheritance, effect non-amplification, bound-value freshness, and path invariance.
Together, these studies establish profile conformance and demonstrate the feasibility of server-checked action claims within the evaluated settings.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
