Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI

• URL: http://arxiv.org/abs/2606.03518v1
• Date: Tue, 02 Jun 2026 11:39:39 GMT
• Title: Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI
• Abstract summary: This paper proposes a compositional governance framework for agentic AI systems.<n>We define types of delegation and their permissions and accountability implications.<n>It provides a formal yet practical foundation for accountable authorization in agentic AI systems.
• Score: 5.459755757192724
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: As AI systems evolve from passive models into autonomous active agents capable of initiating actions, collaborating, and delegating tasks, the traditional boundaries of software systems blur. Traditional authorization and delegation frameworks, built around fixed principals, explicit requests, and static scopes, are insufficient to govern agentic systems. Agentic AI demands richer authorization semantics: agents must inherit and delegate permissions, act under time-limited authority, and coordinate through shared protocols. Existing Identity and Access Management (IAM) systems fail to fully capture this notion of agency, lacking mechanisms for recursive delegation, contextual boundaries, and dynamic scoping as executable governance primitives. Unlike access delegation standards such as OAuth 2.0, we treat delegation as a contractual term rather than merely a static token-based consent credential. This paper proposes a compositional governance framework that introduces primitives indispensable for agentic AI. We define types of delegation and their permissions and accountability implications, and we introduce a notion of resource scope attenuation to bound agentic access envelopes. These concepts are expressed as general relational definitions that can be composed into existing authorization domains (e.g., financial systems). To operationalize this composition, we define a compositional operator that overlays new agentic semantics, such as recursive delegation chains, onto existing relational policies without rewriting them. We substantiate this framework through formal proofs and empirical evaluation, showing that it provides a formal yet practical foundation for accountable authorization in agentic AI systems.

Related papers

• Binding Biometrics with AI Agent Identifiers for Delegation of Authority [35.87507447481885]
  We present a framework called BIND to securely bind biometric data of the human user to the AI agent identity (ID) and authority scope (task-specific constraints) at the time of agent authorization.<n>This token/identifier can be presented by the AI agent to an Identity Auditor, who simultaneously performs biometric authentication and recovers the agent ID and scope.<n>We also provide a practical implementation of the proposed BIND framework based on face features extracted using standard deep neural network models.
  arXiv  Detail & Related papers  (2026-08-04T23:58:27Z)
• Toward cryptographically verifiable authorization for autonomous AI agents: A security hypothesis, preliminary formal model, and proof-of-concept implementation [0.0]
  This paper hypothesizes that agent authorization can be formalized as a cryptographically verifiable relation.<n>We introduce a preliminary formal abstraction for Cryptographically Verifiable Agent Authorization (CVA)
  arXiv  Detail & Related papers  (2026-07-23T13:55:02Z)
• Behavioral Governance for Autonomous AI Agents: The AgentBound Framework [2.4469484645516832]
  We present AgentBound, a runtime governance framework that provides verifiable behavioral oversight for autonomous AI agents.<n>AgentBound evaluates each proposed action using three independent authorities: delegated authorization, owner-signed behavioral constitutions, and site action contracts.<n>AgentBound generates cryptographically verifiable governance receipts that bind every action to the exact delegation, policy, and semantic artifacts governing the decision.
  arXiv  Detail & Related papers  (2026-06-29T23:12:06Z)
• Provably Secure Agent Guardrail [89.79561918065122]
  Existing defense architectures rely on empirical semantic guardrails and probabilistic large model adjudicators.<n>This paper proposes a new security paradigm for agents based on the fundamental limitations of logical reasoning.
  arXiv  Detail & Related papers  (2026-05-28T02:12:41Z)
• Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On [37.45330451512762]
  A2A networks offer better task performance compared to simply using one agent to complete the entire task.<n>We argue that the trustworthiness of A2A networks cannot be fully guaranteed via retrofitting on existing protocols that are largely designed for individual agents.<n>We present a comprehensive conceptual framework that situates trust in A2A systems through four design pillars.
  arXiv  Detail & Related papers  (2026-05-18T18:57:54Z)
• Digital Identity for Agentic Systems: Toward a Portable Authorization Standard for Autonomous Agents [0.0]
  This paper analyzes representative enterprise use cases in insurance claims processing and supply chain integrity.<n>It proposes a portable authorization model for autonomous agents based on issuer-authored authorization payloads.
  arXiv  Detail & Related papers  (2026-05-12T04:04:34Z)
• Swarm Skills: A Portable, Self-Evolving Multi-Agent System Specification for Coordination Engineering [50.72456732323037]
  We propose textbfSwarm Skills, a portable specification that extends the Anthropic Skills standard with multi-agent semantics.<n>Swarm Skills turns multi-agent into first-class, distributable assets that consist of roles, execution bounds, and a built-in semantic structure for self-evolution.<n>We show how Swarm Skills achieves zero-adapter cross-agent portability via progressive disclosure, enabling agent teams to self-evolve their coordination strategies without framework lock-in.
  arXiv  Detail & Related papers  (2026-05-11T06:26:58Z)
• Interoperable Architecture for Digital Identity Delegation for AI Agents with Blockchain Integration [0.0]
  We introduce a unified framework that enables bounded, auditable, and least-privilege delegation across heterogeneous identity ecosystems.<n>The framework includes four key elements: Delegation Grants (DGs), first-class authorization artefacts that encode revocable transfers of authority with enforced scope reduction.<n>It also includes a layered reference architecture that separates trust anchoring, credential and proof validation, policy evaluation, and protocol mediation via a Trust Gateway.
  arXiv  Detail & Related papers  (2026-01-21T13:29:23Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Agentic Web: Weaving the Next Web with AI Agents [109.13815627467514]
  The emergence of AI agents powered by large language models (LLMs) marks a pivotal shift toward the Agentic Web.<n>In this paradigm, agents interact directly with one another to plan, coordinate, and execute complex tasks on behalf of users.<n>We present a structured framework for understanding and building the Agentic Web.
  arXiv  Detail & Related papers  (2025-07-28T17:58:12Z)
• A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control [7.228060525494563]
  This paper posits the imperative for a novel Agentic AI IAM framework.<n>We propose a comprehensive framework built upon rich, verifiable Agent Identities (IDs)<n>We also explore how Zero-Knowledge Proofs (ZKPs) enable privacy-preserving attribute disclosure and verifiable policy compliance.
  arXiv  Detail & Related papers  (2025-05-25T20:21:55Z)
• Internet of Agents: Fundamentals, Applications, and Challenges [68.9543153075464]
  We introduce the Internet of Agents (IoA) as a foundational framework that enables seamless interconnection, dynamic discovery, and collaborative orchestration among heterogeneous agents at scale.<n>We analyze the key operational enablers of IoA, including capability notification and discovery, adaptive communication protocols, dynamic task matching, consensus and conflict-resolution mechanisms, and incentive models.
  arXiv  Detail & Related papers  (2025-05-12T02:04:37Z)
• Authenticated Delegation and Authorized AI Agents [4.679384754914167]
  We introduce a novel framework for authenticated, authorized, and auditable delegation of authority to AI agents.<n>We propose a framework for translating flexible, natural language permissions into auditable access control configurations.
  arXiv  Detail & Related papers  (2025-01-16T17:11:21Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.