Accountable yet Anonymous AI Agents - Split-Knowledge Binding in National Agent-Identity Layer in China

• URL: http://arxiv.org/abs/2607.23207v1
• Date: Sat, 25 Jul 2026 13:58:16 GMT
• Title: Accountable yet Anonymous AI Agents - Split-Knowledge Binding in National Agent-Identity Layer in China
• Abstract summary: We document a national system in China built as national infrastructure and scheduled for public launch in Q3 2026.<n>Agents are associated with a verified legal principal without that principal being disclosed to any business-layer participant.<n>System is evidence of feasibility at national scale; the framework is the instrument by which any deployment -- including this one -- should be judged.
• Score: 6.3339885940188445
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The emerging infrastructure for AI-agent identity has converged, in industry practice and research proposals alike, on a single resolution of the tension between accountability and privacy: make every agent identifiable. We document a national system in China -- built as national infrastructure and scheduled for public launch in Q3 2026 -- that occupies a different and underexplored point in the same design space: an agent is associated with a verified legal principal without that principal being disclosed to any business-layer participant. Re-identification is possible only to a legal authority acting through due process, by separately compelling two distinct government agencies, neither of which can re-identify alone. We name the mechanism split-knowledge binding and are candid that it is conditional: the separation is structural and procedural, not cryptographic, and a state empowered to compel both agencies can re-identify. The paper makes five contributions: (1) split-knowledge binding, an institutional rather than cryptographic separation for escrowed accountability; (2) the ex-post attribution thesis, the argued claim that only attribution-based accountability carries legal force for AI agent actions with legal consequences; (3) the accountability surface, a design concept identifying which agent actions leave identity-bearing traces; (4) a proportionality framework for identity escrow, a decision structure selecting among three trust architectures; and (5) the reflexive jurisdiction method, an evaluative standard administered to the paper's own deployment. The system is evidence of feasibility at national scale; the framework is the instrument by which any deployment -- including this one -- should be judged.

Related papers

• The Authority Resolution Framework: A Five-Domain Ontology for Governing Who and What Decides, at Scale [0.0]
  This paper introduces the Authority Resolution Framework (ARF), a five-domain ontology for representing and resolving authority.<n>ARF defines the Authority Relation (AR) as a cross-domain primitive binding an actor, action, object, bounded context, justification chain, and a calibration measure.<n>ARF is designed to support AI agents in determining the provenance, scope and contextual validity of authority before executing consequential actions.
  arXiv  Detail & Related papers  (2026-08-16T16:05:50Z)
• Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions [47.65093774088672]
  This survey and tutorial article reviews the literature over the period 1980--2026 on the evolution from classical multi-agent systems to open agent networks.<n>We first review this evolution and show how the trust boundary expands from individual execution to cross-agent, cross-platform, and cross-organizational interaction.<n>We develop a five-dimensional taxonomy covering entity and capability trust, authorization and delegation trust, information and trust, coordination and group-robustness trust, and accountability and settlement trust.
  arXiv  Detail & Related papers  (2026-08-05T09:32:35Z)
• Behavioral Governance for Autonomous AI Agents: The AgentBound Framework [2.4469484645516832]
  We present AgentBound, a runtime governance framework that provides verifiable behavioral oversight for autonomous AI agents.<n>AgentBound evaluates each proposed action using three independent authorities: delegated authorization, owner-signed behavioral constitutions, and site action contracts.<n>AgentBound generates cryptographically verifiable governance receipts that bind every action to the exact delegation, policy, and semantic artifacts governing the decision.
  arXiv  Detail & Related papers  (2026-06-29T23:12:06Z)
• Definitional alignment before capability alignment: a Design-Science framework for adjudicating claims about AGI [0.0]
  "AGI" lacks a single shared and stable referent and competing operationalizations can return different verdicts on the same system.<n>This article treats that under-specification as a design and governance problem.
  arXiv  Detail & Related papers  (2026-06-10T22:04:56Z)
• The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents [111.54911637435269]
  The Authorization-Execution Gap (AEG) is a major safety and security problem in open-world agents.<n>The AEG is the divergence between what a principal intends to authorize and what an open-world agent ultimately executes.
  arXiv  Detail & Related papers  (2026-05-10T04:05:31Z)
• TRUST: A Framework for Decentralized AI Service v.0.1 [47.384270414446604]
  Large Reasoning Models (LRMs) and Multi-Agent Systems (MAS) in high-stakes domains demand reliable verification.<n>We introduce TRUST (Transparent, Robust, and Unified Services for Trustworthy AI), a decentralized framework with three innovations.<n>We prove a Safety-Profitability Theorem ensuring honest auditors profit while malicious actors incur losses.
  arXiv  Detail & Related papers  (2026-04-29T19:32:58Z)
• AI Identity: Standards, Gaps, and Research Directions for AI Agents [0.0]
  AI agents are now running real transactions, transactions, and sub-agent chains across organizational boundaries without continuous human supervision.<n>This creates a problem no current infrastructure is equipped to solve: how do you identify, verify, and hold accountable an entity with no body, no persistent memory, and no legal standing?<n>We define AI Identity as the continuous relationship between what an AI agent is declared to be and what it is observed to do, bounded by the confidence that those two things correspond at any given moment.
  arXiv  Detail & Related papers  (2026-04-25T12:51:52Z)
• A Two-Dimensional Framework for AI Agent Design Patterns: Cognitive Function and Execution Topology [54.72352855252792]
  We propose a two-dimensional classification that combines a Cognitive Function axis with seven categories and an Execution Topology axis with six structural archetypes.<n>The resulting 7x6 matrix identifies 27 named patterns, 13 with original names and provides a principled, framework-neutral, and model-agnostic vocabulary for AI agent architecture design.
  arXiv  Detail & Related papers  (2026-03-16T04:01:01Z)
• Distributed Legal Infrastructure for a Trustworthy Agentic Web [3.8915860916475165]
  The agentic web marks a structural transition from a human-centered information network to a digital environment populated by artificial intelligence (AI) agents.<n>This article advances a distributed legal infrastructure (DLI), a governance paradigm composed of five interlocking layers.<n>This reference framework contributes to emerging research on embedding legality within agentic web infrastructure.
  arXiv  Detail & Related papers  (2026-03-06T21:03:32Z)
• LegalOne: A Family of Foundation Models for Reliable Legal Reasoning [54.57434222018289]
  We present LegalOne, a family of foundational models specifically tailored for the Chinese legal domain.<n>LegalOne is developed through a comprehensive three-phase pipeline designed to master legal reasoning.<n>We publicly release the LegalOne weights and the LegalKit evaluation framework to advance the field of Legal AI.
  arXiv  Detail & Related papers  (2026-01-31T10:18:32Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Identifiable Exchangeable Mechanisms for Causal Structure and Representation Learning [54.69189620971405]
  We provide a unified framework, termed Identifiable Exchangeable Mechanisms (IEM), for representation and structure learning.<n>IEM provides new insights that let us relax the necessary conditions for causal structure identification in exchangeable non-i.i.d. data.<n>We also demonstrate the existence of a duality condition in identifiable representation learning, leading to new identifiability results.
  arXiv  Detail & Related papers  (2024-06-20T13:30:25Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.