InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents

• URL: http://arxiv.org/abs/2608.13030v2
• Date: Fri, 14 Aug 2026 02:36:49 GMT
• Title: InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents
• Abstract summary: We present InterSAGE, a trust-native protocol suite that supplies this missing security substrate alongside, rather than in place of, communication protocols.<n>InterSAGE comprises four layers: Persistent Identity, Discovery, Trust Negotiation, and Accountability.<n>We show that no prior architecture jointly enforces persistent identity, capability-aware discovery, trust negotiation, and accountability as a unified four-layer trust substrate for secure agent interoperability.
• Score: 13.055427740541793
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The emerging Internet of Agents enables LLM-powered agents to discover peers, invoke tools, and delegate tasks across organizational boundaries. Existing protocols increasingly define how agents exchange messages, but not how an agent proves its identity, authorization, advertised capabilities, or accountability after delegation. We present InterSAGE, a trust-native protocol suite that supplies this missing security substrate alongside, rather than in place of, communication protocols. InterSAGE comprises four layers: Persistent Identity, Discovery, Trust Negotiation, and Accountability. Its four core primitives are: (1) Agent Identity Cards that bind developer, code package, operator, and deployment context; (2) capability-aware discovery using DID-bound Verifiable Credential manifests; (3) trust negotiation combining monotonic capability attenuation with two-tier access control; and (4) kernel-mediated cryptographic audit trails that bind usage, delegation, and execution traces to agent identity without a consensus ledger. InterSAGE is designed to complement MCP, A2A, ANP, and AG-UI, allowing communication protocols to evolve independently while keeping trust semantics explicit, portable, and verifiable. We compare InterSAGE with more than 50 efforts spanning agent protocols, decentralized identity, OAuth/OIDC extensions, zero-trust governance, delegation, and audit architectures. We show that no prior architecture jointly enforces persistent identity, capability-aware discovery, trust negotiation, and accountability as a unified four-layer trust substrate for secure agent interoperability.

Related papers

• Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions [47.65093774088672]
  This survey and tutorial article reviews the literature over the period 1980--2026 on the evolution from classical multi-agent systems to open agent networks.<n>We first review this evolution and show how the trust boundary expands from individual execution to cross-agent, cross-platform, and cross-organizational interaction.<n>We develop a five-dimensional taxonomy covering entity and capability trust, authorization and delegation trust, information and trust, coordination and group-robustness trust, and accountability and settlement trust.
  arXiv  Detail & Related papers  (2026-08-05T09:32:35Z)
• D-MUTRA: DLT-based MUTual Remote Attestation for Multi-Agent Systems [0.5262506959175032]
  This paper presents D-MUTRA, a blockchain-based framework that introduces a mutual RA protocol in multi-agent systems.<n>Agents measure their integrity while verifying that of their peers, acting as both prover and verifier.<n>Results show that D-MUTRA enables agents to continuously attest one another, detects malicious software modifications, and scales to large deployments with negligible overhead.
  arXiv  Detail & Related papers  (2026-08-03T09:10:31Z)
• A Technical Taxonomy of LLM Agent Communication Protocols [60.76747983053368]
  This study develops a technical taxonomy to classify and analyze large language models (LLMs) agent communication protocols.<n>The framework guides protocol selection and highlights open research gaps such as privacy and policy enforcement.
  arXiv  Detail & Related papers  (2026-06-17T14:45:20Z)
• TrustedARI: Towards Trust-Native Agentic Routing Infrastructure for Agentic AI [29.547987611061078]
  We present TrustedARI, the first trust-native agentic routing infrastructure for agentic AI.<n>It is built upon three core innovations: (i) an ARI-adapted three-party TLS handshake that enables the agent and ARI to jointly authenticate the service provider; (ii) a privacy-preserving query-construction protocol that allows the agent and ARI to collaboratively construct well-formed queries without exposing their respective private inputs; and (iii) a verifiable billing protocol that supports fair usage-based settlement.
  arXiv  Detail & Related papers  (2026-06-14T13:39:56Z)
• OpenAgenet / OAN Yellow Paper: Technical Architecture for Trust-Governed Resource Identity and Discovery [0.0]
  OAN is a protocol-neutral trust layer for open Agent interconnection and discoverable AI resource products.<n>It defines how resource identities become admissible, discoverable, verifiable, and safe to approach before protocol-specific interaction begins.
  arXiv  Detail & Related papers  (2026-06-02T05:18:14Z)
• OpenAgenet / OAN White Paper: Open Infrastructure for Trusted Agent Interconnection [0.0]
  OpenAgenet, abbreviated as OAN, is an open infrastructure project for trusted Agent interconnection.<n>It addresses a problem that becomes visible when Agents move from isolated applications into open, multi-operator networks.<n>OAN is designed as a protocol-neutral trust layer.
  arXiv  Detail & Related papers  (2026-06-02T05:14:34Z)
• Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On [37.45330451512762]
  A2A networks offer better task performance compared to simply using one agent to complete the entire task.<n>We argue that the trustworthiness of A2A networks cannot be fully guaranteed via retrofitting on existing protocols that are largely designed for individual agents.<n>We present a comprehensive conceptual framework that situates trust in A2A systems through four design pillars.
  arXiv  Detail & Related papers  (2026-05-18T18:57:54Z)
• When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI [6.1511441479993225]
  Agentic AI systems that plan, invoke tools, maintain persistent memory, and delegate tasks to peer agents introduce a threat surface that differs materially from standalone model inference.<n> Confidential computing offers a hardware-rooted alternative: Trusted Execution Environments (TEEs) isolate agent code and data from privileged system software.<n>This survey synthesizes the design space in four parts: (i) a unified taxonomy of six TEE platforms covering deployment roles and performance tradeoffs; (ii) an agent-centric threat model spanning perception, planning, memory, action, and coordination layers mapped to nine security goals; (iii) a comparative survey of CC
  arXiv  Detail & Related papers  (2026-05-04T23:09:16Z)
• ElephantBroker: A Knowledge-Grounded Cognitive Runtime for Trustworthy AI Agents [45.88028371034407]
  ElephantBroker is an open source cognitive runtime that unifies a Neo4j knowledge graph with a Qdrant vector store.<n>The system implements a complete cognitive loop (store, retrieve, score, compose, protect, learn) comprising a hybrid five source retrieval pipeline.
  arXiv  Detail & Related papers  (2026-03-26T07:03:12Z)
• Towards Verifiably Safe Tool Use for LLM Agents [53.55621104327779]
  Large language model (LLM)-based AI agents extend capabilities by enabling access to tools such as data sources, APIs, search engines, code sandboxes, and even other agents.<n>LLMs may invoke unintended tool interactions and introduce risks, such as leaking sensitive data or overwriting critical records.<n>Current approaches to mitigate these risks, such as model-based safeguards, enhance agents' reliability but cannot guarantee system safety.
  arXiv  Detail & Related papers  (2026-01-12T21:31:38Z)
• SmartSnap: Proactive Evidence Seeking for Self-Verifying Agents [45.71333459905404]
  SmartSnap is a paradigm shift from passive, post-hoc verification to proactive, in-situ self-verification by the agent itself.<n>We introduce the Self-Verifying Agent, a new type of agent designed with dual missions: to complete a task and to prove its accomplishment with curated evidences.<n>Experiments on mobile tasks across model families and scales demonstrate that our SmartSnap paradigm allows training LLM-driven agents in a scalable manner.
  arXiv  Detail & Related papers  (2025-12-26T14:51:39Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Evolution of AI Agent Registry Solutions: Centralized, Enterprise, and Distributed Approaches [13.123809945481405]
  AI agents operate across cloud, enterprise, and decentralized domains, creating demand for registry infrastructures that enable discovery, capability negotiation, and identity assurance.<n>We analyze five prominent approaches: (1) MCP Registry (centralized publication of mcp.), (2) A2A Agent Cards (decentralized self-describing capability manifests), (3) AGNTCY Agent Directory Service (IPFS Kademlia content routing extended for semantic taxonomy-based content discovery, OCI artifact storage, and Sigstore-backed integrity), (4) Microsoft Entra Agent ID (crypt, privacy-preserving fact model with credentialed assertions), and (5) NANDA Index AgentFacts
  arXiv  Detail & Related papers  (2025-08-05T05:17:18Z)
• OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety [58.201189860217724]
  We introduce OpenAgentSafety, a comprehensive framework for evaluating agent behavior across eight critical risk categories.<n>Unlike prior work, our framework evaluates agents that interact with real tools, including web browsers, code execution environments, file systems, bash shells, and messaging platforms.<n>It combines rule-based analysis with LLM-as-judge assessments to detect both overt and subtle unsafe behaviors.
  arXiv  Detail & Related papers  (2025-07-08T16:18:54Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.