arXiv (Computer Science - Cryptography and Security) • 7w
Sovereign Execution Broker SEB and Sovereign Assurance Boundary SAB
This research addresses the security gap in agentic control planes where non-deterministic autonomous agent reasoning interacts with deterministic infrastructure mutations. Traditional IAM fails to validate real-time intent, creating a risk of unauthorized infrastructure changes if an agent's reasoning drifts or is compromised. The proposed architecture implements a Sovereign Assurance Boundary (SAB) to certify intent via cryptographic execution contracts and a Sovereign Execution Broker (SEB) to enforce these contracts. By decoupling identity from capability and utilizing short-lived, scoped execution identities and live-state drift detection, the framework prevents unauthorized mutations regardless of the agent's internal state.