Search papers, labs, and topics across Lattice.
AITH is a novel post-quantum continuous delegation protocol designed to establish and manage trust between humans and AI agents, addressing the limitations of existing frameworks in handling probabilistic AI behavior. It employs a Continuous Delegation Certificate with sub-microsecond boundary checks, a Boundary Engine for enforcing constraints, and a push-based Revocation Protocol for rapid invalidation. The protocol's security is formally verified using Tamarin Prover, and its practical performance is validated through adversarial auditing and simulations.
Achieve 4.7M ops/sec boundary checks with sub-microsecond latency in human-AI trust delegation by replacing per-operation signing with a single post-quantum signature.
The rapid deployment of AI agents acting autonomously on behalf of human principals has outpaced the development of cryptographic protocols for establishing, bounding, and revoking human-AI trust relationships. Existing frameworks (TLS, OAuth 2.0, Macaroons) assume deterministic software and cannot address probabilistic AI agents operating continuously within variable trust boundaries. We present AITH (AI Trust Handshake), a post-quantum continuous delegation protocol. AITH introduces: (1) a Continuous Delegation Certificate signed once with ML-DSA-87 (FIPS 204, NIST Level 5), replacing per-operation signing with sub-microsecond boundary checks at 4.7M ops/sec; (2) a six-check Boundary Engine enforcing hard constraints, rate limits, and escalation triggers with zero cryptographic overhead on the critical path; (3) a push-based Revocation Protocol propagating invalidation within one second. A three-tier SHA-256 Responsibility Chain provides tamper-evident audit logging. All five security theorems are machine-verified via Tamarin Prover under the Dolev-Yao model. We validate AITH through five rounds of multi-model adversarial auditing, resolving 12 vulnerabilities across four severity layers. Simulation of 100,000 operations shows 79.5% autonomous execution, 6.1% human escalation, and 14.4% blocked.
