Search papers, labs, and topics across Lattice.
This paper addresses the critical control-plane authorization problem in agentic infrastructure by introducing the Sovereign Assurance Boundary (SAB), a certificate-bound runtime admission layer designed to manage high-stakes mutations to production resources. By intercepting agent proposals and compiling them into typed execution contracts bound to cryptographic evidence, the SAB ensures that only authorized actions are executed, thus preventing unauthorized state mutations. Preliminary evaluations of a Go prototype demonstrate the feasibility of this approach, with over 2,500 admission attempts successfully validated through a broker-enforced model that enhances security and accountability in autonomous systems.
Autonomous systems can now execute high-stakes actions with cryptographic certainty, transforming how we secure agentic infrastructure.
Agentic infrastructure introduces a critical control-plane authorization problem: non-deterministic reasoning systems can propose high-stakes mutations to production resources, yet existing security mechanisms -- such as identity and access management (IAM), policy engines, consensus protocols, and audit logs -- either enforce static, context-unaware permissions or merely record actions post-execution. This paper introduces the Sovereign Assurance Boundary (SAB), a certificate-bound runtime admission layer for autonomous execution authority. SAB intercepts agent proposals at an assurance airlock, compiles them into typed execution contracts $C$, and binds these contracts to cryptographic evidence digests $H(E)$ and policy versions. The contracts are then routed through consequence-aware certification paths. Upon successful admission, the system emits a signed Sovereign Assurance Certificate ($\Omega$) that is strictly scoped to a specific execution identity, revocation epoch, and validity window. Finally, a sovereign execution broker verifies $\Omega$ and performs fresh pre-execution revocation and drift checks before invoking infrastructure APIs. We detail the airlock-broker architecture, formalize its admission and revocation invariants, and report preliminary feasibility measurements from a Go prototype evaluated over 2,500 admission attempts. Ultimately, this broker-enforced model prevents autonomous reasoning from directly mutating state, transforming delegated execution authority into a cryptographically verifiable, evidence-bound, revocable, and replayable runtime artifact.
