Constraining the Commit Boundary: A DIO/ODI-Informed Authorization Guardrail for Agentic Entity Resolution
Auteurs : Daniel Beranek
Résumé scientifique
Agentic Entity Resolution (ER) systems iteratively plan actions, retrieve evidence, revise hypotheses, and propose graph mutations. An erroneous identity hypothesis may condition later retrieval and produce apparent confirmation. This paper proposes a Digital Identity Optimization (DIO) and Ontology of Digital Identity (ODI)-informed authorization boundary between evidence available for reasoning and evidence eligible to authorize persistent identity-changing mutations. A domain-governed constraint-binding function maps selected reconstruction-failure distinctions to identity-preserving constraints. An abstract two-phase supervisor permits commitment only when claim-specific authorization-eligible evidence supports every required proposition, relevant conflicts are resolved, scope is valid, and bound state and policy versions remain current. Admission as UNVERIFIED does not confer authorization eligibility; separate claim-specific promotion is required, and insufficient support or unresolved material conflict defers the mutation. The guarantee is conditional on adequate domain policy, sound claim-specific evidence promotion, and faithful enforcement; the specification does not independently establish promotion correctness or semantic truth. The proposed contribution is a DIO/ODI-informed diagnostic-to-constraint organization integrated with an explicit authorization contract for claim-specific evidence promotion and mutation-specific proposition requirements. Scope binding, conflict handling, and commit-time version checks are treated as necessary contract elements, not as novel mechanisms in isolation. This is a conceptual architecture without implementation or empirical validation. It does not prevent erroneous hypotheses or hypothesis-conditioned retrieval; dependency-aware evidence flow remains future research.
Les articles autour de lui, par date et par proximité
Plus haut, c’est plus proche de cet article ; à gauche, c’est plus ancien. Les traits relient les articles proches entre eux : les groupes de traits sont des sous-thèmes. Sélectionnez un point pour voir pourquoi il est là. Retour au résumé de cet article
Les articles autour de celui-ci
Classés selon la proximité de leur titre et de leur résumé avec ceux de cet article. Sélectionnez-en pour les lire ensemble.
Les articles les plus proches
-
The Crisis of Entity Resolution in Heterogeneous AI Environments: Data, Financial, and Semantic DimensionsDaniel Beránek · 2026 · Figshare preprint · Résumé IA disponible
Résumé scientifique
AbstractThis preprint examines the crisis of entity resolution in heterogeneous AI environments across data, financial, and semantic dimensions. It develops an entity turn in AI: a shift from isolated tokens, documents, and embeddings toward the question of whether systems can reliably identify and reconstruct the same entity across sources, time, languages, and contexts.The paper synthesizes research on entity linking, entity matching, temporally evolving knowledge bases, retrieval-augmented generation (RAG), and multi-agent LLM systems with public enterprise evidence on data quality and AI readiness. It identifies four interconnected anomalies: identity collapse under name ambiguity and po…
-
From Entity Resolution Anomalies to Reconstruction Failure Modes: A Taxonomic Note Following Minimum Viable Digital Identity Optimization (DIO)Daniel Beránek · 2026 · Zenodo (CERN European Organization for Nuclear Research) preprint · Résumé IA disponible
Résumé scientifique
This taxonomic note refines the vocabulary of Entity Resolution Anomalies developed in The Crisis of Entity Resolution in Heterogeneous AI Environments and follows the adversarial reduction introduced in Minimum Viable Digital Identity Optimization (DIO): From Adversarial Reduction to the Semantic Field Dynamics of Digital Identity. It proposes a non-exclusive, multi-level diagnostic taxonomy of Reconstruction Failure Modes. The taxonomy distinguishes four analytical domains: Referential Reconstruction Failures, Semantic Coherence Failures, Temporal Reconstruction Failures, and Contextual Adequacy Failures. Referential failures include Entity Substitution, Merge Failure, Split Failure, and E…
-
Authorization Propagation in Multi-Agent AI Systems: Identity Governance as InfrastructureKrti Tallam · 2026 · arXiv.org · preprint, non relu par les pairs · cité 11 fois · Pas encore résumé
Résumé scientifique
The security discussion around agentic AI focuses heavily on prompt injection. This paper argues that multi-agent systems also create a distinct authorization problem: maintaining authorization invariants as non-human principals retrieve data, delegate tasks, and synthesize results across changing boundaries. We call this problem authorization propagation. It is not reducible to prompt injection and is not fully addressed by classical access-control models such as RBAC, ABAC, or ReBAC. The paper formalizes authorization propagation as a workflow-level property, identifies three sub-problems (transitive delegation, aggregation inference, and temporal validity), and derives seven structural re…
-
Decision Evidence Maturity Model for Agentic AI: A Property-Level Method SpecificationOleg Solozobov · 2026 · arXiv.org · preprint, non relu par les pairs · cité 2 fois · Pas encore résumé
Résumé scientifique
Agentic AI systems produce decision evidence at scale through execution telemetry, but property-level reconstruction often fails when an external party asks a specific governance question about a specific decision: the assembled evidence is insufficient to answer it. We name this pattern the container fallacy: the automatic equation of evidence-container presence with audit sufficiency. This paper specifies the Decision Evidence Maturity Model (DEMM), a property-level reconstructability method for agentic decisions. DEMM classifies evidence sufficiency into four executable categories plus a protocol-level"conflicting"category and aggregates per-property verdicts into a five-level capability …
-
Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AIAmjad Ibrahim, Yong Li · 2026 · arXiv.org · preprint, non relu par les pairs · cité 4 fois · Pas encore résumé
Résumé scientifique
As AI systems evolve from passive models into autonomous active agents capable of initiating actions, collaborating, and delegating tasks, the traditional boundaries of software systems blur. Traditional authorization and delegation frameworks, built around fixed principals, explicit requests, and static scopes, are insufficient to govern agentic systems. Agentic AI demands richer authorization semantics: agents must inherit and delegate permissions, act under time-limited authority, and coordinate through shared protocols. Existing Identity and Access Management (IAM) systems fail to fully capture this notion of agency, lacking mechanisms for recursive delegation, contextual boundaries, and…
-
Digital Identity Optimization (DIO): A Conceptual Framework for Entity-Based Visibility in the Age of AI-Mediated SearchDaniel Beránek · 2026 · Zenodo (CERN European Organization for Nuclear Research) preprint · Résumé IA disponible
Résumé scientifique
The emergence of AI-driven search and answer engines has fundamentally disrupted the logic of digital visibility. Traditional Search Engine Optimization (SEO), built on keyword-document matching, and AI Optimization (AIO), focused on answer-engine citation, provide increasingly insufficient responses to a landscape in which artificial intelligence recommends entities rather than ranks pages. This paper theorizes Digital Identity Optimization (DIO) as a third-generation framework for digital visibility. Building on Beránek’s (2026) foundational manifest, it defines DIO as the systematic optimization of an entity’s digital identity—its distributed digital representation across human and machin…
-
Compliance-as-Code for AI-Driven Identity Systems: Clause-to-Control Traceability and Machine-Readable EvidenceL. Nweke, P. Yeng · 2026 · IEEE Access · cité 1 fois · Pas encore résumé
Résumé scientifique
Artificial intelligence (AI)-driven identity (ID) systems (document onboarding, wallet-based credential presentation, fraud/risk scoring) increasingly face regulatory obligations requiring demonstrable accountability, traceability, and technical documentation. Yet current compliance practice remains predominantly document-centric and manual, making it difficult to keep evidence synchronized with rapidly evolving systems and models. We present a compliance-as-code approach for AI-driven ID workflows that: 1) maintains clause-to-control traceability under policy/configuration evolution; 2) treats evidence completeness as an enforceable property via fixed monitoring-window semantics (silence is…
-
Runtime Authorization of Self-Generated Subgoals in Long-Horizon Tool-Using AI AgentsGen-Liang Zhu, Chu Wang · 2026 · cité 1 fois · Pas encore résumé
Résumé scientifique
Long-horizon tool-using AI agents create subgoals, replan, delegate work, and compose sibling results. Per-tool permission checks cannot establish that a changing goal graph remains within the principal-approved task. We address this authorization gap in a finite structured domain with one principal and one authorization root. Each proposed goal-graph mutation carries a version-bound witness that its continuation traces, resources, obligations, invariants, and closing condition refine the active root contract; every protected effect is rechecked at an atomic commit boundary. Free-form goal text supplies no authority. We prove trace-policy and modeled forbidden-state preservation under explic…
Les travaux antérieurs sur lesquels il s’appuie
-
From Intent to Execution Grant: An Execution-Boundary Conformance Profile for High-Risk AI ActionsMeng-Rong Wu, Lin Wang, Yong Zhang et al. · 2026 · cité 3 fois · Pas encore résumé
Résumé scientifique
AI agents increasingly propose actions with external consequences, including financial transfers, infrastructure changes, software deployments, disclosures, and physical actuation. Authorization engines, policy languages, runtime monitors, provenance mechanisms, and agent guardrails provide important foundations, but do not necessarily define a common semantic contract for the final transition from a particular candidate action to execution authority. We specify EBL-Core, an execution-boundary conformance profile for deciding whether one canonical, fully materialized AI-generated candidate may receive action-scoped execution authority under explicit conditions. It binds a structured intent o…
-
Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM AgentsIgor Santos-Grueiro · 2026 · arXiv.org · preprint, non relu par les pairs · cité 26 fois · Pas encore résumé
Résumé scientifique
An LLM agent often acts on an approval it observed earlier: it reads the approval, prepares the request, and commits later. If the approval was withdrawn, or covers a different effect, the service can apply the change and report success. Seventeen fixed advisories from three deployed agent products document failures: an approval did not cover the executed effect, with no intervening change (12), or survived a change in the facts it depended on (5). We propose commit-time authorization (CTA), requiring at least one complete, current justification for the exact effect at commit: a live grant, current premises, ready dependencies, an exact-effect binding, and an eligible path. CommitGate select…
-
CONTINUITY: Security-Context Contracts for Composable LLM Agent ControlsChris Zheng, Yang Geng · 2026 · cité 7 fois · Pas encore résumé
Résumé scientifique
LLM agent systems increasingly combine provenance tracking, authorization, policy enforcement, protocol adapters, and execution controls. However, individually correct security mechanisms do not necessarily compose into an end-to-end secure system: security-critical context may be dropped, widened, rebound, or reinterpreted as actions cross component boundaries. We identify this failure mode as security-context discontinuity and introduce CONTINUITY, a framework for verifiable composition of agent security controls. CONTINUITY models each component with an assume-guarantee contract and carries authenticated security context across transitions using signed root grants, provenance commitments,…
-
AgenticER: the next frontier in Entity ResolutionGeorge Papadakis, Panos Korovesis, Manolis Koubarakis et al. · 2026 · arXiv.org · preprint, non relu par les pairs · cité 1 fois · Pas encore résumé
Résumé scientifique
Entity Resolution (ER) is a fundamental problem in data management, playing a critical role in tasks like data cleaning and knowledge graph construction. The existing ER approaches range from traditional rule-based to deep learning techniques and LLM-based methods, but typically operate under a ``passive paradigm'', as duplicates are detected through static, one-shot similarity computations. Such approaches fail to capture the inherently uncertain and context-dependent nature of real-world ER tasks, especially in data lakes with streaming content in heterogeneous formats such as CSV files, JSON files, RDF dumps, and free text. In such settings, resolving ambiguity often requires iterative ev…
-
From Business Events to Auditable Decisions: Ontology-Governed Graph Simulation for Enterprise AIHongyin Zhu, Jinming Liang, Mengjun Hou et al. · 2026 · arXiv.org · preprint, non relu par les pairs · cité 1 fois · Pas encore résumé
Résumé scientifique
Existing LLM-based agent systems share a common architectural failure: they answer from the unrestricted knowledge space without first simulating how active business scenarios reshape that space for the event at hand -- producing decisions that are fluent but ungrounded and carrying no audit trail. We present LOM-action, which equips enterprise AI with \emph{event-driven ontology simulation}: business events trigger scenario conditions encoded in the enterprise ontology~(EO), which drive deterministic graph mutations in an isolated sandbox, evolving a working copy of the subgraph into the scenario-valid simulation graph $G_{\text{sim}}$; all decisions are derived exclusively from this evolve…
Aller plus loin
Comment ces articles sont-ils trouvés ?
Nous comparons le titre et le résumé de cet article avec ceux de tous les articles résumés sur ce site, et avec les articles que Semantic Scholar recommande, ceux qu’il cite et ceux qui le citent (pour un article très cité, ses citations les plus récentes et, depuis OpenAlex, les plus citées). Parmi les travaux antérieurs et les suites, les articles qui s’utilisent en profondeur, une méthode qu’il utilise et les suites très citées remontent un peu. Les niveaux (très proche, proche, apparenté) viennent de la similarité des textes, pas d’un jugement de qualité ; * signale un article sans résumé, comparé par son titre. La phrase sous un article est écrite par une IA à partir des deux résumés : vérifiez-la dans les articles. Un article jugé hors sujet par trois lecteurs quitte la liste.
Mis à jour le 6 novembre 2026.