Ai-Yao Zhang

Runtime Authorization Consistency Checking for MCP-based Agentic Workflows

Agentic systems increasingly fulfill user requests through multi-step tool workflows over files, services, and external resources. In these workflows, isolated per-call checks can miss a workflow-level failure: each call may be locally admissible, but the sequence can exceed the authorization boundary established for t...