Ling-Feng Zhou

CATP: Design and Evaluation of Local Agent Authorization and Audit Evidence

A signed authorization record authenticates what a signer asserted, but does not by itself establish that the assertion agrees with the policy and action used for a runtime decision. CATP specifies the bindings needed to carry a local pre-execution decision into offline-verifiable evidence. Its hook commits to the enfo...