Skip to content
Case report

The five-layer trust stack for agent-to-agent coordination : a compositional architecture for verifiable, auditable, and deception-resistant autonomous agent interactions

Sep 2026 · 0 citations

TL;DR

The Five-Layer Trust Stack provides a composable, cryptographically grounded architecture that addresses coordination risks in sequence: from establishing verifiable identity through scoped delegation of authority, machine-checkable policy enforcement, signed commitments, and tamper-evident audit logs with arbitration hooks.

Abstract

As autonomous artificial intelligence (AI) agents are deployed across enterprise and defense environments, ad hoc agent-to-agent coordination introduces machine-speed accountability gaps that existing access control and audit frameworks were not originally designed to address. Without a structured trust framework, agent interactions are susceptible to the same deception techniques that adversaries apply against human decision-makers: impersonation, authority spoofing, false commitments, and the manipulation of information presented as authoritative. The Five-Layer Trust Stack provides a composable, cryptographically grounded architecture that addresses these coordination risks in sequence: from establishing verifiable identity through scoped delegation of authority, machine-checkable policy enforcement, signed commitments, and tamper-evident audit logs with arbitration hooks. A foundational governance layer—Layer 0—anchors the entire stack in human authority, policy authorship, and real-time intervention capability. The stack does not replace existing Department of Defense ICAM (Identity, Credential, and Access Management), Zero Trust, RMF (Risk Management Framework), or audit systems. Rather, it composes these existing controls into a coordination-layer architecture suitable for autonomous, machine-speed interactions, including air-gapped and disconnected, intermittent, and limited (DIL) bandwidth environments.

View source

Similar papers

#artificial intelligence Preprint Aug 2026

Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems

It is argued that agent security must be evaluated under an untrusted-model assumption: a correct system is one in which a fully prompt-injected agent still cannot exceed the authority explicitly delegated to it, and an authorization broker is implemented that closes the gap.

Panduranga Sai Varma Dantuluri, Jyotirmoy Sundi · 0 citations
Open access Oct 2026

Can We Trust Autonomous Agents? A Formal Framework for Verifiable Agent Economies

Autonomous AI agents discover services, negotiate, and settle payments. However, open agent markets lack reliable means to verify delivery, constrain delegated authority, and make identity renewal economically consequential. To address these failures, we formalize the verifiable agent economy, where evidence and progra...

Md. Monjurul Karim, Qiang Qu · 0 citations
Open access Sep 2026

Security Architecture for Agentic AI in Enterprise Cloud Environments: A Zero-Trust Framework for Secure Autonomous Systems

Agentic artificial intelligence expands the enterprise security boundary because autonomous agents can plan tasks, retain memory, invoke tools, call APIs, and initiate business actions. Authentication at session start is therefore insufficient when later actions may be influenced by untrusted content, poisoned memory,...

S. Suryawanshi · 0 citations
Open access Sep 2026

From Service Accounts to Agentic Identities: A Zero Trust Governance Framework for Delegated Authority, Runtime Tool Control, and Accountable Non-Human Actors in Enterprise Cybersecurity

The AIGATE (Agentic Identity Governance, Authority, Tool-Control and Evidence) Framework is an integrated governance architecture connecting identity, delegated authority, autonomy, runtime enforcement, evidence, and revocation across the agent lifecycle.

M. Nizamuddin, Ryana Sikder · 0 citations
#artificial intelligence Preprint Aug 2026

AgentKernel: The Trust-Native Agentic Operating System

This work argues that agents need an operating-system substrate providing mandatory, non-bypassable services for identity, input mediation, memory governance, and execution control, and introduces AgentKernel, a trust-native agent operating system built around the premise that security must be a first-class design cons...

Zhen-Hua Zou, Sheng Guo, Qiu-Yang Zhan et al. · 0 citations
Conference Aug 2026

Blockchain-based Trust Mechanisms for Artificial Intelligence Agents: A Brief Survey

Artificial intelligence agents have evolved from passive content generators into autonomous execution systems capable of invoking external tools, coordinating with peer agents, and conducting transactions across organizational boundaries. Existing security mechanisms, however, are designed primarily for single-agent th...

Jian-Tao Cai, Qing-Lin Yang, Peng-Deng Li et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.