The five-layer trust stack for agent-to-agent coordination : a compositional architecture for verifiable, auditable, and deception-resistant autonomous agent interactions
The Five-Layer Trust Stack provides a composable, cryptographically grounded architecture that addresses coordination risks in sequence: from establishing verifiable identity through scoped delegation of authority, machine-checkable policy enforcement, signed commitments, and tamper-evident audit logs with arbitration hooks.
Abstract
As autonomous artificial intelligence (AI) agents are deployed across enterprise and defense environments, ad hoc agent-to-agent coordination introduces machine-speed accountability gaps that existing access control and audit frameworks were not originally designed to address. Without a structured trust framework, agent interactions are susceptible to the same deception techniques that adversaries apply against human decision-makers: impersonation, authority spoofing, false commitments, and the manipulation of information presented as authoritative.
The Five-Layer Trust Stack provides a composable, cryptographically grounded architecture that addresses these coordination risks in sequence: from establishing verifiable identity through scoped delegation of authority, machine-checkable policy enforcement, signed commitments, and tamper-evident audit logs with arbitration hooks. A foundational governance layer—Layer 0—anchors the entire stack in human authority, policy authorship, and real-time intervention capability.
The stack does not replace existing Department of Defense ICAM (Identity, Credential, and Access Management), Zero Trust, RMF (Risk Management Framework), or audit systems. Rather, it composes these existing controls into a coordination-layer architecture suitable for autonomous, machine-speed interactions, including air-gapped and disconnected, intermittent, and limited (DIL) bandwidth environments.
It is argued that agent security must be evaluated under an untrusted-model assumption: a correct system is one in which a fully prompt-injected agent still cannot exceed the authority explicitly delegated to it, and an authorization broker is implemented that closes the gap.
Panduranga Sai Varma Dantuluri, Jyotirmoy Sundi· 0 citations
Autonomous AI agents discover services, negotiate, and settle payments. However, open agent markets lack reliable means to verify delivery, constrain delegated authority, and make identity renewal economically consequential. To address these failures, we formalize the verifiable agent economy, where evidence and progra...
Agentic artificial intelligence expands the enterprise security boundary because autonomous agents can plan
tasks, retain memory, invoke tools, call APIs, and initiate business actions. Authentication at session start is therefore
insufficient when later actions may be influenced by untrusted content, poisoned memory,...
S. Suryawanshi· International Journal of Inn...· 0 citations
The AIGATE (Agentic Identity Governance, Authority, Tool-Control and Evidence) Framework is an integrated governance architecture connecting identity, delegated authority, autonomy, runtime enforcement, evidence, and revocation across the agent lifecycle.
M. Nizamuddin, Ryana Sikder· Informatics· 0 citations
This work argues that agents need an operating-system substrate providing mandatory, non-bypassable services for identity, input mediation, memory governance, and execution control, and introduces AgentKernel, a trust-native agent operating system built around the premise that security must be a first-class design cons...
Zhen-Hua Zou, Sheng Guo, Qiu-Yang Zhan et al.· 0 citations
Artificial intelligence agents have evolved from passive content generators into autonomous execution systems capable of invoking external tools, coordinating with peer agents, and conducting transactions across organizational boundaries. Existing security mechanisms, however, are designed primarily for single-agent th...
Jian-Tao Cai, Qing-Lin Yang, Peng-Deng Li et al.· 2026 6th International Confe...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.