Yao Elom Emmanuel Tsakpo

Predicate-Scoped Authority for Conflict Resolution Between Mutually Untrusted Agents

When autonomous agents from different trust domains exchange facts, those facts conflict, and a receiving agent must decide which value governs. We make two claims. First, authority over a contested fact is properly scoped to the (principal, predicate) pair, not to the principal...

Predicate-Scoped Authority for Conflict Resolution Between Mutually Untrusted Agents

When autonomous agents from different trust domains exchange facts, those facts conflict, and a receiving agent must decide which value governs. We make two claims. First, authority over a contested fact is properly scoped to the (principal, predicate) pair, not to the principal...

Context References Over Payloads: Authority Scoped to the Predicate, Not the Principal

An autonomous agent that reads a message from another party is reading text an adversary may have authored. This is the structural cause of indirect prompt injection. Most deployed defences operate after that text arrives, and the published evidence is that adaptive attackers byp...

Context References Over Payloads: Authority Scoped to the Predicate, Not the Principal

An autonomous agent that reads a message from another party is reading text an adversary may have authored. This is the structural cause of indirect prompt injection. Most deployed defences operate after that text arrives, and the published evidence is that adaptive attackers byp...

Context References Over Payloads: Authority Scoped to the Predicate, Not the Principal

An autonomous agent that reads a message from another party is reading text an adversary may have authored. This is the structural cause of indirect prompt injection. Most deployed defences operate after that text arrives, and the published evidence is that adaptive attackers byp...