LP
L. Pereira Barrios
info
Please Note
<p>This page displays the records of the person named above and is not linked to a unique person identifier. This record may need to be merged to a profile.</p>
1 records found
1
An AI agent acts for its owner but leaves no way to verify who directed it, what it did, or whether it booted from rules the owner set. We design and implement an owner-sovereign integrity layer: owner-anchored identity (P1), a signed append-only action log (P2), and a tamper-evident configuration (P3), rooted in an owner key held off the agent’s host. Each runs in an audit mode and a strict mode. We measure what strict enforcement costs the owner, not what it stops. Across four task suites run twice on Claude Haiku 4.5, the strict arms wrongly blocked 0 of 566 legitimate actions (ALR 0.000, Wilson 95% upper bound 0.0067); the signed identity check denied a forged owner session 10/10, and the configuration check did the same against a tampered configuration. Impersonation requires the owner’s key. No primitive improves the agent’s reasoning.
...
An AI agent acts for its owner but leaves no way to verify who directed it, what it did, or whether it booted from rules the owner set. We design and implement an owner-sovereign integrity layer: owner-anchored identity (P1), a signed append-only action log (P2), and a tamper-evident configuration (P3), rooted in an owner key held off the agent’s host. Each runs in an audit mode and a strict mode. We measure what strict enforcement costs the owner, not what it stops. Across four task suites run twice on Claude Haiku 4.5, the strict arms wrongly blocked 0 of 566 legitimate actions (ALR 0.000, Wilson 95% upper bound 0.0067); the signed identity check denied a forged owner session 10/10, and the configuration check did the same against a tampered configuration. Impersonation requires the owner’s key. No primitive improves the agent’s reasoning.