SAB introduces a certificate-bound runtime admission system that converts agent proposals into typed contracts bound to evidence digests and policy versions, emitting signed certificates verified by an execution broker before any infrastructure API calls.
Semantic Quorum Assurance: Collective Certification for Non-Deterministic AI Infrastructure
1 Pith paper cite this work. Polarity classification is still indexing.
abstract
As large language model (LLM) agents are integrated into autonomous cloud operations, distributed systems face a semantic reliability problem: proposer agents can generate production mutations, such as modifying IAM policies, opening firewall security groups, or executing data exports, that are syntactically valid and statically authorized but operationally unsafe. Classical distributed consensus protocols replicate deterministic state transitions but do not evaluate the safety of the proposed intent. To address this gap, we introduce Semantic Quorum Assurance (SQA), a control-plane primitive for governing non-deterministic agentic infrastructure. SQA represents proposals as declarative execution contracts bound to cryptographic evidence chains and routes them to a diverse panel of read-only, sandboxed validator agents. SQA aggregates their judgments under a risk-adaptive quorum predicate that enforces model and archetype diversity, adjusts weights based on calibrated assurance scores, and respects archetype-specific vetoes. Admitted proposals execute only through a sovereign execution gate. We instantiate SQA in a cloud-native control plane and formalize a correlated cognitive failure model for non-deterministic validators. On 500 infrastructure-inspired mutation scenarios, with safety results reported on held-out safe/unsafe trials excluding ambiguous scenarios, SQA reduces unsafe approval from 18.5% for single-agent validation to 0.3% while adding median validation latency of 1.45--4.12 seconds across the studied risk buckets.
fields
cs.CR 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
Sovereign Assurance Boundary: Certificate-Bound Admission for Agentic Infrastructure
SAB introduces a certificate-bound runtime admission system that converts agent proposals into typed contracts bound to evidence digests and policy versions, emitting signed certificates verified by an execution broker before any infrastructure API calls.