arXiv cs.AI· Genliang Zhu, Chu Wang·· 1 天前AI 评分31
面向 AI 计算机使用智能体的跨接口授权协议
Cross-Interface Authorization for AI Computer-Use Agents
AI 导读
研究者提出一种面向固定版本计算机使用部署的 profile 限定授权协议，枚举产生效果的路径与持久化 sink，在提交时重新校验路径、效果、授权与状态，并要求 sink 回执一致。参考 profile 注册 12 类效果、5 种接口和 60 条路径，两种运行时映射各覆盖 1,732 个场景、生成 3,464 条 trace，独立检查器拒绝 26/26 语义回归。
正文 · 原文
Abstract:Computer-use agents act through graphical interfaces, command lines, APIs, scripts, and Model Context Protocol servers. A policy decision can be interface-invariant while its executable authorization is not: another route can bypass mediation, alter a security-relevant default, or commit after the authorized state has changed. We present a profile-bounded protocol for a fixed, versioned computer-use deployment. It enumerates effect-bearing routes and durable sinks, checks a route-to-sink enforcement cut, normalizes each concrete request to a canonical effect, issues a route-bound prepare ticket, and verifies the route, effect, grant, trace, profile, inventory, and authoritative state again at commit. A committed result requires an agreeing sink receipt. Under explicit assumptions, we prove profile-bounded refinement, matched-effect decision invariance, resistance to alternate-route laundering and declared cross-surface recomposition, commit-time state safety, and receipt-grounded outcomes.
The reference profile registers 12 effect families, five interfaces, and 60 routes. Two structurally distinct runtime mappings produce 3,464 traces over 1,732 scenarios each: 960 commits, 2,312 denials, and 192 commits after re-preparation. An independent checker accepts every retained trace and pair and rejects 26/26 semantic regressions; coverage and normalizer suites reject 24/24 and 720/720 mutants; and 168/168 commit probes match their declared outcomes. A frozen-source audit passes 52 checks over 12 files from two independent hybrid runtimes and one public authorization substrate. Source-shaped adapter refinements commit 48/48 instrumented calls and reject 15/15 unbound cases. The resulting guarantees bind the declared profile and its effect semantics.
| Comments: | 31 pages, 2 figures, and 7 tables. Includes formal results, two reference runtime mappings, mutation tests, commit-time race probes, source-shaped adapter checks, and a frozen external-source audit. Guarantees bind the registered deployment profile and declared effect semantics |
| Subjects: | Artificial Intelligence (cs.AI) |
| Cite as: | arXiv:2610.41397 [cs.AI] |
| (or arXiv:2610.41397v1 [cs.AI] for this version) | |
| https://doi.org/10.48550/arXiv.2610.41397 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Chu Wang [view email]
[v1]
Fri, 30 Oct 2026 08:07:51 UTC (48 KB)
来源：arXiv cs.AI · arxiv.org