{"id":"https://openalex.org/W7224086533","doi":"https://doi.org/10.5281/zenodo.23735273","title":"TR-2026-01: Deterministic Policy Enforcement, Monotonic Delegation Attenuation, and OCSF Provenance for Enterprise Multi-Agent Systems","display_name":"TR-2026-01: Deterministic Policy Enforcement, Monotonic Delegation Attenuation, and OCSF Provenance for Enterprise Multi-Agent Systems","publication_year":2026,"publication_date":"2026-10-28","ids":{"openalex":"https://openalex.org/W7224086533","doi":"https://doi.org/10.5281/zenodo.23735273"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23735273","doi":"https://doi.org/10.5281/zenodo.23735273","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23735273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23735273","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125281045","display_name":"Raghuvar Karthik Durga","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Durga, Raghuvar Karthik","raw_affiliation_strings":["Microsoft Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Corporation","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5125281045"],"corresponding_institution_ids":["https://openalex.org/I1290206253"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82625451,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.906000018119812},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.7559999823570251},{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.7369999885559082},{"id":"https://openalex.org/keywords/capability-based-security","display_name":"capability-based security","score":0.6779999732971191},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.6710000038146973},{"id":"https://openalex.org/keywords/model-context-protocol","display_name":"Model Context Protocol","score":0.7509999871253967},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.5680000185966492}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.713699996471405},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6028000116348267},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.5788999795913696},{"id":"https://openalex.org/C139458680","wikidata":"https://www.wikidata.org/wiki/Q12184942","display_name":"Interoperation","level":3,"score":0.5753999948501587},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5268999934196472},{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.4936999976634979},{"id":"https://openalex.org/C2780315633","wikidata":"https://www.wikidata.org/wiki/Q16354","display_name":"Whiteboard","level":2,"score":0.4683000147342682},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4422999918460846},{"id":"https://openalex.org/C8797682","wikidata":"https://www.wikidata.org/wiki/Q2115","display_name":"XML","level":2,"score":0.4302999973297119},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4284999966621399},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4212000072002411},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4165000021457672},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C52723943","wikidata":"https://www.wikidata.org/wiki/Q1127410","display_name":"Serialization","level":2,"score":0.39910000562667847},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.39719998836517334},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.3813000023365021},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.36899998784065247},{"id":"https://openalex.org/C204495577","wikidata":"https://www.wikidata.org/wiki/Q1205349","display_name":"Callback","level":2,"score":0.36660000681877136},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.3659999966621399},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.35510000586509705},{"id":"https://openalex.org/C52146309","wikidata":"https://www.wikidata.org/wiki/Q7431116","display_name":"Schema (genetic algorithms)","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C11821877","wikidata":"https://www.wikidata.org/wiki/Q187959","display_name":"Distributive property","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C2780154230","wikidata":"https://www.wikidata.org/wiki/Q513420","display_name":"Undo","level":2,"score":0.31540000438690186},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.30309998989105225},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.29350000619888306},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.29249998927116394},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.28859999775886536},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C2780416260","wikidata":"https://www.wikidata.org/wiki/Q2063","display_name":"JSON","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28220000863075256},{"id":"https://openalex.org/C188087704","wikidata":"https://www.wikidata.org/wiki/Q369577","display_name":"Standardization","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.27790001034736633},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2766999900341034},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C171018156","wikidata":"https://www.wikidata.org/wiki/Q7370306","display_name":"Rotation formalisms in three dimensions","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2727000117301941}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23735273","doi":"https://doi.org/10.5281/zenodo.23735273","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23735273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.23735274","doi":"https://doi.org/10.5281/zenodo.23735274","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23735274","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23735273","doi":"https://doi.org/10.5281/zenodo.23735273","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23735273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.47620001435279846,"display_name":"Peace, justice, and strong institutions"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7212283706","https://openalex.org/W4414115777","https://openalex.org/W7151989043","https://openalex.org/W7171700882","https://openalex.org/W7172469123","https://openalex.org/W7128311274","https://openalex.org/W7218364853","https://openalex.org/W7133302160","https://openalex.org/W7166687811","https://openalex.org/W7213563890"],"abstract_inverted_index":{"As":[0],"enterprise":[1],"organizations":[2],"transition":[3],"from":[4],"single-turn":[5],"large":[6],"language":[7],"model":[8],"(LLM)":[9],"assistants":[10],"to":[11,31,126],"autonomous":[12],"multi-agent":[13,60],"execution":[14],"meshes":[15],"speaking":[16],"the":[17,46,59,85,92],"Model":[18],"Context":[19],"Protocol":[20],"(MCP)":[21],"and":[22,39,58,71,77,91,115],"Agent-to-Agent":[23],"(A2A)":[24],"protocol,":[25],"traditional":[26],"perimeter-based":[27],"access":[28],"controls":[29],"fail":[30],"prevent":[32],"confused-deputy":[33],"privilege":[34],"escalation,":[35],"batch-array":[36],"policy":[37],"bypass,":[38],"non-repudiable":[40],"audit":[41,123],"gaps.":[42],"Building":[43],"directly":[44],"upon":[45],"foundational":[47],"Zero":[48],"Trust":[49],"Architecture":[50],"principles":[51],"established":[52],"in":[53,64],"Durga":[54,65],"(2025,":[55,66],"DOI:":[56],"10.38124/ijsrmt.v4i12.1050)":[57],"coordination":[61],"taxonomies":[62],"formalized":[63],"DOIs:":[67],"10.38124/ijsrmt.v4i11.1049,":[68],"10.38124/ijsrmt.v4i10.1048,":[69],"10.38124/ijsrmt.v4i9.1047,":[70],"10.5281/zenodo.23723284),":[72],"this":[73],"technical":[74],"report":[75],"specifies":[76],"benchmarks":[78],"three":[79],"production":[80],"enforcement":[81],"invariants":[82],"implemented":[83],"across":[84,111],"OWASP":[86],"Agent":[87],"Control":[88],"Standard":[89],"(ACS)":[90],"AgentTrust":[93],"open":[94],"specification:":[95],"(1)":[96],"per-element":[97],"JSON-RPC":[98],"2.0":[99],"batch":[100],"decomposition":[101],"with":[102],"deterministic":[103],"fail-closed":[104],"semantics;":[105],"(2)":[106],"cryptographic":[107],"monotonic":[108],"capability":[109],"attenuation":[110],"transitive":[112],"delegation":[113],"hops;":[114],"(3)":[116],"RFC":[117],"8785":[118],"JSON":[119],"Canonicalization":[120],"Scheme":[121],"(JCS)":[122],"receipts":[124],"mapped":[125],"Open":[127],"Cybersecurity":[128],"Schema":[129],"Framework":[130],"(OCSF":[131],"v1.3.0)":[132],"provenance":[133],"records.":[134]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-29T00:00:00"}