{"id":"https://openalex.org/W7225420640","doi":"https://doi.org/10.5281/zenodo.24013160","title":"The Field Authority Leakage Boundary: Privilege Propagation and Unauthorized Promotion Across Composed AI Fields","display_name":"The Field Authority Leakage Boundary: Privilege Propagation and Unauthorized Promotion Across Composed AI Fields","publication_year":2026,"publication_date":"2026-11-06","ids":{"openalex":"https://openalex.org/W7225420640","doi":"https://doi.org/10.5281/zenodo.24013160"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24013160","doi":"https://doi.org/10.5281/zenodo.24013160","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24013160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24013160","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133610272","display_name":"Rog\u00e9rio Figurelli","orcid":"https://orcid.org/0009-0002-5726-1765","observed_orcids":["https://orcid.org/0009-0002-5726-1765"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Figurelli, Rog\u00e9rio","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0002-5726-1765","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5133610272"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.005100000184029341,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/authorization-boundaries","display_name":"authorization boundaries","score":0.5799999833106995},{"id":"https://openalex.org/keywords/cryptographic-authentication","display_name":"cryptographic authentication","score":0.5080000162124634},{"id":"https://openalex.org/keywords/policy-enforcement","display_name":"policy enforcement","score":0.42899999022483826},{"id":"https://openalex.org/keywords/security-reduction","display_name":"security reduction","score":0.40700000524520874}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6820999979972839},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5289999842643738},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4260999858379364},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.37439998984336853},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.3743000030517578},{"id":"https://openalex.org/C199728807","wikidata":"https://www.wikidata.org/wiki/Q2578557","display_name":"Equity (law)","level":2,"score":0.3743000030517578},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.3684999942779541},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3677000105381012},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.362199991941452},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.35359999537467957},{"id":"https://openalex.org/C2778979077","wikidata":"https://www.wikidata.org/wiki/Q330190","display_name":"Receipt","level":2,"score":0.35249999165534973},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.34299999475479126},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.33379998803138733},{"id":"https://openalex.org/C547195049","wikidata":"https://www.wikidata.org/wiki/Q1725664","display_name":"Terminology","level":2,"score":0.3255000114440918},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C98147612","wikidata":"https://www.wikidata.org/wiki/Q215599","display_name":"Promotion (chess)","level":3,"score":0.321399986743927},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C198104137","wikidata":"https://www.wikidata.org/wiki/Q974688","display_name":"Communication source","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.29260000586509705},{"id":"https://openalex.org/C26869875","wikidata":"https://www.wikidata.org/wiki/Q2596417","display_name":"Beneficiary","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.28999999165534973},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.27619999647140503},{"id":"https://openalex.org/C2777179996","wikidata":"https://www.wikidata.org/wiki/Q911222","display_name":"Mistake","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C2778938767","wikidata":"https://www.wikidata.org/wiki/Q1502043","display_name":"Rules of engagement","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C100521375","wikidata":"https://www.wikidata.org/wiki/Q2015382","display_name":"Competence (human resources)","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C204854418","wikidata":"https://www.wikidata.org/wiki/Q1362921","display_name":"Polling","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.257999986410141},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.25450000166893005},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24013160","doi":"https://doi.org/10.5281/zenodo.24013160","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24013160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24013161","doi":"https://doi.org/10.5281/zenodo.24013161","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24013161","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24013160","doi":"https://doi.org/10.5281/zenodo.24013160","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24013160","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5473999977111816,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7225345018","https://openalex.org/W7166048834","https://openalex.org/W7203698602","https://openalex.org/W7214591822","https://openalex.org/W7221785113","https://openalex.org/W7165481859","https://openalex.org/W7221047818","https://openalex.org/W7221069557","https://openalex.org/W7225322044","https://openalex.org/W7172018480"],"abstract_inverted_index":{"Complex":[0],"artificial-intelligence":[1],"applications":[2],"route":[3],"requests":[4],"among":[5],"model":[6,219],"services,":[7],"memory,":[8],"retrieval,":[9],"tools,":[10],"policy":[11,128,236],"evaluators,":[12],"and":[13,23,90,112,126,139,220,253],"consequential":[14],"receivers.":[15],"A":[16],"locally":[17],"legitimate":[18],"permission,":[19],"a":[20,24,36,54,57,73,80,85,96,131,154,176,180,184,190,215,222,241,247],"returned":[21],"status,":[22],"cryptographically":[25],"authenticated":[26,192],"receipt":[27],"can":[28],"be":[29],"mistakenly":[30],"treated":[31],"as":[32,84],"equivalent":[33],"grounds":[34],"for":[35],"wider":[37],"decision.":[38],"This":[39],"article":[40],"studies":[41],"the":[42,77,135,140,145,159,197,205],"boundary":[43],"at":[44],"which":[45,263],"scoped":[46],"authorization":[47],"or":[48,64,240],"operational":[49],"evidence":[50,102,255],"is":[51,103,246],"promoted":[52],"into":[53],"claim":[55],"about":[56],"different":[58],"principal,":[59],"audience,":[60],"operation,":[61],"epoch,":[62],"recipient,":[63],"effect.":[65],"Rather":[66],"than":[67],"asserting":[68],"that":[69],"field":[70,83],"terminology":[71],"introduces":[72],"new":[74],"security":[75,265],"primitive,":[76],"analysis":[78],"treats":[79],"composed":[81],"AI":[82],"proposed":[86],"mission-relative":[87],"descriptive":[88],"layer":[89],"tests":[91],"its":[92],"incremental":[93],"value":[94],"against":[95,230],"competent":[97],"conventional":[98,136,264],"implementation.":[99],"The":[100,244],"primary":[101],"an":[104,233],"author-developed":[105],"exploratory":[106],"laboratory":[107],"with":[108,183,258],"distinct":[109],"localhost":[110],"authority":[111,198],"receiver":[113,182,207],"processes,":[114],"separate":[115],"SQLite":[116],"stores,":[117],"signed":[118],"HTTP":[119],"messages,":[120],"terminal":[121,171],"fencing,":[122],"process":[123],"crashes,":[124],"reconciliation,":[125],"two":[127],"representations.":[129],"Across":[130],"twelve-family,":[132],"forty-eight-episode":[133],"matrix,":[134],"SQL-policy":[137],"arm":[138,142],"typed-witness":[141],"each":[143],"satisfied":[144],"finite":[146],"author-defined":[147],"oracle":[148],"in":[149,204],"24":[150,152],"of":[151,250],"episodes;":[153],"second":[155],"complete":[156],"run":[157],"preserved":[158],"specified":[160,217],"invariants.":[161],"Forty-four":[162],"non-racing":[163],"records":[164],"were":[165],"byte-identical":[166],"across":[167],"runs,":[168],"whereas":[169],"concurrent":[170],"outcomes":[172],"legitimately":[173],"varied.":[174],"In":[175],"separately":[177],"constructed":[178],"counterexample,":[179],"substitute":[181],"hypothetically":[185],"compromised":[186],"proof":[187],"key":[188],"issued":[189],"validly":[191],"but":[193],"false":[194],"COMMITTED":[195],"receipt;":[196],"acknowledged":[199],"completion":[200],"despite":[201],"zero":[202],"effects":[203],"original":[206],"store.":[208],"These":[209],"observations":[210],"support":[211],"conditional":[212],"safety":[213],"within":[214],"narrowly":[216],"honest-receiver":[218],"expose":[221],"receiver-custody":[223],"limit;":[224],"they":[225],"do":[226],"not":[227],"demonstrate":[228],"effectiveness":[229],"independent":[231],"adversaries,":[232],"actual":[234],"external":[235],"engine,":[237],"production":[238],"deployment,":[239],"Field-specific":[242],"advantage.":[243],"contribution":[245],"falsifiable":[248],"account":[249],"authority-promotion":[251],"claims":[252],"their":[254],"dependencies,":[256],"together":[257],"explicit":[259],"reduction":[260],"conditions":[261],"under":[262],"engineering":[266],"entirely":[267],"suffices.":[268]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-11-07T00:00:00"}