{"id":"https://openalex.org/W7225618028","doi":"https://doi.org/10.5281/zenodo.24078177","title":"AI Safety for AI Agents in Europe Part IV : Two Independent Checks and Endpoint-Side Reconstruction to Prevent Tool Misuse, Memory Poisoning, Unauthorized Delegation and Unlawful Data Use \u2014 Supporting EU AI Act Record-Keeping, Human Oversight and Cybersecurity, GDPR Purpose Limitation and DORA","display_name":"AI Safety for AI Agents in Europe Part IV : Two Independent Checks and Endpoint-Side Reconstruction to Prevent Tool Misuse, Memory Poisoning, Unauthorized Delegation and Unlawful Data Use \u2014 Supporting EU AI Act Record-Keeping, Human Oversight and Cybersecurity, GDPR Purpose Limitation and DORA","publication_year":2026,"publication_date":"2026-11-09","ids":{"openalex":"https://openalex.org/W7225618028","doi":"https://doi.org/10.5281/zenodo.24078177"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24078177","doi":"https://doi.org/10.5281/zenodo.24078177","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24078177","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24078177","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123721973","display_name":"Sangam Das","orcid":"https://orcid.org/0009-0001-4056-9213","observed_orcids":["https://orcid.org/0009-0001-4056-9213"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Das, Sangam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5123721973"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.3068999946117401,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.3068999946117401,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.23229999840259552,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.18870000541210175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ai-agents","display_name":"AI agents","score":0.7979999780654907},{"id":"https://openalex.org/keywords/ai-safety","display_name":"AI safety","score":0.8769999742507935},{"id":"https://openalex.org/keywords/memory-poisoning","display_name":"memory poisoning","score":0.9359999895095825},{"id":"https://openalex.org/keywords/eu-ai-act","display_name":"EU AI Act","score":0.9350000023841858},{"id":"https://openalex.org/keywords/human-oversight","display_name":"human oversight","score":0.6610000133514404},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.8759999871253967},{"id":"https://openalex.org/keywords/provenance","display_name":"provenance","score":0.7160000205039978},{"id":"https://openalex.org/keywords/atomic-commit","display_name":"atomic commit","score":0.6330000162124634},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.31700000166893005},{"id":"https://openalex.org/keywords/dora","display_name":"DORA","score":0.5929999947547913},{"id":"https://openalex.org/keywords/ai-governance","display_name":"AI governance","score":0.3440000116825104},{"id":"https://openalex.org/keywords/payment-rails","display_name":"payment rails","score":0.3319999873638153}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6776000261306763},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.673799991607666},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.6179999709129333},{"id":"https://openalex.org/C44209976","wikidata":"https://www.wikidata.org/wiki/Q1327773","display_name":"Non-repudiation","level":3,"score":0.559499979019165},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.5166000127792358},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4887000024318695},{"id":"https://openalex.org/C190978112","wikidata":"https://www.wikidata.org/wiki/Q17074350","display_name":"Payment processor","level":3,"score":0.45980000495910645},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.4447000026702881},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.41940000653266907},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.4162999987602234},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.36550000309944153},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.35370001196861267},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.3476000130176544},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.33180001378059387},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3278000056743622},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3237000107765198},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.32010000944137573},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.31529998779296875},{"id":"https://openalex.org/C2776529561","wikidata":"https://www.wikidata.org/wiki/Q157833","display_name":"Embezzlement","level":3,"score":0.31470000743865967},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.3118000030517578},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2957000136375427},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2872999906539917},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C58033187","wikidata":"https://www.wikidata.org/wiki/Q386147","display_name":"Point of sale","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C165136773","wikidata":"https://www.wikidata.org/wiki/Q1363179","display_name":"Single point of failure","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C18460168","wikidata":"https://www.wikidata.org/wiki/Q5416707","display_name":"Event calculus","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.25270000100135803},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24078177","doi":"https://doi.org/10.5281/zenodo.24078177","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24078177","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.24078178","doi":"https://doi.org/10.5281/zenodo.24078178","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24078178","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24078177","doi":"https://doi.org/10.5281/zenodo.24078177","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24078177","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.7297000288963318}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7225609634","https://openalex.org/W7225641369","https://openalex.org/W7225653547","https://openalex.org/W7167616632","https://openalex.org/W7223548586","https://openalex.org/W7225420894","https://openalex.org/W7136496478","https://openalex.org/W7214235244","https://openalex.org/W7161376574","https://openalex.org/W7221163832"],"abstract_inverted_index":{"Abstract":[0],"In":[1,860],"most":[2],"AI-agent":[3,507],"and":[4,10,67,97,128,136,154,187,331,341,349,353,390,416,422,466,511,516,520,536,539,544,550,555,564,582,604,659,674,680,687,699,724,735,769,773,781,787,791,798,826,844,881,896,909,922,933,937,948,961,980,995,1034,1070],"automation":[5],"stacks,":[6],"one":[7,89],"component":[8,13,60],"decides":[9],"a":[11,92,160,228,262,294,304,314,442,459,471,495,817,819,822],"downstream":[12],"simply":[14],"trusts":[15],"that":[16,48,61,82,122,164,222,446,586,653],"decision.":[17],"A":[18,176,213,372],"policy":[19,77,352],"engine,":[20],"gateway,":[21,300],"classifier,":[22],"trusted":[23],"execution":[24,211,276],"environment":[25],"or":[26,38,74,111,235,298,301,307,317,380,438,821,857,1046],"approval":[27,651],"step":[28],"says":[29],"yes.":[30],"The":[31,267,358,499,624,1040],"tool,":[32],"MCP":[33,297,510,936,971,1124],"server,":[34],"database,":[35],"cloud":[36,308,768,1151],"API":[37,302],"payment":[39,315],"rail":[40,316],"then":[41],"carries":[42],"out":[43],"whatever":[44],"request":[45],"arrives":[46],"with":[47,553,574,615,694,702,832,967],"approval.":[49],"This":[50,157,570,806,1002],"leaves":[51],"several":[52],"gaps:":[53],"the":[54,58,63,80,88,129,166,191,218,242,275,278,282,321,332,361,366,377,381,403,456,463,597,605,663,774,833,840,862,912,920,944,954,969,999,1026],"checker":[55],"may":[56,626],"be":[57,70,103,430],"same":[59],"collected":[62],"inputs;":[64],"approvals,":[65],"tokens":[66],"receipts":[68,469,640],"can":[69,85,102,248,419,484],"replayed,":[71],"widened,":[72],"rerouted":[73],"used":[75,108,112,435,439],"after":[76,760],"has":[78],"changed;":[79],"operation":[81,285,362,367],"was":[83,572],"checked":[84],"differ":[86],"from":[87],"actually":[90,272],"committed,":[91],"time-of-check-to-time-of-use":[93],"(TOCTOU)":[94],"gap;":[95],"personal":[96,714],"enterprise":[98],"data,":[99],"once":[100],"readable,":[101],"indexed,":[104,431],"embedded,":[105,432],"joined,":[106],"exported,":[107,433],"for":[109,121,134,436,719,766],"training":[110,437,723],"to":[113,241,386,440,462,1044],"steer":[114],"an":[115,318,395,656,815,991],"agent":[116,414,542,1132,1135],"without":[117],"any":[118,486,587,611],"explicit":[119],"authorization":[120],"use.":[123],"Under":[124],"GDPR":[125],"purpose":[126,1077],"limitation":[127],"EU":[130,567,590,631,644,667,689,901,913,1057],"AI":[131,530,561,575,632,645,668,690,693,867,914,1050,1053,1058,1073,1157],"Act\u2019s":[132],"expectations":[133],"oversight":[135],"cybersecurity,":[137],"these":[138,337,616],"gaps":[139],"are":[140,144,148,204,849],"exactly":[141,365],"where":[142,797],"controls":[143],"needed.":[145],"Today":[146],"they":[147],"mostly":[149],"covered":[150],"by":[151,392,533,731,1083],"policy,":[152],"logging":[153],"after-the-fact":[155],"audit.":[156],"disclosure":[158,1003],"describes":[159,808],"two-instance":[161],"execution-control":[162],"architecture":[163,863],"removes":[165],"single":[167,491,704],"point":[168,664,705],"of":[169,374,503,665,706,824,998,1108],"trust:":[170],"First":[171],"check,":[172,209,658],"at":[173,210,455,474,641,662,748],"collection":[174],"time.":[175,212],"first":[177],"protected":[178,215],"domain":[179,216],"binds":[180],"inputs,":[181],"instructions,":[182],"provenance,":[183],"purpose,":[184,327,534,733],"jurisdiction,":[185,328],"scope":[186],"permitted":[188],"effect":[189],"when":[190,256],"data":[192,312,329,715,736,800,924,1081,1088,1105,1143],"arrives.":[193],"An":[194],"input":[195,461],"integrity":[196],"gateway":[197],"seals":[198],"provenance":[199],"first,":[200],"so":[201,244,489],"poisoned":[202],"inputs":[203],"refused":[205],"binding.":[206,223],"Second,":[207],"independent":[208,226,657,676,992,1112],"second":[214,993],"validates":[217],"proposed":[219],"action":[220],"against":[221,338,342,596,683,839],"It":[224,237,324,335,577,812,988],"is":[225,261,271,384,449,578,660,801,813,830,864,1004,1042],"through":[227,286,406],"separate":[229],"hardware":[230],"root,":[231],"session,":[232],"keys,":[233],"runtime":[234],"administration.":[236],"produces":[238],"evidence":[239,652],"cross-committed":[240,638],"binding,":[243],"neither":[245],"artifact":[246],"alone":[247],"authorize":[249],"anything.":[250],"Release":[251],"only":[252,759],"on":[253,601,1006,1025],"agreement.":[254],"Only":[255],"both":[257,339],"artifacts":[258,340],"mutually":[259],"corroborate":[260,655],"single-use,":[263],"non-bearer":[264,1159],"authority":[265,701],"released.":[266],"endpoint":[268,279,322,359,457],"checks":[269,336],"what":[270],"happening.":[273],"At":[274],"boundary,":[277],"independently":[280],"reconstructs":[281,325],"actual":[283,333,1000],"pending":[284],"its":[287,343,350,387],"own":[288,344,351,388],"attested":[289,678,778],"observation":[290],"channel.":[291],"Endpoints":[292],"include:":[293],"tool":[295,443,508,1126],"dispatcher,":[296],"connector":[299,512,1128],"gateway;":[303],"database":[305],"commit":[306,682],"control":[309,765,795],"plane;":[310],"cross-border":[311,749],"egress,":[313],"actuator.":[319],"What":[320],"reconstructs.":[323],"recipient,":[326],"category":[330,737],"operation.":[334],"state":[345,585],"(nonce,":[346],"counter,":[347],"spent-capability,":[348],"revocation":[354],"epochs).":[355],"Atomic":[356],"commit.":[357],"commits":[360],"atomically,":[363],"as":[364],"it":[368,595,838,928],"verified.":[369],"Contained":[370],"compromise.":[371],"compromise":[373,697],"either":[375],"domain,":[376],"transport":[378],"channel":[379],"compute":[382],"plane":[383],"confined":[385],"window":[389],"cannot":[391,429],"itself":[393,620],"make":[394],"unauthorized":[396,720],"act":[397],"effective.":[398],"Mismatches":[399],"fail":[400],"closed":[401],"before":[402,609,739],"effect,":[404],"not":[405,478,579,584,619,814,853],"rollback":[407],"afterwards.":[408],"Readable":[409],"but":[410],"inert":[411,718],"data.":[412],"Data,":[413],"memories":[415],"retrieved":[417],"documents":[418],"remain":[420],"stored":[421],"readable":[423,713],"while":[424],"staying":[425],"operationally":[426,717],"inert.":[427],"They":[428],"served,":[434],"influence":[441],"call":[444],"unless":[445],"specific":[447],"use":[448],"authorized.":[450],"Chained":[451],"evidence.":[452],"Evidence":[453],"produced":[454],"becomes":[458],"required":[460],"next":[464],"step,":[465],"chained":[467],"validation":[468,639],"provide":[470],"verifiable":[472],"record":[473],"every":[475],"point.":[476,643],"Shared,":[477],"central,":[479],"authority.":[480],"Distributed":[481],"partial":[482],"shares":[483],"replace":[485],"central":[487],"authority,":[488],"no":[490,703,827],"party":[492],"ever":[493],"holds":[494],"complete":[496],"reusable":[497],"authorization.":[498],"54":[500],"claims,":[501],"15":[502,671],"them":[504],"independent,":[505],"cover:":[506],"dispatch;":[509],"supply-chain":[513,1129],"substitution;":[514],"computer-use":[515,1131],"browser":[517],"actions;":[518],"memory":[519,1141],"RAG":[521,1139],"inertness;":[522],"multi-agent":[523,1148],"delegation":[524],"chains;":[525],"autonomous":[526],"cloud-control":[527],"changes;":[528],"regulated":[529,756],"output":[531,757],"release":[532],"jurisdiction":[535,746],"recipient;":[537],"coding":[538,1134],"CI/CD":[540,1137],"agents;":[541],"skills":[543],"marketplace":[545],"extensions;":[546],"multimodal":[547],"assistants;":[548],"voice":[549,1156],"meeting":[551],"agents":[552],"consent":[554],"recording":[556],"checks;":[557],"agentic":[558,1052,1154],"purchasing;":[559],"persistent":[560],"memory;":[562],"workspace":[563],"scheduled":[565],"agents.":[566],"relevance":[568,804,810],"(AI-generated).":[569,805],"section":[571,807],"generated":[573],"assistance.":[576],"legal":[580,607],"advice":[581],"does":[583,618],"implementation":[588],"satisfies":[589],"law.":[591],"Readers":[592,835],"must":[593,654,836],"cross-check":[594,837],"original":[598,841],"PCT":[599,842],"filing":[600,843,1023],"WIPO":[602],"PATENTSCOPE":[603],"official":[606,845],"texts":[608],"drawing":[610],"conclusion.":[612],"Technical":[613],"alignment":[614],"provisions":[617],"establish":[621],"regulatory":[622],"compliance.":[623],"mechanisms":[625],"support":[627],"objectives":[628],"associated":[629],"with:":[630],"Act,":[633,646,669,691],"Article":[634,647,670,709,727,752,1060,1062,1064,1079,1085,1094],"12":[635],"(record-keeping):":[636],"chained,":[637],"each":[642],"14":[648],"(human":[649],"oversight):":[650],"verified":[661],"effect.":[666],"(accuracy,":[672],"robustness":[673,1069],"cybersecurity):":[675],"checks,":[677],"reconstruction":[679,747,997],"atomic":[681,1118],"manipulation":[684],"between":[685],"check":[686,994],"action.":[688,1001],"general-purpose":[692,1072],"systemic":[695,1074],"risk:":[696],"confinement":[698],"share-based":[700],"failure.":[707],"GDPR,":[708,726,741,751],"5(1)(b)":[710],"(purpose":[711],"limitation):":[712],"kept":[716],"uses,":[721],"including":[722],"profiling.":[725],"25":[728],"(data":[729],"protection":[730,925,1082],"design):":[732],"recipient":[734],"reconstructed":[738],"release.":[740],"Chapter":[742,1090],"V":[743],"(international":[744],"transfers):":[745],"egress.":[750],"22":[753],"(automated":[754],"decisions):":[755],"released":[758],"verification.":[761],"DORA:":[762],"ICT":[763],"change":[764],"agent-proposed":[767],"settlement":[770],"operations.":[771],"NIS2":[772],"Cyber":[775,1098],"Resilience":[776,1099],"Act:":[777],"measurement":[779],"paths":[780],"fail-closed":[782],"endpoints":[783],"in":[784],"essential":[785],"services":[786],"products.":[788],"Data":[789,978,1101],"Act":[790],"European":[792],"sovereign-cloud":[793],"initiatives:":[794],"over":[796],"how":[799],"operationalized.":[802],"Industry":[803],"technical":[809],"only.":[811],"endorsement,":[816],"validation,":[818],"criticism":[820],"statement":[823],"infringement,":[825],"company":[828,846,855],"named":[829],"affiliated":[831],"inventor.":[834],"sources.":[847],"These":[848],"potential":[850],"integration":[851],"scenarios,":[852],"confirmed":[854],"implementations":[856],"product":[858],"commitments.":[859],"Europe":[861],"relevant":[865],"to:":[866],"developers:":[868],"Mistral":[869,1173],"AI,":[870],"Aleph":[871],"Alpha.":[872],"Enterprise":[873],"software:":[874],"SAP":[875],"(Joule).":[876],"Industrial":[877],"AI:":[878],"Siemens.":[879],"Sovereign":[880],"confidential":[882,1168],"cloud:":[883],"OVHcloud,":[884],"Thales,":[885],"Atos.":[886],"Telecom:":[887],"Deutsche":[888],"Telekom,":[889],"Orange,":[890],"Vodafone,":[891],"Telef\u00f3nica,":[892],"Nokia,":[893],"Ericsson.":[894],"Payments":[895],"banking:":[897],"Adyen,":[898],"Worldline,":[899],"major":[900],"banks.":[902],"Hardware":[903],"security:":[904],"Infineon,":[905],"NXP,":[906],"STMicroelectronics.":[907],"Supervisors":[908],"standards":[910],"bodies:":[911],"Office,":[915],"CEN-CENELEC":[916],"JTC":[917],"21,":[918],"ENISA,":[919],"EDPB":[921],"national":[923],"authorities.":[926],"Globally,":[927],"could":[929],"complement:":[930],"Anthropic:":[931],"sandboxes":[932],"credential-isolating":[934],"proxies,":[935],"connectors,":[938],"Claude":[939],"Code.":[940],"OpenAI:":[941],"source\u2013sink":[942],"defences,":[943],"Agents":[945],"SDK":[946],"sandbox":[947],"handoffs,":[949],"Codex,":[950],"ChatGPT":[951],"memory.":[952],"Google:":[953],"Gemini":[955],"User":[956],"Alignment":[957],"Critic,":[958],"Agent":[959,973],"Gateway":[960],"Model":[962],"Armor.":[963],"Microsoft:":[964],"Prompt":[965],"Shields":[966],"Spotlighting,":[968],"Windows":[970],"proxy,":[972],"365.":[974],"AWS:":[975],"Bedrock":[976],"AgentCore.":[977],"platforms":[979],"vector":[981],"databases:":[982],"Pinecone,":[983],"Weaviate,":[984],"MongoDB,":[985],"Snowflake,":[986],"Databricks.":[987],"would":[989],"add":[990],"endpoint-side":[996],"based":[1005],"PCT/IB2026/056941":[1007],"(WO":[1008],"2026/172336,":[1009],"filed":[1010,1030],"6":[1011],"July":[1012,1038],"2026,":[1013],"published":[1014],"20":[1015],"August":[1016],"2026;":[1017],"International":[1018],"Searching":[1019],"Authority":[1020],"ISA/IN).":[1021],"That":[1022],"builds":[1024],"Mothership":[1027],"application":[1028],"PCT/IB2026/055615,":[1029],"4":[1031],"June":[1032],"2026":[1033],"publicly":[1035],"disclosed":[1036],"16":[1037],"2026.":[1039],"inventor":[1041],"open":[1043],"acquihire":[1045],"strategic":[1047],"collaboration.":[1048],"Keywords:":[1049],"safety;":[1051,1054],"trustworthy":[1055],"AI;":[1056,1174],"Act;":[1059,1100,1102],"12;":[1061],"14;":[1063],"15;":[1065],"record-keeping;":[1066],"human":[1067],"oversight;":[1068],"cybersecurity;":[1071],"risk;":[1075],"GDPR;":[1076],"limitation;":[1078],"5(1)(b);":[1080],"design;":[1084],"25;":[1086],"international":[1087],"transfers;":[1089],"V;":[1091],"automated":[1092],"decision-making;":[1093],"22;":[1095],"DORA;":[1096],"NIS2;":[1097],"sovereign":[1103],"cloud;":[1104],"residency;":[1106],"separation":[1107],"duties;":[1109],"dual":[1110],"control;":[1111,1145],"verification;":[1113],"zero-trust":[1114],"execution;":[1115],"TOCTOU":[1116],"prevention;":[1117,1121],"commit;":[1119],"replay":[1120],"tool-call":[1122],"authorization;":[1123,1163,1165],"security;":[1125,1130,1133,1136,1138,1140,1153],"poisoning;":[1127,1142],"usage":[1144],"training-data":[1146],"governance;":[1147],"delegation;":[1149],"Agent2Agent;":[1150],"control-plane":[1152],"commerce;":[1155],"consent;":[1158],"capability;":[1160],"proof-of-possession;":[1161],"threshold":[1162],"multi-party":[1164],"remote":[1166],"attestation;":[1167],"computing;":[1169],"TEE;":[1170],"HSM;":[1171],"fail-closed;":[1172],"SAP;":[1175],"Claude;":[1176],"ChatGPT;":[1177],"Gemini;":[1178],"Copilot":[1179],"Zenodo":[1180],"file":[1181],"name:":[1182],"AI_Safety_for_AI_Agents_in_Europe_Two_Independent_Checks_WO2026172336.pdf":[1183]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-10T00:00:00"}