{"id":"https://openalex.org/W7225818014","doi":"https://doi.org/10.5281/zenodo.24143405","title":"Caging Action, Not Speech: Capability-Gated Credential Containment for Autonomous Agents","display_name":"Caging Action, Not Speech: Capability-Gated Credential Containment for Autonomous Agents","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225818014","doi":"https://doi.org/10.5281/zenodo.24143405"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24143405","doi":"https://doi.org/10.5281/zenodo.24143405","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24143405","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24143405","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161449148","display_name":"Dennis Erdelean","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Erdelean, Dennis","raw_affiliation_strings":["Independent Researcher"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent Researcher","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5161449148"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7827000021934509,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7827000021934509,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.20389999449253082,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.862500011920929},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6991000175476074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.597100019454956},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.4821999967098236},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.44269999861717224},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39570000767707825},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.37139999866485596},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3246999979019165},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.3118000030517578},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29120001196861267},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.2524999976158142}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24143405","doi":"https://doi.org/10.5281/zenodo.24143405","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24143405","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24143406","doi":"https://doi.org/10.5281/zenodo.24143406","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24143406","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24143405","doi":"https://doi.org/10.5281/zenodo.24143405","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24143405","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Autonomous":[0],"agents":[1],"act":[2],"with":[3],"the":[4,30,37,44,65,68,74,103,107,119,122,128,131,148,167,171,178,204,207,212,215,218,226,228,246,263,270],"credentials":[5],"they":[6,15],"hold,":[7],"yet":[8],"most":[9,140],"defenses":[10],"for":[11],"them":[12],"inspect":[13],"what":[14,157,196,201],"say.":[16],"A":[17,94,272],"bearer":[18],"credential":[19,66,104,123,136],"such":[20],"as":[21,27,141,143,164,166,277],"an":[22,85,99,150],"API":[23],"key":[24,161],"must":[25],"exist":[26],"plaintext":[28],"in":[29,47,262],"process":[31,49],"that":[32,48,62,116],"presents":[33],"it,":[34],"even":[35],"when":[36],"connection":[38],"is":[39,124,137,249],"encrypted,":[40],"and":[41,67,90,105,110,175,210,224,235,240,254,266],"any":[42],"code":[43,244],"agent":[45,78],"runs":[46],"can":[50,162],"read":[51],"it.":[52],"We":[53,194],"present":[54],"CAGE":[55],"(Credential-bound":[56],"Agent":[57],"Gating":[58],"Engine),":[59],"a":[60,80,88,91,134,158,184,255,278],"gate":[61],"keeps":[63],"both":[64],"authority":[69],"to":[70,84,183],"use":[71,92],"it":[72],"outside":[73],"agent's":[75],"reach.":[76],"The":[77,233,242],"holds":[79,102,197],"capability":[81],"token":[82],"bound":[83],"operation":[86,257],"class,":[87],"lifetime":[89],"budget.":[93],"separate":[95,195],"trust":[96],"domain,":[97],"today":[98],"out-of-process":[100],"broker,":[101,149],"performs":[106],"operation.":[108],"Authorization":[109],"charging":[111],"form":[112],"one":[113],"atomic":[114],"step":[115],"completes":[117],"before":[118],"request":[120],"carrying":[121],"written,":[125],"so":[126],"through":[127,269],"broker":[129,236,247],"or":[130],"Python":[132],"binding":[133],"token's":[135],"sent":[138],"at":[139,154],"often":[142],"its":[144],"budget":[145],"allows.":[146],"At":[147],"issuance":[151],"policy":[152],"frozen":[153],"start":[155],"bounds":[156],"stolen":[159],"operator":[160],"mint,":[163],"long":[165],"attacker":[168],"cannot":[169],"restart":[170],"broker.":[172,271],"Issuances,":[173],"uses":[174],"refusals":[176],"on":[177,203,211],"gated":[179,256],"paths":[180],"are":[181,238],"appended":[182],"hash-linked,":[185],"sequenced":[186],"log":[187],"whose":[188],"signed":[189],"heads":[190],"support":[191],"external":[192],"anchoring.":[193],"by":[198],"construction":[199],"from":[200],"depends":[202],"integrity":[205],"of":[206,214,220,245,252],"enforcing":[208,243],"boundary":[209],"correctness":[213],"grant,":[216],"state":[217],"conditions":[219],"each":[221],"deployment":[222],"tier,":[223],"list":[225],"attacks":[227],"design":[229],"does":[230],"not":[231],"stop.":[232],"in-process":[234],"tiers":[237],"implemented":[239],"tested.":[241],"tier":[248,275],"2,782":[250],"lines":[251],"Rust,":[253],"costs":[258],"about":[259],"2":[260],"\u00b5s":[261,268],"Rust":[264],"core":[265],"20":[267],"hardware":[273],"enclave":[274],"exists":[276],"software":[279],"mock.":[280]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}