{"id":"https://openalex.org/W7128391084","doi":"https://doi.org/10.48550/arxiv.2602.06345","title":"Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2","display_name":"Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2","publication_year":2026,"publication_date":"2026-02-06","ids":{"openalex":"https://openalex.org/W7128391084","doi":"https://doi.org/10.48550/arxiv.2602.06345"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.06345","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125400130","display_name":"Qianlong Lan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lan, Qianlong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125405880","display_name":"Anuj Kaul","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kaul, Anuj","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125417481","display_name":"Shaun Jones","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jones, Shaun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5119294031","display_name":"Stephanie Westrum","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Westrum, Stephanie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":48.6846,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.99549249,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.2535000145435333,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.2535000145435333,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.1761000007390976,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.1225999966263771,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/runtime-verification","display_name":"Runtime verification","score":0.5803999900817871},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.486299991607666},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.40139999985694885},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.39250001311302185},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.3921000063419342},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.3869999945163727},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.3682999908924103},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.36340001225471497}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8019999861717224},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.5803999900817871},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5145000219345093},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.486299991607666},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.40139999985694885},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.39250001311302185},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.3921000063419342},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3869999945163727},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.36340001225471497},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.35749998688697815},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.35600000619888306},{"id":"https://openalex.org/C190978112","wikidata":"https://www.wikidata.org/wiki/Q17074350","display_name":"Payment processor","level":3,"score":0.34869998693466187},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3133000135421753},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.31290000677108765},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C72108876","wikidata":"https://www.wikidata.org/wiki/Q844565","display_name":"Transaction processing","level":3,"score":0.2799000144004822},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.27399998903274536},{"id":"https://openalex.org/C2775884135","wikidata":"https://www.wikidata.org/wiki/Q845436","display_name":"Mandate","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.2547999918460846}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.06345","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.06345","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.06345","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.06345","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,172],"deployment":[1],"of":[2,7,15,87,184],"autonomous":[3,45],"AI":[4],"agents":[5],"capable":[6],"executing":[8],"commercial":[9],"transactions":[10,193],"has":[11],"motivated":[12],"the":[13,21,27,88,200],"adoption":[14],"mandate-based":[16],"payment":[17,102,221],"authorization":[18,37,127],"protocols,":[19],"including":[20],"Universal":[22],"Commerce":[23],"Protocol":[24,30],"(UCP)":[25],"and":[26,44,57,70,92,116,152,157,161,169,228],"Agent":[28],"Payments":[29],"(AP2).":[31],"These":[32],"protocols":[33],"replace":[34],"interactive,":[35],"session-based":[36],"with":[38,226],"cryptographically":[39],"issued":[40],"mandates,":[41],"enabling":[42],"asynchronous":[43],"execution.":[46],"While":[47],"AP2":[48,89],"provides":[49],"specification-level":[50],"guarantees":[51],"through":[52],"signature":[53],"verification,":[54],"explicit":[55,113],"binding,":[56],"expiration":[58],"semantics,":[59],"real-world":[60],"agentic":[61,220],"execution":[62,132,222],"introduces":[63],"runtime":[64,99,108,202,217],"behaviors":[65],"such":[66],"as":[67],"retries,":[68],"concurrency,":[69,146],"orchestration":[71],"that":[72,96,111,126,149,162,199,215],"challenge":[73],"implicit":[74],"assumptions":[75],"about":[76],"mandate":[77,90,118],"usage.":[78],"In":[79],"this":[80],"work,":[81],"we":[82,147],"present":[83],"a":[84,106],"security":[85,218],"analysis":[86],"lifecycle":[91],"identify":[93],"enforcement":[94,154],"gaps":[95],"arise":[97],"during":[98],"in":[100],"agent-based":[101],"systems.":[103],"We":[104,196],"propose":[105],"zero-trust":[107],"verification":[109,182],"framework":[110,174],"enforces":[112],"context":[114],"binding":[115,151],"consume-once":[117,153],"semantics":[119],"using":[120],"dynamically":[121],"generated,":[122],"time-bound":[123],"nonces,":[124],"ensuring":[125],"decisions":[128],"are":[129,164],"evaluated":[130,177],"at":[131,187],"time":[133],"rather":[134,209],"than":[135,210],"assumed":[136],"from":[137],"static":[138],"issuance":[139],"properties.":[140],"Through":[141],"simulation-based":[142],"evaluation":[143],"under":[144],"high":[145],"show":[148],"context-aware":[150],"address":[155],"distinct":[156],"complementary":[158],"attack":[159],"classes,":[160],"both":[163],"required":[165,201],"to":[166,191],"prevent":[167],"replay":[168],"context-redirect":[170],"attacks.":[171],"proposed":[173],"mitigates":[175],"all":[176],"attacks":[178],"while":[179],"maintaining":[180],"stable":[181],"latency":[183],"approximately":[185],"3.8~ms":[186],"throughput":[188],"levels":[189],"up":[190],"10{,}000":[192],"per":[194],"second.":[195],"further":[197],"demonstrate":[198],"state":[203],"is":[204],"bounded":[205],"by":[206],"peak":[207],"concurrency":[208],"cumulative":[211],"transaction":[212],"history,":[213],"indicating":[214],"robust":[216],"for":[219],"can":[223],"be":[224],"achieved":[225],"minimal":[227],"predictable":[229],"overhead.":[230]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2026-02-10T00:00:00"}