{"id":"https://openalex.org/W7160067781","doi":"https://doi.org/10.48550/arxiv.2605.00081","title":"Alignment Contracts for Agentic Security Systems","display_name":"Alignment Contracts for Agentic Security Systems","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7160067781","doi":"https://doi.org/10.48550/arxiv.2605.00081"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.00081","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00081","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.00081","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102488506","display_name":"Isaac David","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David, Isaac","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135172464","display_name":"Marco Guarnieri","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guarnieri, Marco","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135262690","display_name":"Arthur Gervais","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gervais, Arthur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.299699991941452,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.299699991941452,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2653999924659729,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.07819999754428864,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.8503000140190125},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.714900016784668},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5547999739646912},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.48019999265670776},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4530999958515167},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.42500001192092896},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.4147000014781952},{"id":"https://openalex.org/keywords/fragment","display_name":"Fragment (logic)","score":0.3628000020980835},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3352999985218048},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.3345000147819519}],"concepts":[{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.8503000140190125},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.714900016784668},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5913000106811523},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5547999739646912},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.48019999265670776},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4530999958515167},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.42500001192092896},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.4147000014781952},{"id":"https://openalex.org/C2776235265","wikidata":"https://www.wikidata.org/wiki/Q18392052","display_name":"Fragment (logic)","level":2,"score":0.3628000020980835},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34700000286102295},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.33390000462532043},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.33169999718666077},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C98184364","wikidata":"https://www.wikidata.org/wiki/Q1780131","display_name":"Argument (complex analysis)","level":2,"score":0.3183000087738037},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.3077000081539154},{"id":"https://openalex.org/C167729594","wikidata":"https://www.wikidata.org/wiki/Q17736","display_name":"Axiom","level":2,"score":0.3061999976634979},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C2781002276","wikidata":"https://www.wikidata.org/wiki/Q5930120","display_name":"Superselection","level":3,"score":0.2799000144004822},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C2777159308","wikidata":"https://www.wikidata.org/wiki/Q1757948","display_name":"Formality","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C79301358","wikidata":"https://www.wikidata.org/wiki/Q1918846","display_name":"Contract theory","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C94461902","wikidata":"https://www.wikidata.org/wiki/Q2762418","display_name":"Formal proof","level":3,"score":0.26489999890327454},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2619999945163727},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.00081","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00081","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.00081","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00081","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agentic":[0],"security":[1,131],"systems":[2],"increasingly":[3],"combine":[4],"LLM":[5],"planners":[6],"with":[7,103],"tools":[8],"that":[9,119],"can":[10],"discover,":[11],"validate,":[12],"and":[13,70,83,88,109,117,133,163,182,188],"report":[14],"vulnerabilities.":[15],"This":[16],"creates":[17],"an":[18,30,145,178],"asymmetric":[19],"control":[20],"problem:":[21],"the":[22,34,93,126,136,155,160,196,202],"system":[23],"should":[24],"retain":[25],"strong":[26],"offensive":[27],"capability":[28],"inside":[29],"authorized":[31],"engagement,":[32],"while":[33],"same":[35,137],"capabilities":[36],"must":[37],"be":[38],"denied":[39],"outside":[40],"scope.":[41],"Existing":[42],"guardrails":[43],"provide":[44],"useful":[45],"policy":[46],"controls,":[47],"but":[48],"they":[49],"do":[50],"not":[51],"make":[52],"this":[53],"boundary":[54],"a":[55,66,100],"first-class":[56],"formal":[57,197],"contract":[58,79,115],"over":[59,74,159],"observable":[60,75],"effects.":[61],"We":[62,91,124,175],"introduce":[63],"alignment":[64],"contracts,":[65],"framework":[67,127],"for":[68,113,128,166,172],"specifying":[69],"enforcing":[71],"behavioral":[72],"constraints":[73],"effect":[76,142],"traces.":[77,174],"A":[78,191],"defines":[80],"scope,":[81],"allowed":[82],"forbidden":[84],"effects,":[85],"resource":[86],"budgets,":[87],"disclosure":[89],"policies.":[90],"give":[92],"language":[94],"finite-trace":[95],"semantics,":[96],"characterize":[97],"satisfaction":[98],"as":[99],"safety":[101],"property":[102],"finite":[104],"violation":[105],"witnesses,":[106],"develop":[107],"refinement":[108],"one-way":[110],"composition":[111],"rules":[112],"modular":[114],"engineering,":[116],"show":[118,134],"admissibility":[120],"checking":[121],"is":[122],"decidable.":[123],"instantiate":[125],"web-focused":[129],"agentic":[130],"workflows":[132],"how":[135],"structure":[138],"extends":[139],"to":[140],"other":[141],"profiles.":[143],"Under":[144],"explicit":[146],"Effect":[147],"Observability":[148],"Assumption,":[149],"where":[150],"all":[151],"$\\SigmaEff$-effects":[152],"are":[153],"mediated,":[154],"soundness":[156,171],"theorem":[157],"quantifies":[158],"agent":[161],"model":[162],"gives":[164],"guarantees":[165],"mediated":[167],"$\\SigmaEff$-effects,":[168],"including":[169],"enforcement":[170],"monitor-realized":[173],"also":[176],"state":[177],"assumption-lifted":[179],"adaptation":[180],"result":[181],"formalize":[183],"limits":[184],"through":[185],"undecidability":[186],"transfer":[187],"observability-boundary":[189],"theorems.":[190],"Lean":[192],"4":[193],"artifact":[194],"checks":[195],"core":[198],"theorems":[199],"used":[200],"by":[201],"paper.":[203]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-05T00:00:00"}