{"id":"https://openalex.org/W7163327767","doi":"https://doi.org/10.48550/arxiv.2606.03518","title":"Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI","display_name":"Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163327767","doi":"https://doi.org/10.48550/arxiv.2606.03518"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.03518","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03518","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.03518","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079016812","display_name":"Amjad Ibrahim","orcid":"https://orcid.org/0000-0003-3106-566X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ibrahim, Amjad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137797252","display_name":"Yong Li (15029)","orcid":"https://orcid.org/0000-0001-5617-1659"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7660999894142151,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7660999894142151,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.06260000169277191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.05000000074505806,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.7519999742507935},{"id":"https://openalex.org/keywords/accountability","display_name":"Accountability","score":0.4814000129699707},{"id":"https://openalex.org/keywords/delegate","display_name":"Delegate","score":0.40950000286102295},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.3822999894618988},{"id":"https://openalex.org/keywords/operationalization","display_name":"Operationalization","score":0.3578000068664551},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.35679998993873596},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.3490999937057495}],"concepts":[{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.7519999742507935},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6736999750137329},{"id":"https://openalex.org/C2776007630","wikidata":"https://www.wikidata.org/wiki/Q2798912","display_name":"Accountability","level":2,"score":0.4814000129699707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4537999927997589},{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.40950000286102295},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C9354725","wikidata":"https://www.wikidata.org/wiki/Q286017","display_name":"Operationalization","level":2,"score":0.3578000068664551},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.35679998993873596},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.33169999718666077},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.328900009393692},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.301800012588501},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2639000117778778},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.26080000400543213}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.03518","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03518","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.03518","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03518","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"AI":[1,47,227],"systems":[2,24,73],"evolve":[3],"from":[4],"passive":[5],"models":[6],"into":[7,170],"autonomous":[8],"active":[9],"agents":[10,52],"capable":[11],"of":[12,22,80,136,149],"initiating":[13],"actions,":[14],"collaborating,":[15],"and":[16,28,37,55,62,69,89,138,141,144,210],"delegating":[17],"tasks,":[18],"the":[19],"traditional":[20],"boundaries":[21],"software":[23],"blur.":[25],"Traditional":[26],"authorization":[27,50,172,224],"delegation":[29,98,106,137,194],"frameworks,":[30],"built":[31],"around":[32],"fixed":[33],"principals,":[34],"explicit":[35],"requests,":[36],"static":[38,115],"scopes,":[39],"are":[40,160],"insufficient":[41],"to":[42,75,153],"govern":[43],"agentic":[44,131,155,189,226],"systems.":[45,228],"Agentic":[46],"demands":[48],"richer":[49],"semantics:":[51],"must":[53],"inherit":[54],"delegate":[56],"permissions,":[57],"act":[58],"under":[59],"time-limited":[60],"authority,":[61],"coordinate":[63],"through":[64,207],"shared":[65],"protocols.":[66],"Existing":[67],"Identity":[68],"Access":[70],"Management":[71],"(IAM)":[72],"fail":[74],"fully":[76],"capture":[77],"this":[78,179,205],"notion":[79,148],"agency,":[81],"lacking":[82],"mechanisms":[83],"for":[84,130,222],"recursive":[85,193],"delegation,":[86],"contextual":[87],"boundaries,":[88],"dynamic":[90],"scoping":[91],"as":[92,101,107,162,192],"executable":[93],"governance":[94,124],"primitives.":[95],"Unlike":[96],"access":[97,156],"standards":[99],"such":[100,191],"OAuth":[102],"2.0,":[103],"we":[104,145,181],"treat":[105],"a":[108,114,122,147,183,217],"contractual":[109],"term":[110],"rather":[111],"than":[112],"merely":[113],"token-based":[116],"consent":[117],"credential.":[118],"This":[119],"paper":[120],"proposes":[121],"compositional":[123,184],"framework":[125,206],"that":[126,166,186,214],"introduces":[127],"primitives":[128],"indispensable":[129],"AI.":[132],"We":[133,203],"define":[134,182],"types":[135],"their":[139],"permissions":[140],"accountability":[142],"implications,":[143],"introduce":[146],"resource":[150],"scope":[151],"attenuation":[152],"bound":[154],"envelopes.":[157],"These":[158],"concepts":[159],"expressed":[161],"general":[163],"relational":[164,198],"definitions":[165],"can":[167],"be":[168],"composed":[169],"existing":[171,197],"domains":[173],"(e.g.,":[174],"financial":[175],"systems).":[176],"To":[177],"operationalize":[178],"composition,":[180],"operator":[185],"overlays":[187],"new":[188],"semantics,":[190],"chains,":[195],"onto":[196],"policies":[199],"without":[200],"rewriting":[201],"them.":[202],"substantiate":[204],"formal":[208,218],"proofs":[209],"empirical":[211],"evaluation,":[212],"showing":[213],"it":[215],"provides":[216],"yet":[219],"practical":[220],"foundation":[221],"accountable":[223],"in":[225]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-04T00:00:00"}