{"id":"https://openalex.org/W7166808005","doi":"https://doi.org/10.48550/arxiv.2606.31023","title":"Certified Speculative Execution for Untrusted AI Agents","display_name":"Certified Speculative Execution for Untrusted AI Agents","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166808005","doi":"https://doi.org/10.48550/arxiv.2606.31023"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.31023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.31023","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139848925","display_name":"Chenyu Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Chenyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138627909","display_name":"Qiliang Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Qiliang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054847814","display_name":"Shuning Wu","orcid":"https://orcid.org/0009-0006-7478-7784"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Shuning","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5113903386","display_name":"X J Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Xu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9158999919891357,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9158999919891357,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.016699999570846558,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.016200000420212746,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/regret","display_name":"Regret","score":0.7307999730110168},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.5361999869346619},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.5273000001907349},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4869999885559082},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.44780001044273376},{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.42489999532699585},{"id":"https://openalex.org/keywords/speedup","display_name":"Speedup","score":0.39660000801086426},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.36730000376701355},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.366100013256073}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7480000257492065},{"id":"https://openalex.org/C50817715","wikidata":"https://www.wikidata.org/wiki/Q79895177","display_name":"Regret","level":2,"score":0.7307999730110168},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5566999912261963},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5361999869346619},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.5273000001907349},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4869999885559082},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.44780001044273376},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.42489999532699585},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.39660000801086426},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.36730000376701355},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.366100013256073},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C2780945871","wikidata":"https://www.wikidata.org/wiki/Q194274","display_name":"Backup","level":2,"score":0.3257000148296356},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3068999946117401},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27549999952316284},{"id":"https://openalex.org/C6943359","wikidata":"https://www.wikidata.org/wiki/Q875276","display_name":"Boolean satisfiability problem","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.26579999923706055},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.26510000228881836},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C88626702","wikidata":"https://www.wikidata.org/wiki/Q1128903","display_name":"Continuation","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.2574000060558319},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2563000023365021},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.31023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.31023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6833634972572327,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Hard-constrained":[0],"sequential":[1],"decision":[2],"systems":[3],"have":[4],"no":[5],"certified":[6,58,218],"way":[7],"to":[8,91,130,150],"spend":[9],"the":[10,17,29,38,44,46,78,88,92,155,199,209,212,215,217],"test-time":[11],"compute":[12],"of":[13,20,126,145,154,174],"modern":[14],"AI:":[15],"executing":[16],"multi-step":[18],"drafts":[19],"a":[21,25,32,57,65,72,83,118,134,166,179,185,190,204],"learned":[22,136,167],"policy":[23],"or":[24],"frozen":[26,115,186],"LLM":[27,188],"forfeits":[28,43],"feasibility":[30],"guarantee":[31],"trusted":[33,66],"solver":[34,39],"provides,":[35],"while":[36],"invoking":[37],"at":[40,195,220],"every":[41,105],"step":[42],"speed":[45,98],"AI":[47,63],"offers.":[48],"Certificate-Gated":[49],"Prefix":[50],"Acceptance":[51],"(CGPA)":[52],"closes":[53],"this":[54],"gap":[55],"with":[56],"speculative-execution":[59],"contract":[60,103],"for":[61],"untrusted":[62,106,213],"agents:":[64],"verifier":[67],"rejects":[68],"constraint-violating":[69],"transitions":[70],"exactly,":[71],"conformally":[73,138],"calibrated":[74],"value":[75],"boundary":[76],"gates":[77],"longest":[79],"low-cost":[80],"prefix":[81],"within":[82,151],"per-segment":[84],"regret":[85,142],"budget,":[86],"and":[87,97,112,162,203],"rest":[89],"defers":[90],"solver,":[93],"so":[94],"safety,":[95],"regret,":[96,197],"decouple":[99],"by":[100],"construction.":[101],"The":[102],"drives":[104,140],"proposal":[107,168],"source":[108,169],"-":[109,129],"adversarial":[110],"drafters":[111],"six":[113],"heterogeneous":[114],"LLMs":[116],"(including":[117],"12B":[119],"model":[120],"that":[121,222],"violates":[122],"constraints":[123],"in":[124],"98%":[125],"direct":[127],"rollouts)":[128],"zero":[131],"applied":[132],"violations;":[133],"certificate-aware":[135],"boundary,":[137],"calibrated,":[139],"mean":[141],"three":[143],"orders":[144],"magnitude":[146],"below":[147],"unguarded":[148],"acceptance,":[149],"sampling":[152],"noise":[153],"stepwise":[156],"oracle":[157],"(95%":[158],"CI":[159],"spanning":[160],"zero),":[161],"under":[163],"calendar":[164],"shift":[165],"overtakes":[170],"it":[171,183],"on":[172],"15":[173],"18":[175],"held-out":[176],"days.":[177],"On":[178],"deployment-scale":[180],"unit-commitment":[181],"instance":[182],"turns":[184],"8B":[187],"into":[189],"2.96x":[191],"per-episode":[192],"wall-clock":[193],"speedup":[194],"2.1%":[196],"outpacing":[198],"domain":[200],"heuristic":[201],"(1.79x)":[202],"safe":[205],"receding-horizon":[206],"baseline":[207],"(1.07x):":[208],"more":[210],"capable":[211],"source,":[214],"faster":[216],"system,":[219],"guarantees":[221],"never":[223],"change.":[224]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-02T00:00:00"}