ZeroGate: Trust-Preserving Fast Paths for Governed AI Agent Runtimes

arXiv:2609.25443 · cs.AI, cs.CR, cs.DC · Submitted 2026-09-21 · Read on arXiv

cs.AI, cs.CR, cs.DC

Submitted: 2026-09-21

Updated: 2026-09-21

Comments: 47 pages, 11 figures, 13 tables. Full research report with an ancillary archive containing reference code, raw experimental records, and offline verification tools

Code: https://github.com/OndCo/Agent-

Project page: https://ond.cc/research/bounded-action-firewall

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Verification — 24× in this paper · explained in 2 episodes
• Core — 16× in this paper · explained in 2 episodes
• Consistency — 13× in this paper · explained in 3 episodes
• Verifier — 11× in this paper · explained in 2 episodes
• Benchmark — 5× in this paper · explained in 2 episodes
• Actor — 4× in this paper · explained in 3 episodes
• Trace — 4× in this paper · explained in 2 episodes
• Accuracy — 3× in this paper · explained in 1 episode
• Provenance — 3× in this paper · explained in 3 episodes
• Agent Runtime Exposure Graph — 2× in this paper
• Bounded Action Firewall — 2× in this paper
• Canonical Action Verification and Attestation — 2× in this paper
• Proof-Carrying Agent Actions — 2× in this paper
• Abstraction — 1× in this paper · explained in 1 episode
• Accountability — 1× in this paper · explained in 2 episodes
• Agentic AI — 1× in this paper · explained in 1 episode
• Generalization — 1× in this paper · explained in 13 episodes
• Model-Agnostic — 1× in this paper · explained in 2 episodes
• Network and Distributed System Security Symposium — 1× in this paper

Sources

• CAVA: Canonical Action Verification and Attestation for Runtime Governance of Agentic AI Systems
• Proof-Carrying Agent Actions: Model-Agnostic Runtime Governance for Heterogeneous Agent Systems

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
• VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection