AgentKernel: The Trust-Native Agentic Operating System

arXiv:2609.29647 · cs.CR, cs.AI · Submitted 2026-08-29 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-08-29

Updated: 2026-08-29

Code: https://github.com/openclaw/openclaw

Project page: https://a2aproject.github.io/A2A/latest

Terminology

• Provenance — 59× in this paper · explained in 3 episodes
• Trace — 27× in this paper · explained in 2 episodes
• AI Agents — 16× in this paper · explained in 2 episodes
• Core — 14× in this paper · explained in 2 episodes
• Verification — 12× in this paper · explained in 2 episodes
• Alignment — 11× in this paper · explained in 1 episode
• Agent Core — 7× in this paper · explained in 2 episodes
• Abstraction — 6× in this paper · explained in 1 episode
• Agent Memory — 6× in this paper · explained in 1 episode
• Fidelity — 6× in this paper · explained in 2 episodes
• Agent Harness — 5× in this paper · explained in 1 episode
• Agentic AI — 5× in this paper · explained in 1 episode
• Accuracy — 4× in this paper · explained in 1 episode
• Agent Governance Toolkit — 4× in this paper
• Global Agent Registry — 4× in this paper
• Benchmark — 3× in this paper · explained in 2 episodes
• Benchmarking — 3× in this paper · explained in 3 episodes
• Formal Verification — 3× in this paper · explained in 2 episodes
• Accountability — 2× in this paper · explained in 2 episodes
• Agent Identity Card — 2× in this paper
• Human-in-the-Loop — 2× in this paper · explained in 3 episodes
• Multi-Agent System — 2× in this paper · explained in 5 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Adversarial Robustness — 1× in this paper · explained in 3 episodes
• Agent Interactions — 1× in this paper · explained in 1 episode
• Agentic AI systems — 1× in this paper · explained in 1 episode
• Agentic Coding — 1× in this paper · explained in 1 episode
• Agentic Framework — 1× in this paper · explained in 6 episodes
• Agentic Loop — 1× in this paper · explained in 1 episode
• Agentic Workflows — 1× in this paper · explained in 1 episode
• Alignment Problem — 1× in this paper · explained in 1 episode
• Calibration — 1× in this paper · explained in 7 episodes
• Decoupling — 1× in this paper · explained in 2 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• Hallucination Detection — 1× in this paper · explained in 2 episodes
• Model Context Protocol (MCP) — 1× in this paper · explained in 8 episodes
• Multi-agent Collaboration — 1× in this paper · explained in 2 episodes
• Multi-agent Collaborative Framework — 1× in this paper · explained in 2 episodes
• Personalization — 1× in this paper · explained in 2 episodes
• RAG — 1× in this paper · explained in 3 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Semantic Alignment — 1× in this paper · explained in 3 episodes
• Semantic Similarity — 1× in this paper · explained in 2 episodes
• World Model — 1× in this paper · explained in 7 episodes

Sources

• From Assistant to Double Agent: Formalizing and Benchmarking Attacks on OpenClaw for Personalized Local AI Agent
• OS-Copilot: Towards Generalist Computer Agents with Self-Improvement
• Magentic-One: A Generalist Multi-Agent System for Solving Complex Tasks
• OpenHands: An Open Platform for AI Software Developers as Generalist Agents
• MetaGPT: Meta Programming for A Multi-Agent Collaborative Framework
• Mobile-Agent-v3: Fundamental Agents for GUI Automation
• AIOS: LLM Agent Operating System
• AgentOps: Enabling Observability of LLM Agents
• OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents
• A Survey of AI Agent Protocols
• MemOS: A Memory OS for AI System
• Agent.xpu: Efficient Scheduling of Agentic LLM Workloads on Heterogeneous SoC
• Tool Receipts, Not Zero-Knowledge Proofs: Practical Hallucination Detection for AI Agents
• LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem
• AutoAgent: A Fully-Automated and Zero-Code Framework for LLM Agents
• Agent Centric Operating System -- a Comprehensive Review and Outlook for Operating System
• Integrating Artificial Intelligence into Operating Systems: A Survey on Techniques, Applications, and Future Directions
• A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control
• HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems
• Agent S: An Open Agentic Framework that Uses Computers Like a Human

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs