MetaPermit: Scalable and Auditable Access Control for AI Agents via LLM-Inferred Meta-Attributes

arXiv:2609.31039 · cs.CR, cs.SE · Submitted 2026-09-25 · Read on arXiv

cs.CR, cs.SE

Submitted: 2026-09-25

Updated: 2026-09-25

Terminology

• Alignment — 32× in this paper · explained in 1 episode
• Benchmark — 14× in this paper · explained in 2 episodes
• Trace — 12× in this paper · explained in 2 episodes
• Ablation — 8× in this paper · explained in 1 episode
• AI Agents — 5× in this paper · explained in 2 episodes
• Large Language Model — 4× in this paper
• Benchmarking — 3× in this paper · explained in 4 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
• Core — 2× in this paper · explained in 2 episodes
• Ablation Studies — 1× in this paper · explained in 1 episode
• Ablation study — 1× in this paper · explained in 1 episode
• Abstraction — 1× in this paper · explained in 1 episode
• Accuracy — 1× in this paper · explained in 1 episode
• Agent Security Bench — 1× in this paper
• Consistency — 1× in this paper · explained in 3 episodes
• Fine-Tuning — 1× in this paper · explained in 5 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Graph Construction — 1× in this paper · explained in 3 episodes
• LLM judge — 1× in this paper · explained in 2 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• SMT solver — 1× in this paper · explained in 2 episodes

Sources

• IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents
• Defeating Prompt Injections by Design
• AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
• Mind2Web: Towards a Generalist Agent for the Web
• Secure and Efficient Access Control for Computer-Use Agents via Context Space
• Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
• AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?
• The MiniMax-M2 Series: Mini Activations Unleashing Max Real-World Intelligence
• Ignore Previous Prompt: Attack Techniques For Language Models
• AC4A: Access Control for Agents
• Progent: Securing AI Agents with Privilege Control
• The Rise and Potential of Large Language Model Based Agents: A Survey
• Qwen3 Technical Report
• ReAct: Synergizing Reasoning and Acting in Language Models
• Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs