AuthorityLens: Rethinking LLM-Based Agent Systems Through the Lens of Authority

arXiv:2609.32378 · cs.AI · Submitted 2026-09-26 · Read on arXiv

cs.AI

Submitted: 2026-09-26

Updated: 2026-09-26

Terminology

• Actor — 10× in this paper · explained in 3 episodes
• Trace — 5× in this paper · explained in 2 episodes
• Benchmark — 4× in this paper · explained in 2 episodes
• Decode — 3× in this paper · explained in 2 episodes
• Provenance — 3× in this paper · explained in 3 episodes
• Verification — 3× in this paper · explained in 2 episodes
• Benchmarking — 2× in this paper · explained in 3 episodes
• Calibration — 2× in this paper · explained in 7 episodes
• Multi-Agent System — 2× in this paper · explained in 5 episodes
• AGN — 1× in this paper · explained in 1 episode
• AI Agents — 1× in this paper · explained in 2 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Admissibility — 1× in this paper · explained in 2 episodes
• Admissibility Conditions — 1× in this paper · explained in 1 episode
• Aggregation — 1× in this paper · explained in 1 episode
• Cooperation — 1× in this paper · explained in 2 episodes
• Core — 1× in this paper · explained in 2 episodes
• Inverse Problem — 1× in this paper · explained in 2 episodes
• Redundancy — 1× in this paper · explained in 2 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Topological Order — 1× in this paper · explained in 2 episodes
• Unified Framework — 1× in this paper · explained in 5 episodes

Sources

• Defeating Prompt Injections by Design
• Magentic-One: A Generalist Multi-Agent System for Solving Complex Tasks
• Defending Against Indirect Prompt Injection Attacks With Spotlighting
• Taming Various Privilege Escalation in LLM-Based Agent Systems: A Mandatory Access Control Framework
• Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions
• Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems
• We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems
• Progent: Securing AI Agents with Privilege Control
• When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents
• NetSafe: Exploring the Topological Safety of Multi-agent Networks
• MiniScope: Authorizing Agents with Least-Privilege Permissions
• Capability Gates Are Not Authorization: Confused-Deputy Failures in LLM Agent Frameworks

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
• VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection