Continuous Assurance of Agentic Security Auditors for Software Delivery Decision Gates

arXiv:2609.35266 · cs.CR · Submitted 2026-09-28 · Read on arXiv

cs.CR

Submitted: 2026-09-28

Updated: 2026-09-28

Code: https://github.com/guylupo-stormtree/taip-repoaudit-posture

Terminology

• Provenance — 11× in this paper · explained in 4 episodes
• Accountability — 7× in this paper · explained in 2 episodes
• Benchmark — 6× in this paper · explained in 2 episodes
• Accuracy — 4× in this paper · explained in 1 episode
• Continuous Control Posture Assurance — 4× in this paper
• Aggregation — 3× in this paper · explained in 1 episode
• Actor — 2× in this paper · explained in 3 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Trace — 2× in this paper · explained in 2 episodes
• Agent Interactions — 1× in this paper · explained in 1 episode
• Agentic AI — 1× in this paper · explained in 1 episode
• Agentic AI systems — 1× in this paper · explained in 1 episode
• Agentic System — 1× in this paper · explained in 2 episodes
• Agentic Workflows — 1× in this paper · explained in 1 episode
• Alignment — 1× in this paper · explained in 1 episode
• As Agentic Software Development Life Cycle — 1× in this paper
• IEEE Symposium on Security and Privacy — 1× in this paper
• Knowledge Graph — 1× in this paper · explained in 7 episodes
• Knowledge graphs — 1× in this paper · explained in 2 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• Verifiability — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• A Framework for Responsible AI Systems: Building Societal Trust through Domain Definition, Trustworthy AI Design, Auditability, Accountability, and Governance
• Trustworthy AI Posture (TAIP): A Framework for Continuous AI Assurance of Agentic Systems at Horizontal and Vertical scale
• Audit Cards: Contextualizing AI Evaluations
• RFCAudit: An LLM Agent for Functional Bug Detection in Network Protocols

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs