想给自主代理加一把安全锁？这篇论文提出了SEB，一个在运行时强制证书绑定的执行边界，能控制突变操作。实测在AWS和K8s上延迟开销可控。
论文提出 Sovereign Execution Broker (SEB)，一种运行时执行边界，用于证书绑定的自主基础设施。SEB 消耗由 Sovereign Assurance Boundary (SAB) 签发的证书，验证请求变更是否匹配认证执行契约，检查有效期窗口、策略纪元、撤销纪元和实时状态漂移。SEB 铸造作用域执行身份，调用基础设施 API，记录签名决策和结果记录。原型在 AWS 和 Kubernetes 集群上评估，测量延迟开销、撤销传播、漂移检测和故障注入下的安全性。
Sovereign Execution Brokers: Enforcing Certificate-Bound Authority in Agentic Control Planes
Autonomous agents are increasingly connected to cloud, deployment, and data-control workflows, but production mutation authority should not reside inside non-deterministic reasoning processes. Existing access-control mechanisms authorize identities, while assurance layers certify proposed actions; neither alone provides a mandatory enforcement point for certified authority at the moment of mutation. This paper introduces the Sovereign Execution Broker (SEB), a runtime enforcement boundary for certificate-bound agentic infrastructure. SEB consumes certificates issued by the Sovereign Assurance Boundary (SAB), verifies that the requested mutation matches the certified execution contract, checks validity windows, policy epochs, revocation epochs, and live-state drift, mints scoped execution identity, invokes infrastructure APIs, and records signed decision and outcome records. By separating proposal, admission, and execution, SEB turns certified authority into a short-lived, revocable, auditable runtime capability, provided that production mutation APIs reject non-broker identities. We present the SEB execution model, certificate and replay-verification predicates, scoped identity semantics, bypass-prevention deployment patterns, failure behavior, and a concrete prototype implementation. We evaluate the prototype on AWS and Kubernetes clusters, measuring latency overheads, revocation propagation, drift detection, and security under fault injection.