SOURCE-LINKED INTELLIGENCE

ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?

arXiv · AI, language, vision and robotics · article · Sep 8, 2026 · UTC

Tool-using language agents can delegate and revoke permissions while acting through external services. We show that two authorization histories can have identical current permissions and identical all-pairs reachability yet require opposite decisions after the same direct-edge revocation. We formalize the information needed to preserve such distinctions as a residual authorization state. We prove that exponentially many future-distinct states can share one fixed transitive closure, and give exact or tight asymptotic bounds on the state required by an exact monitor as delegation redundancy vari

Read original source ↗ Open in workspace

recordType

paper

region

Global