Why Autonomous AI Agents Need Bounded and Revocable Authority

Abstract

Modern agentic systems can plan, invoke tools, chain actions across systems, access data, execute workflows, delegate subtasks, and operate with less direct human intervention than traditional software components. These characteristics create new authorization, accountability, and access-control challenges, particularly when agents act on behalf of users or other agents. Authentication alone does not establish that an agent should be permitted to perform a specific action against a specific resource at a specific time. This article develops bounded and revocable authority as a foundational security property for autonomous AI systems and as a core architectural principle of SGAEIA.

This page provides the author-written abstract and bibliographic metadata for discovery. The Zenodo record is the persistent source for citation, files, version, and license information.