arXiv paper locks AI agents to rules they cannot skip at run time
The human sets terms once; the framework refuses any action the agent cannot prove is safe before it runs. That gap between 'I granted access' and 'I trust it was used correctly' is where approval patterns break down today.
emerging
watching → emerging → established
Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.
20 documented sightings since Aug 2026 — every one traces to a dated source.
See the evidence →