Story · arXiv (via papers.cool)
If Agents Were Angels, No Governance Would Be Necessary: Out-of-Band Policy Enforcement at a Trusted Tool Boundary (arXiv (via papers.cool))
paper · Story page
OBPE moves enforcement to a trusted boundary outside the agent's reasoning: authorize the typed operation, narrow the query before the backend call, filter or mask the response. Under stated conditions, agent policy provably can't widen the ceiling a data owner sets, and an HTTP proxy prototype ships with a typed Cedar policy core.
In plain words
- Researchers built a separate control system that limits what action-taking artificial intelligence can do with a person's login access.
- It checks requested actions before they reach company data, rejecting them or narrowing which records they can access.
- It can remove entire records or specific pieces of information and hide sensitive values before returning results.
- Under the paper's stated conditions, the action-taking system cannot grant access beyond the data owner's maximum.
- Data owners gain protection that does not depend on the action-taking system correctly following written restrictions.
Appeared in
- Realistic prompts drop coding-agent scores, and tool filtering beats prompt rules
Sep 01, 2026 · in the sections
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.