mlsanityData to 14 Oct 2026

Trust Without Trusting: A Recomputable Trust Protocol for Autonomous Agents

arXiv 2605.06738 ↗First posted 7 May 2026cs.CR cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Autonomous AI agents already transact at production scale -- 69,000 bots, 165 million transactions, 50 million in volume on a single marketplace -- and any party can verify a signed credential without a central service. In an open agent world that covers most of what trust requires: there are no universal borders, and each party chooses for itself whom to deal with. Borders appear only where a closed space draws one -- a marketplace, a platform, or a consortium sets house rules. Whoever draws the border holds the authority to apply it, and may apply it as they choose, behind closed doors. This paper addresses the gap that opens there: when you rely on someone else's border, how do you check that they applied their own published rules -- taking no one's word for it, and handing the check to no new trusted party? Our answer is the Combined Evidence Protocol (CEP): a five-condition predicate any party recomputes from anchored data, turning "did the boundary-owner follow its own admission rules" into a fact anyone verifies rather than a claim anyone believes. The move that secures optimistic rollups secures this -- correctness rests on recomputation, so the measurement belongs to everyone and the oracle problem dissolves. Its load-bearing setting is a consortium of co-equal, mutually distrusting peers under a shared charter, each able to verify, independently, that the rules they jointly agreed are the rules being applied. CEP belongs to the family of trustless systems -- optimistic and zero-knowledge rollups, verifiable ML, self-sovereign-identity predicates. The infrastructure beneath it is live: a W3C VC + DID trust layer running since March 2026, anchored on Base L2, continuing arXiv:2605.06738 and standing on its own.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 8 of its 38 references that are in the map. First posted on arXiv 7 May 2026.

Builds on

8 of 38 references.

References · 8

  1. 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 113
  2. 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 71
  3. 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflowscited by 58
  4. 2025SAGA: A Security Architecture for Governing AI Agentic Systemscited by 45
  5. 2025AI Agents with Decentralized Identifiers and Verifiable Credentialscited by 18
  6. 2025Inter-Agent Trust Models: A Comparative Study of Brief, Claim, Proof, Stake, Reputation and Constraint in Agentic Web Protocol Design-A2A, AP2, ERC-8004, and Beyondcited by 9
  7. 2025Secure Autonomous Agent Payments: Verifying Authenticity and Intent in a Trustless Environmentcited by 3
  8. 2022Analyzing Voting Power in Decentralized Governance: Who controls DAOs?cited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.