mlsanityData to 7 Oct 2026

Cryptographic certificates of validity for trustworthy AI

arXiv 2606.23768 ↗First posted 22 Jun 2026cs.CR cs.AI cs.LOcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

We propose cryptographic certificates of validity for agentic AI systems. The core idea is to formally specify a correctness or policy condition as a logical predicate, compile this predicate to a witness-checking problem over polynomial constraints, and use a succinct cryptographic proof system (and optionally zero-knowledge) to certify that the condition holds. This offers a middle ground between formal verification of source code, and cryptographic authentication. An agent's action can be accompanied by an independently checkable proof that it satisfies an agreed formal policy, without requiring the verifier to trust the agent or to re-execute computation. We outline the approach at a high level, give the core mathematical translation, relate the proposal to proof-carrying code, zkVMs, formal methods, and agent governance, and note the specification, auditing, and deployment questions that a full implementation must answer.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 4 of its 31 references that are in the map. First posted on arXiv 22 Jun 2026.

Builds on

4 of 31 references.

References · 4

  1. 2024Visibility into AI Agentscited by 77
  2. 2015A Core Model for Choreographic Programmingcited by 2
  3. 2021A verified algebraic representation of Cairo program executioncited by 1
  4. 2021Functional Choreographic Programmingcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of concept
  2. 2026Zero-Knowledge Predicate Proofs Between AI Agents: A Measured, Cross-Protocol Gateway and the Source-Integrity Gap ↗
  3. 2026The Prover Is the Judge: Verified Security Software from AI Coding Agents in Ada/SPARK
  4. 2026Neuro-Formal Verification: Agentic Language-Agnostic Formal Program Reasoning
  5. 2026Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems
  6. 2025Safe, Untrusted, "Proof-Carrying" AI Agents: toward the agentic lakehouse
  7. 2026Agentic Proving for Program Verification
  8. 2026ShannonProver: Towards Automating Formal Cryptographic Proofs