AI 中文总结
针对跨组织智能体消息传递的离线可验证问责需求，提出保留证据束模型及策略控制的离线验证器，原型测试显示其可有效拒绝证据不足的束，无需依赖实时服务。
AI 中文摘要
跨组织智能体工作流需要保留证据，该证据在后续审计或争议审查期间仍保持独立可验证性，此类工作流可能涉及多个组织、委托操作、与策略相关的事件以及有争议的问责主张。当实时系统不可用、受某一方控制或不被所有参与者信任时，这一需求难以满足。现有机制提供了有用的组成部分，包括认证日志、委托语义、签名检查点和一致性检查，但仍缺失以验证者为中心的事件级束，用于在显式策略下离线检查证据充分性。我们提出一种保留证据束模型和策略控制的智能体间工作流事件离线验证器。每个束保留策略要求的证据，包括发送者认证、认证日志承诺、见证支持的检查点证据、仅追加连续性、感知委托的授权证据，以及必要时接收者签名的回执证据。验证器仅接受有选定策略要求证据支持的主张，为后续审查者提供评估证据充分性的离线基础，且不会仅从传输行为或日志包含性推断传递或接收。在针对300个完整工作流和1200个有效保留束的原型评估中，我们测量了不同策略配置和工作流事件证据要求下的离线验证器侧延迟，检查点上下文锚定在当前原型中延迟最高，而委托和工作流先决条件证据需要额外验证步骤。在针对性的负面证据测试中，所有损坏或策略不足的束均被拒绝，未观察到误接受。这些结果支持基于证据的审计和争议审查，无需依赖实时服务或平台特定日志。
英文摘要
Cross-organization agent workflows require preserved evidence that remains independently verifiable during later audit or dispute review. They may involve multiple organizations, delegated actions, policy-relevant events, and disputed accountability claims. This is difficult when live systems are unavailable, controlled by one party, or not trusted by all participants. Existing mechanisms provide useful pieces, including authenticated logging, delegation semantics, signed checkpoints, and consistency checks. What remains missing is a verifier-centered event-level bundle for checking evidence sufficiency offline under an explicit policy. We propose a preserved evidence-bundle model and a policy-controlled offline verifier for agent-to-agent workflow events. Each bundle preserves policy-required evidence, including sender authentication, authenticated log commitment, witness-backed checkpoint evidence, append-only continuity, delegation-aware authorization evidence, and explicit receiver-signed receipt evidence when required. The verifier accepts only claims supported by the selected policy-required evidence, giving a later reviewer an offline basis for assessing evidence sufficiency. It does not infer delivery or receipt from transport behavior or log inclusion alone. In a prototype evaluation over 300 complete workflows and 1200 valid preserved bundles, we measure offline verifier-side latency across policy profiles and workflow-event evidence requirements. Checkpoint-context anchoring has the highest latency in the current prototype, while delegation and workflow-prerequisite evidence require additional verification steps. In targeted negative-evidence tests, all corrupted or policy-insufficient bundles were rejected, with no false acceptance observed. These results support evidence-based audit and dispute review without relying on live services or platform-specific logs.
Comments17 pages, 5 figures, 9 tables
