用于可补偿智能体副作用的智能合约结算的绑定追索权
Bonded Recourse for Smart-Contract Settlement of Compensable Agent Side Effects
- Max Planck Institute for Software Systems（马克斯·普朗克软件系统研究所）
- Research Institute for Cryptoeconomics, Vienna University of Economics and Business（维也纳经济与商业大学密码经济学研究所）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
针对智能体行动失败后的残余损害问题，设计了智能合约结算协议Recourse，通过绑定行动相关要素并结合链上机制减少未补偿损害，已实现并验证其有效性。
AI中文摘要：
自主智能体运行时会执行工具操作，这些操作会跨组织边界改变数据库、代码仓库和云服务。授权机制和本地补偿机制分别覆盖行动前准入和运行中回滚，但均无法解决允许的行动失败后留下的残余损害。我们设计了Recourse，一种用于可补偿智能体副作用的智能合约结算协议，它将每个准入行动与范围、恢复、证据、赔付和抵押品绑定。Recourse将事前资格与事后客观可结算性分离：类型化收据使客观残余索赔可在乐观预言机挑战模式下计算，而主观或不完整的索赔则路由至ERC-792仲裁或排除。我们实现了合约套件，将其部署在Base Sepolia上，构建了针对Postgres、Git和云兼容本地沙箱的适配器，并在确定性测试工具、沙箱轨迹、对抗性扫描和基于属性的模糊测试中评估了该系统。与仅授权和本地补偿的基线相比，绑定追索权覆盖范围减少了未补偿的损害。在跨组织信任假设下，链上层级提供了中立托管、公开挑战、非合作赔付和可移植历史。
英文摘要：
Autonomous agent runtimes execute tool actions that mutate databases, repositories, and cloud services across organizational boundaries. Authorization and local compensation cover pre-action admission and in-runtime rollback, but neither settles the residual harm left after a permitted action fails. We design Recourse, a smart-contract settlement protocol for compensable agent side effects that binds each admitted action to scope, recovery, evidence, payout, and collateral. Recourse separates ex ante eligibility from ex post objective settleability: typed receipts make objective residual claims computable under an optimistic-oracle challenge pattern, while subjective or incomplete claims route to ERC-792 arbitration or exclusion. We implement the contract suite, deploy it on Base Sepolia, build adapters against Postgres, Git, and cloud-compatible local sandboxes, and evaluate the system on a deterministic harness, sandbox traces, adversarial sweeps, and property-based fuzzing. Against authorization-only and local-compensation baselines, bonded coverage cuts uncompensated harm. The on-chain tier supplies neutral custody, public challenge, non-cooperative payout, and portable history under cross-organizational trust assumptions.
