发表机构
Ond Holdings Inc.（Ond控股公司）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
ZeroGate通过将精确动作批准与本地接纳分离，并利用SQLite事务确保原子性，在不牺牲安全性的前提下缩短AI智能体调度边界，其贡献在于重验证契约和可审计的授权成本比较，而非性能加速。
AI 中文摘要
将授权提前可以缩短智能体的调度边界，而无需移除授权工作。它还可以接纳其负载、权限或相关状态已发生变化的动作。ZeroGate将精确动作批准与持久本地接纳分离：签发者签署一个短时有效的ActionPass，可信运行时适配器在本地门检查其绑定并消耗其nonce之前重构最终动作。SQLite事务将nonce消耗、适用的配额更新和接纳收据耦合在一起。我们提出了一个条件性决策保持命题：成功的本地接纳意味着，在批准是健全的、所有策略依赖都被表示且是最新的、观察是忠实的、消耗是原子的前提下，指定的同步策略会在接纳点授权相同的动作。仅实现本身既不建立当前世界的新鲜性，也不建立远程效果的恰好一次语义。评估分离了作者设计的语义固定装置、受控并发与崩溃实验，以及一项Azure Blob研究，该研究通过相同的签发者和门比较同步执行与预备执行。两种模式都铸造精确动作通行证；生命周期延迟包括预备和预备批次驻留时间。在4800次云尝试中，在测试的并发级别下，预备的工人接纳到调度p95范围从9.802到11.374毫秒，而同步为25.018到334.000毫秒。在每一级别，预备的平均完整生命周期更长：边界改进并非净加速。贡献在于一个明确的重验证契约、一个持久的参考边界，以及一个关于授权成本在何处支付的、可审计的比较，而非新的密码学原语或通用性能前沿。
英文摘要
Moving authorization earlier can shorten an agent's dispatch boundary without removing authorization work. It can also admit an action whose payload, authority, or relevant state has changed. ZeroGate separates exact-action approval from durable local admission: an issuer signs a short-lived ActionPass, and a trusted runtime adapter reconstructs the final action before a local gate checks its binding and consumes its nonce. A SQLite transaction couples nonce consumption, applicable quota updates, and an admission receipt. We state a conditional decision-preservation proposition: successful local admission implies that a specified synchronous policy would authorize the same action at the admission point, provided approval is sound, all policy dependencies are represented and current, observations are faithful, and consumption is atomic. The implementation alone establishes neither current-world freshness nor exactly-once remote effects. Evaluation separates authored semantic fixtures, controlled concurrency and crash experiments, and an Azure Blob study comparing synchronous and prepared execution through the same issuer and gate. Both modes mint an exact-action pass; lifecycle latency includes preparation and prepared-batch dwell. Across 4800 cloud attempts, prepared worker-admission-to-dispatch p95 ranges from 9.802 to 11.374 ms, versus 25.018 to 334.000 ms synchronously, across the tested concurrency levels. Prepared mean complete lifecycle is longer at every level: the boundary improvement is not a net speedup. The contribution is an explicit revalidation contract, a durable reference boundary, and an auditable comparison of where authorization cost is paid, not a new cryptographic primitive or a universal performance frontier.
Comments47 pages, 11 figures, 13 tables. Full research report with an ancillary archive containing reference code, raw experimental records, and offline verification tools
