Status: Active research
Governed AI Systems
Agent governance, approval boundaries, human-in-the-loop control, policy enforcement and reversible, fail-closed execution.
Scope
We study how autonomous and semi-autonomous AI systems can be constrained by a single controlled execution boundary, with human approval required for irreversible actions and policy-based access to tools. The emphasis is on mechanisms that are auditable and reversible rather than on maximising autonomy.
Programmes in this area
- Status: Active researchGoverned Agent Systems
A single controlled execution boundary for AI agents, with human approval for irreversible actions and policy-based access to tools.
Open questions
Publications
- A governed ReAct agent on a real local quantized model: benign tools run, injected side-effects are denied, memory is tenant-isolated
- Governed multi-sub-agent orchestration: plan, route, execute, verify, merge, audit, recover — with per-sub-agent isolation
- A scenario-aware routing policy with co-resident dense-small backends: the model bake-off as automatic runtime behavior
- A governed agent runtime: clarify the input, gate the outcome, compound the skill
- The sovereign product layer: integrating research engines into a coherent capability set
- Safe convergence for an experience-reuse product loop: belief provenance, a confirmation state machine, and adversarial design punch-throughs
- Risk classification cannot be static: from a Memory System to a Commitment System
- Commitment System: stands or falls — an adversarial integration of four punch-throughs
- The Commitment Decision Is Undecidable; the Commit Action Is Not
- Authority Is Not Liability: The Solvent-Backstop-Aware Runtime
- Capstone: the sovereign runtime is a fold of refused collapses terminating in stipulation by fiat
- Clarify Runtime: the model-free floor of the input gate
- Composing a model-free clarify-execute-verify loop into one sovereign orchestration module
- Skill Runtime: activation beats re-derivation, acquisition stays sovereign
- State Runtime: the agent's world is an event-sourced belief log
- Skill Factory: acquisition where the judge, not the teacher, is authority
- The epistemic guard: a hard gate against confident-wrong answers
- A sovereign ReAct agent harness under in-loop governance
- A sovereign decentralized bidding network (Ed25519 + a hash-chained ledger)
- A Single Execution Boundary for Governed AI Agents: A Technical Report