This paper presents a case study on using AI coding agents in software engineering and develops a process model for governing high-velocity agentic implementation.

This paper compares and analyzes contribution policies of six open-source organizations towards governing AI-driven incidents in their projects, deriving a six-dimensional taxonomy and identifying gap…

This paper analyzes how a financial-technology organization operationalizes the ISO/IEC 27001:2022 standard by examining eight core security procedures, concluding that an effective ISMS requires a ti…

This paper analyzes 48 large, active DAOs on Ethereum and finds that common governance mechanisms like token registration, staking, and delegation systematically reinforce the centralization of voting…

The paper proposes GovAI-Pipe, a novel four-layer governance pipeline that operationalizes high-level AI policies (like the EU AI Act) into auditable, technical checkpoints for deploying AI in large-s…

The paper proposes Proof-Carrying Agent Actions (PCAA), a runtime-neutral governance model that uses action certificates to consistently track and authorize high-risk actions across diverse and hetero…

The paper proposes the Energetic Paradigm, a model-agnostic architectural framework that allows states to maintain decision sovereignty and control over military AI systems, even when using proprietar…

This paper introduces AGL-1, a vendor-neutral reference model for governing enterprise AI, addressing challenges such as authorization, contextual lineage, and agentic execution.

The paper proposes Operational AI Deployment Assurance (OADA), a governance framework that translates complex AI evaluation metrics and operational uncertainties into actionable, deployment-oriented a…

The paper proposes a comprehensive, dual-layer architectural framework for AI identification and traceability, ensuring continuous accountability and regulatory oversight throughout the entire lifecyc…

The paper models the trade-off between deploying increasingly capable AI systems and managing associated cyber risks, finding a 'deployment paradox' where high-loss environments with weak governance l…

The paper introduces a certified purity architecture that strengthens governance in cognitive workflow systems by replacing insufficient runtime checks with cryptographically attested structural guara…

ARuleCon is an agentic framework that autonomously and accurately converts security rules across heterogeneous SIEM platforms, significantly outperforming baseline LLMs in fidelity.

The paper proposes a compositional governance framework to provide richer, dynamic authorization semantics necessary for governing autonomous agentic AI systems, moving beyond traditional static IAM m…

This paper introduces the Always-On Evaluation Protocol (AOEP-v0) for evaluating always-on agents by focusing on state mutation and recovery obligations.

The paper introduces the concept of the atomic decision boundary, proving that for autonomous systems to guarantee execution-time admissibility, the decision and the resulting state transition must oc…

The paper proposes a Regulatory Compliance Protocol (RCP) to standardize and provide a regulatory framework for the interoperability and tokenization of assets between traditional and decentralized fi…

The paper proposes a method using on-chain voting analysis to detect emerging partisan communities within DAOs, demonstrating that addresses destined to fork cluster together months before actual orga…