Extension: PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents

Record: kaal:position:2026-10-16-001 · 2026-10-16

Admission evidence is not execution authority. PACE shows why a safe and a leaking artifact can present the same admission evidence, then evaluates effect verification against authority compiled from the authenticated request immediately before a tool call executes. That mechanism extends the requirement for a last enforceable boundary. It does not evaluate reputation systems, prove the categorical institutional rule, or establish performance across all sovereign-runtime coordination layers.

Affirmed commentary position. This record extends a source-bound scholarly claim but is not a verbatim paper claim.

Holds when

tool-using agents acting under authenticated user requests

Current debate

PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents

Scholarly basis

kaal:claim:7314479-020
Wulf A. Kaal, Institutional Requirements for Sovereign Local Agent Runtimes (2026). SSRN: https://ssrn.com/abstract=7314479
Source PDF sha256: debace24a155ae924a155b1fafe98856d98cf83689feff2f87a32f1c06171ce6

Evidence and mapping

Evidence: permitted_full_text
Review tier: independent evidence-first compound-growth review
Mapping confidence: unscored
Mapping ambiguous: false

Topics

consensus-and-security governance-design ai-and-agents

Provenance

Affirmed in kaal-weekly-research:2026-10-16:daily-001 on 2026-10-16. Review record.

Verify

Canonical markdown sha256: 858a7dc2f54cfb8d9da339dad2c246bbc977e1e10458e21eab9ba292992efffc
curl -s https://wulfkaal.github.io/positions/2026-10-16-001.md | sha256sum