KedgeFlow: A Programmable Control Plane for Enterprise AI Agents
Enterprise AI agents can execute altered versions of approved actions, concurrently reuse the same permission, or retry operations whose responses were lost.
ProofPaper ↗
Key points
- These failures arise when approval and resource execution lack a shared contract.
- KedgeFlow specifies language-independent contracts for trusted controllers to authorize state-changing operations and privileged gateways to enforce that authority independently of agent reasoning.
- Inspired by OpenFlow, it connects policy checks supported by evidence, signed permission for an exact action, a shared allowance that can be consumed only once, target-side conditions for applying the change, and retained outcome records.
- A reference implementation exposes this execution path to agent systems through the Model Context Protocol (MCP).
Sources (1)
- [1]KedgeFlow: A Programmable Control Plane for Enterprise AI AgentsarXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 10, 11:01 AM
Enterprise AI agents can execute altered versions of approved actions, concurrently reuse the same permission, or retry operations whose responses were lost.
These failures arise when approval and resource execution lack a shared contract.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 10, 2026How Should a Camera-First AI Agent Work?
- Oct 10, 2026CLI Manager
- Oct 9, 2026OATH: Object-Agnostic Tracking for Dexterous Hands, Enabling Rapid Physics-based Retargeting
- Oct 9, 2026FutureMail
- Oct 8, 2026Hexis Cloud
- Oct 8, 2026Google brings agentic AI to Gemini, starting with businesses