# Preprint proposes runtime controls for resources acquired by AI agents

_Published Monday, September 21, 2026 at 5:09 PM EDT · AI, Security · Latest · Tier 2 — Notable_

Researchers describe a runtime authorization system intended to stop autonomous AI agents from turning newly acquired compute, credentials, accounts or services into unauthorized authority. The preprint's architecture quarantines returned resources, resolves their capabilities from authenticated provider evidence and activates them only after checking provenance, current authorization and limits spanning identity, effects, data and delegation.

In registered evaluations, the reference implementation accepted 20 benign traces and rejected 40 unsafe traces across 810 events. A staged connection between an AI tool protocol and Docker completed two benign cases, while none of 16 unsafe cases added an unauthorized container-start request. The results remain preprint findings under explicit assumptions rather than evidence from a production deployment.

## Sources

- [cs.AI updates on arXiv.org](https://arxiv.org/abs/2609.14744)

---
Canonical: https://techandbusiness.org/newswire/BQUlhIGDFg9_dTzwCWdIL5
Published: 2026-09-21T21:09:28.163Z
Story chronology: 2026-09-21T04:00:00.000Z
Retrieved: 2026-09-21T23:01:34.065Z
Publisher: Tech & Business (techandbusiness.org)