[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-a-formal-fix-for-ai-agents-that-rewrite-their-own-code":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},9614,"a-formal-fix-for-ai-agents-that-rewrite-their-own-code","A Formal Fix for AI Agents That Rewrite Their Own Code","A new paper proposes rules to stop self-modifying AI agents from duplicating or resurrecting permissions as they fork, replace, or roll back code.","A new arXiv paper tackles a problem most AI safety talk skips: what happens to permissions when an AI agent copies, replaces, or rolls back itself.\n\nThe authors propose \"authorization succession,\" a set of rules for tracking authority across generations of self-modifying agents. Each new version gets tied to a manifest, a root, and a full lineage back to its parent, so copies cannot duplicate quotas or inherit access after their ancestor is cut off. The team tested this on 32 registered authorization decisions, each run twice through different interfaces for 64 replays total, matching expected results with 28 allows and 36 denies. A separate independent checker then re-verified all 64 of those original traces and correctly rejected 28 deliberately broken versions, along with passing a batch of crash and scheduling checks. On top of that, two external adapters built for other self-modifying systems, OurArk and the Darwin Godel Machine, reproduced all 32 of the original decisions under real mutation scenarios like process restarts and handoffs.\n\nThis matters because self-modifying agents are no longer theoretical. Darwin Godel Machine and similar projects already let software rewrite and redeploy itself, and most permission systems were not built for code that can fork and roll back its own identity. Without something like this, a rolled-back copy could quietly keep access it should have lost.\n\nIt is still a proof run on a testbed, not a production system, so treat it as a credential-management fix for a problem the industry has not widely admitted it has yet.","[\"ai-agents\",\"ai-safety\",\"authorization\",\"self-modifying-ai\"]","2026-10-02T04:00:00.000Z","2026-10-03T03:11:21.559Z","2026-10-03T03:11:26.921Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Clarify how '64 replayed decisions' and '32 registered decisions' relate to each other (they read as conflicting stats for the same thing), and fix the misattribution in paragraph 3 — the source says two external adapters reproduced the OurArk\u002FDarwin Godel Machine decisions, not the independent checker that rejected the 28 mutants.","resolved","ai",[32,33,34,35],"ai-agents","ai-safety","authorization","self-modifying-ai",[37],{"name":38,"url":39},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.00347",0,{"sections":42},[43,46,50,54,59,63,67,72,77,82,87,92,97,102],{"name":44,"slug":30,"count":45,"latest_published_at":18},"AI",5896,{"name":47,"slug":48,"count":49,"latest_published_at":18},"Security","security",837,{"name":51,"slug":52,"count":53,"latest_published_at":18},"Policy","policy",438,{"name":55,"slug":56,"count":57,"latest_published_at":58},"Deals","deals",317,"2026-10-01T22:00:00.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":18},"Hardware","hardware",199,{"name":64,"slug":65,"count":66,"latest_published_at":18},"Science","science",171,{"name":68,"slug":69,"count":70,"latest_published_at":71},"Consumer Tech","consumer-tech",155,"2026-10-01T19:54:10.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Dev Tools","dev-tools",96,"2026-10-01T16:57:03.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Software","software",93,"2026-09-30T21:41:11.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",90,"2026-10-01T21:55:22.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",53,"2026-10-02T02:50:39.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",50,"2026-09-30T21:37:54.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"How-To","how-to",7,"2026-10-01T09:00:00.000Z"]