[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researchers-build-cryptographic-proof-system-for-ai-agent-guardrails":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5900,"researchers-build-cryptographic-proof-system-for-ai-agent-guardrails","Researchers Build Cryptographic Proof System for AI Agent Guardrails","NiyamAI wraps AI agent tool calls in zero-knowledge proofs so a security check's outcome can be verified by outsiders, not just trusted on faith.","A new paper wants AI agents to prove, cryptographically, that they actually checked the rules before taking an action.\n\nResearchers built NiyamAI, a runtime guardrail for autonomous LLM agents that call external tools. At the start of a session, the allowed tools and constraints get locked into an Intent Contract, sealed under a SHA-256 commitment. Every tool call passes through an authority gate and a small neural network judge (an 11-8-2 layer network), and for each approved action the system generates a zk-SNARK proof that the policy check ran correctly against that contract - the action only executes once the proof verifies. Tested on 2,000 scenarios from AgentSafetyBench, NiyamAI scored 88.8% F1 at a 1.0% false-positive rate, well ahead of Llama Prompt Guard 2 (66.8%), GPT-OSS-Safeguard (46.2%), and NeMo Guardrails (40.4%).\n\nMost guardrails today - prompt filters, semantic classifiers, policy engines - run on the same machine as the agent they're supposed to police, so a compromised host can quietly wave through a dangerous action and leave no trace of the failure. NiyamAI's proofs are portable: an 18.6 KB proof verifies in 51 milliseconds, and any third party can check it without touching the underlying model, turning \"the system checked the rules\" from a claim into something auditable.\n\nThe catch is overhead - 1.7 seconds of proof generation per approved action - and the team's own adversarial testing turned up two exploitable holes in the enforcement layer, a useful reminder that verifiable isn't the same as unbreakable.","[\"ai-safety\",\"ai-agents\",\"zero-knowledge-proofs\",\"cryptography\"]","2026-08-28T04:00:00.000Z","2026-08-28T07:32:46.959Z","2026-08-28T07:32:58.875Z","published",null,[],"ai",[26,27,28,29],"ai-safety","ai-agents","zero-knowledge-proofs","cryptography",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.07167",0,{"sections":36},[37,41,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":24,"count":39,"latest_published_at":40},"AI",3351,"2026-08-30T14:51:33.000Z",{"name":42,"slug":43,"count":44,"latest_published_at":45},"Security","security",503,"2026-08-29T10:30:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",244,"2026-08-30T15:35:10.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",148,"2026-08-27T15:33:14.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",52,"2026-08-25T18:55:12.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]