Jul 17, 2026
Canonical Action Identity Emerges as an Agent Governance Primitive
CAVA proposes a portable way to bind agent approvals, policy decisions, and audit receipts to action meaning across heterogeneous runtimes.
Topic intelligence
Agent Infrastructure Security
Editorial reporting and normalized Signal records connected to this coverage area.
- Briefs
- 3
- Records
- 3
3 briefs
Related briefs
Daily editorial synthesis whose front matter identifies this topic as a primary coverage area.
Jul 14, 2026
Fictional fixtureFixture: Checkpoints, Policy, and Attestation
Fictional test coverage of approval checkpoints, autonomous-agent policy, and runtime attestation.
Jul 13, 2026
Fictional fixtureFixture: Boundaries for Governed Agents
Fictional test coverage of layered agent security, scoped authorization, and bounded payment controls.
3 records
Topic Signal records
Structured event records explicitly categorized under this topic, preserving source status, confidence, limitations, and analysis.
KB-SIGNAL-20260717-001ProposalCAVA proposes canonical action identities for governing agents across heterogeneous runtimes
Source
CAVA: Canonical Action Verification and Attestation for Runtime Governance of Agentic AI Systems
Verified
Jul 17, 2026
Jurisdiction
Global
Impact: MediumConfidence: Medium
Factual summary
CAVA proposes converting agent activity from shell, MCP, browser, API, workflow, and managed-agent runtimes into versioned canonical action objects. Policy decisions, approvals, execution evidence, and optional attestations bind to deterministic fingerprints over action semantics rather than raw text or runtime-native identifiers. The paper reports results from 96 seed scenarios expanded into 384 controlled runtime variants.
Domain impact
Canonical action identity could give agent authorization and audit systems a portable object for comparing actions across runtimes, limiting approval drift, verifying receipt integrity, and disclosing whether a deployment can observe, warn, gate, or block before side effects occur.
Keelbase analysis
The durable signal is the distinction between recording an event and identifying the operational action that authority governed. CAVA supplies a useful schema, threat model, and buyer-evaluation vocabulary, but its perfect controlled-corpus scores should not be treated as universal validation. External traces, independent reproduction, broader parser coverage, and adversarial testing remain necessary.
KB-SIGNAL-20260714-003ConfirmedFixture attestation network publishes agent runtime verification profile
Source
Keelbase Signal fictional fixture
Verified
Jul 14, 2026
Jurisdiction
Global
Impact: MediumConfidence: High
Factual summary
A fictional infrastructure consortium publishes a profile for verifying runtime identity, software measurements, and signed execution evidence before granting tool access.
Domain impact
Attestation could help authorization systems distinguish an approved runtime from an unverified environment, while leaving behavioral safety unproven.
Keelbase analysis
The fixture preserves the boundary between verifiable runtime properties and unsupported claims that secure infrastructure guarantees safe agent behavior.
KB-SIGNAL-20260713-001ConfirmedFixture framework maps agent security across four evidence layers
Source
Keelbase Signal fictional fixture
Verified
Jul 13, 2026
Jurisdiction
Global
Impact: HighConfidence: High
Factual summary
A fictional framework separates infrastructure, tool, agent-behavior, and model risks so each layer can use evidence suited to its attack surface.
Domain impact
Security teams would need distinct controls for deterministic infrastructure findings, semantic tool risks, behavioral failures, and model-level attacks.
Keelbase analysis
The fixture illustrates why governed agent systems need layered safeguards instead of treating every failure as a prompt problem.