SOURCE-LINKED INTELLIGENCE

From Review to Authorization: Key-Isolated Threshold Signing for LLM Agents

arXiv · AI, language, vision and robotics · article · Sep 5, 2026 · UTC

Autonomous LLM agents can turn untrusted content into effectful actions such as payments and permission changes. If the same process interprets this content and controls a reusable signing credential, prompt injection can cross the judgment boundary and reach execution authority. We present KITA, a review-to-authorization architecture that keeps the user's personal secret signing key and every threshold signing-key share outside all LLM processes. Under threshold signature unforgeability and our system assumptions, compromising the proposer and fewer than t reviewer-signer domains cannot produ

Read original source ↗ Open in workspace

recordType

paper

region

Global