Stacked agent gates invalidate each other, and the order you apply remediations changes the answer

arXiv 2608.18360·low signalXBlueskyLinkedInCopy link

When authority, resource, and evidence gates run together, a remediation applied by one control can change the action, evidence, or context another control already judged, quietly invalidating that judgment. The proposed remediate-and-regate protocol restores soundness, and the paper shows the two implemented operators, evidence substitution and resource-budget downroute, do not commute, so remediation order carries meaning rather than being an implementation detail. Five of six control configurations met registered decision rules across all 30 seeds, and governed evidence buffers stayed poisonable even with the proposed mitigations.