Field-Tier Minimization Keeps Raw Agent Action Parameters Out of an Append-Only Audit Ledger

arXiv 2608.25474·medium signalXBlueskyLinkedInCopy link

The design classifies each action parameter field, not each action class, into three tiers: fields a policy may legitimately match on cross raw, policy-relevant but identifying fields cross only as projections such as an email domain or templated route shape, and fields with no legitimate policy use never leave the workload. The ledger commits a canonical digest of the full unminimized parameters computed before minimization, so reclassifying a field changes what is disclosed without invalidating historical entries or reopening a hash. It also assigns each attested fact to whichever party could otherwise lie about it undetectably, and reports a real incident where a first-cut projection still preserved the identifier it was written to remove.