VERA defines what revoking one delegation edge should actually invalidate, and shows both common runtime behaviors are wrong

arXiv·low signalXBlueskyLinkedInCopy link

Agent frameworks compose planners, tool agents, remote services and shared specialists into runtime delegation graphs, but their revocation APIs still behave like token or subtree invalidation. VERA specifies a verifier-checkable revocation contract emitted by runtime adapters as signed evidence, where withdrawing an edge should invalidate exactly the agents whose every authorizing root path used it. Measured against that target, tree cascades over-revoke shared agents while deployer-scoped cascades under-revoke cross-domain descendants. The evaluation replays compiled LangGraph traces and validates schema portability across A2A, AutoGen and CrewAI artifacts; some reported figures in the abstract are garbled, so treat the specific counts as unconfirmed.