ZeroGate Moves Agent Authorization Off the Hot Path With Signed Single-Use ActionPasses and SQLite-Atomic Admission
arXiv·low signal
ZeroGate splits exact-action approval from local admission. An issuer signs a short-lived ActionPass, a trusted adapter reconstructs the final action, and a local gate checks the binding and consumes a nonce in one SQLite transaction along with quota updates and a receipt. The paper states exactly which conditions make local admission equivalent to a synchronous policy check, and it evaluates the design with crash and concurrency tests plus an Azure Blob study. It is a concrete pattern for low-latency governed tool calls.