capmas：多智能体系统中基于能力的权限委派架构
原标题：CAPMAS: Capability-Based Delegation of Privileges in Multi-Agent Systems
AI 摘要
arXiv 论文提出 capmas 架构，用于多智能体系统中的安全权限委派。该架构结合基于对比学习的语义范围划分管道与 Macaroon 令牌，实现离线、防篡改的委派，并减少不必要的权限。相比 OAuth 2.0 Token Exchange，capmas 的委派操作快 30 倍，延迟降低 2 倍，带宽使用减少 3 倍，语义范围划分在 17 毫秒内实现超过 90% 的完美权限包检索。
正文节选
capmas: Capability-Based Delegation of Privileges in Multi-Agent Systems Abstract Agentic systems require secure and efficient delegation of privileges across multiple collaborating agents. Existing approaches fall into two categories. Some propagate user identities directly to agents, obscuring accountability and creating persistent over-privilege risks that are amplified by the non-deterministic behaviour of AI agents. Others rely on continuous synchronization with a central Identity and Acces