ToolContractGate：面向漂移安全 Agent 工具调用的版本化可信合约
原标题：ToolContractGate: Versioned Trusted Contracts for Drift-Safe Agent Tool Invocation
AI 摘要
该论文提出 ToolContractGate，一个面向 OpenAPI 派生 agent 工具的确定性运行时合约评估器，将存储的 OpenAPI 指纹与访问、schema 和行为声明组合成版本化 ToolContract。在 45 个合成用例（35 个不安全、10 个安全）上，完整流水线检出全部 35 个故障（29 BLOCK、3 REVIEW、3 WARN），安全用例无误拦截，平均门控延迟 0.18 ms、p95 为 2 ms。开源工件包含 7 个 OpenAPI 规范、12 个企业合约、29 个单元测试和 900 条评估记录，但下游强制执行仍需宿主遵循返回决策。
正文节选
ToolContractGate: Versioned Trusted Contracts for Drift-Safe Agent Tool Invocation Abstract Agent tool approval and input validation do not, by themselves, bind a request to an approved source artifact. ToolContractGate provides a deterministic runtime contract evaluator for OpenAPI-derived agent tools. Each versioned ToolContract combines a stored OpenAPI fingerprint with access, schema, and behavioral declarations. The full evaluator applies ten checks, including a cached boot-time provenance