{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T16:03:35Z","timestamp":1780589015538,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":63,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3779208.3786259","type":"proceedings-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:21:58Z","timestamp":1780586518000},"page":"820-834","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["VET Your Agent: Towards Host-Independent Autonomy via Verifiable Execution Traces"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-2730-1563","authenticated-orcid":false,"given":"Artem","family":"Grigor","sequence":"first","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4245-1179","authenticated-orcid":false,"given":"Christian Schroeder","family":"de Witt","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2275-7026","authenticated-orcid":false,"given":"Simon","family":"Birnbach","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2340-3040","authenticated-orcid":false,"given":"Ivan","family":"Martinovic","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Bains Alisha. 2024. What Is Truth Terminal? https:\/\/www.ccn.com\/education\/crypto\/what-is-truth-terminal\/."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1002\/9781119644682"},{"key":"e_1_3_2_1_3_1","unstructured":"Marc Andreessen and Terminal of Truths. 2024. AI agent and funding dynamics: Grant for self-acting AI development. Post on X (formerly Twitter). https:\/\/x.com\/AndyAyrey\/status\/1811168313235648687 Accessed: 2025-12-14."},{"key":"e_1_3_2_1_4_1","unstructured":"Anthropic. 2025. Effective Context Engineering for AI Agents. Anthropic. https:\/\/www.anthropic.com\/engineering\/effective-context-engineering-for-ai-agents Accessed: 2025-12-14."},{"key":"e_1_3_2_1_5_1","unstructured":"Anthropic. 2025. Introducing the Model Context Protocol. https:\/\/www.anthropic.com\/news\/model-context-protocol."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1997.601317"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/278298.278306"},{"key":"e_1_3_2_1_8_1","unstructured":"Auth0. 2025. Auth for GenAI | Auth0. https:\/\/www.auth0.ai\/."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/22145.22192"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","unstructured":"Axel Backlund and Lukas Petersson. 2025. Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agents. doi:10.48550\/arXiv.2502.15840 arXiv:2502.15840 [cs]","DOI":"10.48550\/arXiv.2502.15840"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3318041.3355458"},{"key":"e_1_3_2_1_12_1","first-page":"46","article-title":"Scalable, transparent, and post-quantum secure computational integrity","volume":"2018","author":"Ben-Sasson Eli","year":"2018","unstructured":"Eli Ben-Sasson, Iddo Bentov, Y. Horesh, and Michael Riabzev. 2018. Scalable, transparent, and post-quantum secure computational integrity. IACR Cryptol. ePrint Arch. 2018 (2018), 46.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","unstructured":"Stephen Casper Luke Bailey Rosco Hunter Carson Ezell Emma Cabal\u00e9 Michael Gerovitch Stewart Slocum Kevin Wei Nikola Jurkovic Ariba Khan Phillip J. K. Christoffersen A. Pinar Ozisik Rakshit Trivedi Dylan Hadfield-Menell and Noam Kolt. 2025. The AI Agent Index. doi:10.48550\/arXiv.2502.01635 arXiv:2502.01635 [cs]","DOI":"10.48550\/arXiv.2502.01635"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","unstructured":"Alan Chan Carson Ezell Max Kaufmann Kevin Wei Lewis Hammond Herbie Bradley Emma Bluemke Nitarshan Rajkumar David Krueger Noam Kolt Lennart Heim and Markus Anderljung. 2024. Visibility into AI Agents. doi:10.48550\/arXiv.2401.13138 arXiv:2401.13138 [cs]","DOI":"10.48550\/arXiv.2401.13138"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2406.12137"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3627703.3650088"},{"key":"e_1_3_2_1_17_1","first-page":"128","article-title":"Having your day in robot court","volume":"36","author":"Chen Benjamin Minhao","year":"2022","unstructured":"Benjamin Minhao Chen, Alexander Stremitzer, and Kevin Tobia. 2022. Having your day in robot court. Harvard Journal of Law & Technology 36, 1 (2022), 128\u2013169.","journal-title":"Harvard Journal of Law & Technology"},{"key":"e_1_3_2_1_18_1","unstructured":"AI CMC. 2025. What Is ai16z (AI16Z) And How Does It Work? https:\/\/coinmarketcap.com\/cmc-ai\/ai16z\/what-is\/."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","unstructured":"K. D. Conway Cathie So Xiaohang Yu and Kartin Wong. 2024. opML: Optimistic Machine Learning on Blockchain. doi:10.48550\/arXiv.2401.17555 arXiv:2401.17555 [cs]","DOI":"10.48550\/arXiv.2401.17555"},{"key":"e_1_3_2_1_20_1","first-page":"86","article-title":"Intel SGX Explained","volume":"2016","author":"Costan Victor","year":"2016","unstructured":"Victor Costan and S. Devadas. 2016. Intel SGX Explained. IACR Cryptol. ePrint Arch. 2016 (2016), 86.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533737.3535098"},{"key":"e_1_3_2_1_22_1","unstructured":"ElizaOS. 2025. Launch Eliza V2 Beta Agent Swarms with TEE Security on Phala Cloud. https:\/\/phala.com\/posts\/launch-eliza-v2-beta-agent-swarms-with-tee-security-on-phala-cloud."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2403.09567"},{"key":"e_1_3_2_1_24_1","first-page":"953","article-title":"PLONK: Permutations over Lagrange-bases for Oecumenical Noninteractive arguments of Knowledge","volume":"2019","author":"Gabizon Ariel","year":"2019","unstructured":"Ariel Gabizon, Zachary J. Williamson, and Oana-Madalina Ciobotaru. 2019. PLONK: Permutations over Lagrange-bases for Oecumenical Noninteractive arguments of Knowledge. IACR Cryptol. ePrint Arch. 2019 (2019), 953.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_1_25_1","unstructured":"Gajesh2007. 2025. feat: added new plugin - zktls - reclaim by Gajesh2007 \u2022 Pull Request #1558 \u2022 elizaOS\/eliza. https:\/\/github.com\/elizaOS\/eliza\/pull\/1558."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38348-9_37"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/22145.22178"},{"key":"e_1_3_2_1_28_1","unstructured":"Google. 2025. Agent2Agent Protocol (A2A). https:\/\/google-a2a.github.io\/A2A\/#get-started-with-a2a."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"e_1_3_2_1_30_1","unstructured":"Miya Hedge. 2024. Discussion on AI agent vulnerabilities: Manipulation risks from adversarial attacks and owner bias. Post on X (formerly Twitter). https:\/\/x.com\/MiyaHedge\/status\/1849117352664715489 Accessed: 2025-12-14."},{"key":"e_1_3_2_1_31_1","first-page":"3","article-title":"Forced robot arbitration","volume":"109","author":"Horton David","year":"2024","unstructured":"David Horton. 2024. Forced robot arbitration. Cornell Law Review 109, 3 (April 2024), 679\u2013734.","journal-title":"Cornell Law Review"},{"key":"e_1_3_2_1_32_1","unstructured":"Intel. 2023. Performance Considerations of Hardware-Isolated Partitioned VMs. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/technical\/tdx-performance-isolated-partitioned-vms.html."},{"key":"e_1_3_2_1_33_1","unstructured":"Joyce and Slipstream. 2024. Evidence of developer impersonation of AI messages in raiba ai's logging system. Post on X (formerly Twitter). https:\/\/x.com\/sIipstream11\/status\/1847108619856498751 Accessed: 2025-12-14."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Maciej Kalka and Marek Kirejczyk. 2024. A Comprehensive Review of TLSNotary Protocol. doi:10.48550\/arXiv.2409.17670 arXiv:2409.17670 [cs]","DOI":"10.48550\/arXiv.2409.17670"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3399742"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/138873.138874"},{"key":"e_1_3_2_1_37_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Lipp Moritz","year":"2018","unstructured":"Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg. 2018. Meltdown: Reading Kernel Memory from User Space. In 27th USENIX Security Symposium (USENIX Security 18). USENIX Association, Baltimore, MD, USA, 973\u2013990."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the thirty-seventh conference on neural information processing systems (NeurIPS","volume":"2023","author":"Liu Andy","year":"2023","unstructured":"Andy Liu, Kushal Lakhotia, Xiao Wang, Luke Zettlemoyer, and Tom Kwiatkowski. 2023. WebArena: a realistic web environment for building autonomous agents. In Proceedings of the thirty-seventh conference on neural information processing systems (NeurIPS 2023), datasets and benchmarks track, Vol. 2023. NeuroIPS, 1269 Law Street, San Diego CA 92109, 22. arXiv:2307.13313 [cs.LG]"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813659"},{"key":"e_1_3_2_1_40_1","unstructured":"Karan Malhotra. 2024. Setting Your Pet Rock Free. https:\/\/nousresearch.com\/setting-your-pet-rock-free\/."},{"key":"e_1_3_2_1_41_1","volume-title":"Riedmiller","author":"Mnih Volodymyr","year":"2013","unstructured":"Volodymyr Mnih, K. Kavukcuoglu, David Silver, Alex Graves, Ioannis Antonoglou, D. Wierstra, and Martin A. Riedmiller. 2013. Playing Atari with Deep Reinforcement Learning. ArXiv abs\/1312.5602 (Dec. 2013), 22."},{"key":"e_1_3_2_1_42_1","unstructured":"OASIS Network. 2025. Introducing WT3: The Trustless DeFi Trading Agent. https:\/\/oasis.net\/blog\/wt3-trustless-defi-trading-agent."},{"key":"e_1_3_2_1_43_1","unstructured":"Nils J. Nilsson. 1984. Shakey the robot. Technical Report Tech Note 323 DTIC Document No. ADA458918. SRI International Artificial Intelligence Center."},{"key":"e_1_3_2_1_44_1","volume-title":"Alpha Arena: Autonomous Agent Trading Competition. https:\/\/nof1.ai. Accessed: 2025-12-07.","year":"2025","unstructured":"Nof1 Labs. 2025. Alpha Arena: Autonomous Agent Trading Competition. https:\/\/nof1.ai. Accessed: 2025-12-07."},{"key":"e_1_3_2_1_45_1","unstructured":"NVIDIA. 2025. NVIDIA Confidential Computing. https:\/\/www.nvidia.com\/engb\/data-center\/solutions\/confidential-computing\/."},{"key":"e_1_3_2_1_46_1","unstructured":"Blog OpenAI. 2025. Introducing Operator | OpenAI. https:\/\/openai.com\/index\/introducing-operator\/."},{"key":"e_1_3_2_1_47_1","unstructured":"Payhawk. 2025. AI Office of the CFO - AI agents to help with finance operations | Payhawk. https:\/\/payhawk.com\/blog\/ai-office-of-the-cfo-brings-enterprise-ready-ai-to-finance-operations."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","unstructured":"Zhizhi Peng Taotao Wang Chonghe Zhao Guofu Liao Zibin Lin Yifeng Liu Bin Cao Long Shi Qing Yang and Shengli Zhang. 2025. A Survey of Zero-Knowledge Proof Based Verifiable Machine Learning. doi:10.48550\/arXiv.2502.18535 arXiv:2502.18535 [cs]","DOI":"10.48550\/arXiv.2502.18535"},{"key":"e_1_3_2_1_49_1","unstructured":"Phala Network. 2025. Build Trustworthy Fintech AI Agents With TEE. Phala Network. https:\/\/phala.com\/posts\/Build-Trustworthy-Fintech-AI-Agents-With-TEE Accessed: 2025-12-14."},{"key":"e_1_3_2_1_50_1","volume-title":"Proceedings of the 13th conference on USENIX Security Symposium -","volume":"13","author":"Sailer Reiner","year":"2004","unstructured":"Reiner Sailer, Xiaolan Zhang, Trent Jaeger, and Leendert van Doorn. 2004. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the 13th conference on USENIX Security Symposium - Volume 13 (SSYM'04). USENIX Association, USA, 16."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.2205.12742"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2501.09674"},{"key":"e_1_3_2_1_53_1","unstructured":"TACEO. 2025. Multiparty Notaries for zkTLS. https:\/\/blog.taceo.io\/mpc-zktls\/."},{"key":"e_1_3_2_1_54_1","unstructured":"ElizaOS Team. 2025. elizaOS\/eliza. https:\/\/github.com\/elizaOS\/eliza."},{"key":"e_1_3_2_1_55_1","unstructured":"TLSNotary Team. 2025. TLSNotary. https:\/\/tlsnotary.org\/."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00260"},{"key":"e_1_3_2_1_57_1","unstructured":"Vouched. 2025. MCP-I Documentation. https:\/\/modelcontextprotocol-identity.io\/."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-024-40231-1"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.5555\/3600270.3602070"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/365153.365168"},{"key":"e_1_3_2_1_61_1","volume-title":"Proceedings of the 41st International Conference on Machine Learning (ICML'24","volume":"53112","author":"Wolf Yotam","year":"2024","unstructured":"Yotam Wolf, Noam Wies, Oshri Avnery, Yoav Levine, and Amnon Shashua. 2024. Fundamental limitations of alignment in large language models. In Proceedings of the 41st International Conference on Machine Learning (ICML'24, Vol. 235). JMLR.org, Vienna, Austria, 53079\u201353112."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1017\/S0269888900008122"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978326"}],"event":{"name":"ASIA CCS '26: ACM Asia Conference on Computer and Communications Security","location":"Bangalore India","acronym":"ASIA CCS '26","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779208.3786259","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:40:44Z","timestamp":1780587644000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3779208.3786259"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":63,"alternative-id":["10.1145\/3779208.3786259","10.1145\/3779208"],"URL":"https:\/\/doi.org\/10.1145\/3779208.3786259","relation":{},"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"2026-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}