Anshuman Suri, Alina Oprea, Jacob Ginesin, Cristina Nita-Rotaru, Georgios Syros
We lifted 4 functions out of this paper's own repositories and ran 2 of them in a sandbox. "Ran" means the function executed on a synthesized input and returned a value. It is not a reproduction of the paper's results.
| Repository | Role | Ran |
|---|---|---|
| gsiros/saga | canonical | 2 of 4 |
| Function | Status | Where it lives |
|---|---|---|
| deserialize | Ran | gsiros/saga/saga/agent.py code served (permissive licence) · get_code("c5840fffdfb81725") |
| serialize | Ran | gsiros/saga/saga/agent.py code served (permissive licence) · get_code("cb05405286e7bc8c") |
| get_agent_material | Not yet run | gsiros/saga/saga/agent.py code served (permissive licence) · get_code("76d02f021a24d840") |
| get_agent_material | Not yet run | gsiros/saga/saga/attack_models/adversaries/A1.py code served (permissive licence) · get_code("76691dc152bb8469") |
Some links come from the archived Papers with Code dataset (CC BY-SA 4.0): attribution and licence.
Large Language Model (LLM)-based agents increasingly interact, collaborate, and delegate tasks to one another autonomously with minimal human interaction. Industry guidelines for agentic system governance emphasize the need for users to maintain comprehensive control over their agents, mitigating potential damage from malicious agents. Several proposed agentic system designs address agent identity, authorization, and delegation, but remain purely theoretical, without concrete implementation and evaluation. Most importantly, they do not provide user-controlled agent management. To address this gap, we propose SAGA, a scalable Security Architecture for Governing Agentic systems, that offers user oversight over their agents' lifecycle. In our design, users register their agents with a central entity, the Provider, that maintains agent contact information, user-defined access control policies, and helps agents enforce these policies on inter-agent communication. We introduce a cryptographic mechanism for deriving access control tokens, that offers fine-grained control over an agent's interaction with other agents, providing formal security guarantees. We evaluate SAGA on several agentic tasks, using agents in different geolocations, and multiple on-device and cloud LLMs, demonstrating minimal performance overhead with no impact on underlying task utility in a wide range of conditions. Our architecture enables secure and trustworthy deployment of autonomous agents, accelerating the responsible adoption of this technology in sensitive environments. 1
The same record, over MCP at https://syntology.ai/mcp:
get_harvested_code_for_paper("2504.21034")
get_code_for_paper("2504.21034")
have("2504.21034")
Connect an agent — have() is free.