From Neural Intent to Cryptographic Authorization: Governing Agentic Workflows
This work addresses the vulnerability of existing key management services to prompt injection attacks, stemming from their inability to verify alignment between AI agent runtime behavior and user intent. To mitigate this, the paper introduces Neural Cryptographic Service (NCS), the first framework integrating cryptographic authorization with neuro-symbolic control. In NCS, a neural planner generates an initial action plan, while a symbolic controller enforces parameter binding, fine-grained authorization, and tamper-proof execution for each tool invocation, leveraging offline digital signatures and hash chains. This approach enables auditable, deterministic runtime governance, reducing attack success rates to near zero on both AgentDojo and custom benchmarks while preserving high availability for legitimate tasks.