mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekay
9504b4c3ef
Sweep across the non-Tier-1 paper catalogue (Tier-1 owned by parallel
agent and excluded). All 113 processed papers already had luxcover
wired up; this commit fixes 14 build breakers and produces fresh
PDFs across the catalogue.
Fixes:
- lux-blockchain-scaling-laws: em-dash inside lstlisting -> --
- lux-corona-pq: stale \input pointing at 03-the-corona-scheme renamed
to 03-the-corona-scheme (file already renamed on disk)
- lux-lattice-cryptography-primer: same Corona->Corona rename
- lux-formal-verification-lean4: Lean source uses unicode (×, ∀, ∃, ∈,
∧, ∨, ∩, ≠, ⟨, ⟩, ·, ¬) inside lstlistings. Added a literate map
so listings render the math glyphs without UTF-8 fault.
- lux-id-did-specification: ✓/✗ in tabular replaced with \ding{51}
/ \ding{55} (pifont). Added pifont package.
- lux-ntt-simd-implementation: middle-dot in Go assembly listings;
added literate {·}{\textperiodcentered}.
- lux-ntt-transform: μ, ×, –, — in regular text (no T1 fontenc).
Replaced with $\mu$/$\times$/--/--- via unicode->latex sweep.
- lux-perpetuals-derivatives, lux-quantum-consensus,
lux-quasar-consensus, lux-tee-computing-mesh: same unicode->latex
sweep across body text. Also fixed broken math segment
`$L_{avg} = 10$\times$$` -> `$L_{avg} = 10\times$`.
- lux-zchain: emoji glyphs in roadmap table replaced with
parenthetical text.
- lux-triple-proof-consensus: dropped duplicate \usepackage{geometry}
that clashed with luxcover (geometry option clash).
- pq: defined missing \Rq macro.
PDFs rebuilt for the full Tier-2/3 set.
Excluded (Tier-1, parallel agent): lp-073-pulsar, lp-stricte2epq,
dag-evm-formal, lp-010-quasar-stm-{3,4}, lp-020-quasar-consensus,
lux-institutional-custody, lux-nist-mptc-submission, pqsafe-il5,
pq-rns, plus shared/ and lps/.
72 lines
3.2 KiB
TeX
72 lines
3.2 KiB
TeX
\section{Agent Capsules}
|
|
\label{sec:agents}
|
|
% ============================================================================
|
|
|
|
AI agents are first-class principals in the Capsule model. An agent gets its
|
|
own capsule with its own vault, identity, capabilities, and audit chain.
|
|
This is not a metaphor. An agent capsule has the same formal structure as a
|
|
human capsule.
|
|
|
|
\subsection{Agent as Sovereign Process}
|
|
|
|
\begin{definition}[Agent Capsule]\label{def:agent}
|
|
An \textbf{agent capsule} is a capsule $\mathcal{C}_a$ where the principal is
|
|
an autonomous software process. The agent's vault stores its memory (conversation
|
|
history, learned preferences, tool outputs), its capability set $\Gamma_a$
|
|
defines what APIs, data sources, and actions it may access, and its key policy
|
|
$\mathcal{P}_a$ defines who can inspect, modify, or terminate the agent.
|
|
\end{definition}
|
|
|
|
Key differences from human capsules:
|
|
|
|
\begin{itemize}[nosep]
|
|
\item \textbf{Delegated authority}: An agent's root key is typically generated
|
|
by a human principal and delegated via $\Gamma$ with explicit scope
|
|
and time bounds. The agent cannot escalate its own capabilities.
|
|
\item \textbf{Budget constraints}: $\mathcal{P}_a$ includes spending limits---
|
|
maximum LUX per transaction, per day, and per provider interaction.
|
|
Exceeded budgets halt the agent until the delegating principal
|
|
re-authorizes.
|
|
\item \textbf{Auditable memory}: Every write to the agent's vault is signed
|
|
and anchored. A human principal can audit the complete history of what
|
|
the agent stored, when, and in response to what input.
|
|
\item \textbf{Private inference}: For Class III agent operations, inference
|
|
runs on encrypted data via FHE or inside a TEE. The compute provider
|
|
sees neither the model weights nor the user's input.
|
|
\end{itemize}
|
|
|
|
\subsection{Agent Capability Model}
|
|
|
|
Agent capabilities are structured as a DAG of UCAN tokens:
|
|
|
|
\begin{verbatim}
|
|
human-root
|
|
+-- agent-root (time-bounded, budget-limited)
|
|
+-- read:vault/user-preferences
|
|
+-- write:vault/agent-memory
|
|
+-- call:api/weather (rate-limited)
|
|
+-- call:api/calendar (read-only)
|
|
+-- spend:lux/0.1-per-tx
|
|
\end{verbatim}
|
|
|
|
Each capability token is a signed JWT with fields: \texttt{iss} (delegator DID),
|
|
\texttt{aud} (agent DID), \texttt{att} (resource + action), \texttt{exp}
|
|
(expiration), \texttt{prf} (proof chain back to root). Revocation is a K-Chain
|
|
transaction.
|
|
|
|
\subsection{Agent Lifecycle}
|
|
|
|
\begin{enumerate}[nosep]
|
|
\item \textbf{Spawn}: Human principal creates agent capsule, generates agent
|
|
keys, delegates capabilities, sets budget.
|
|
\item \textbf{Execute}: Agent reads from its vault, invokes tools within
|
|
$\Gamma_a$, writes results to its vault, anchors receipts.
|
|
\item \textbf{Inspect}: Human principal reads agent vault (using delegated
|
|
read capability on $\mathcal{C}_a$) to review memory and actions.
|
|
\item \textbf{Revoke}: Human principal revokes $\Gamma_a$ on K-Chain.
|
|
Agent can no longer invoke tools or write to its vault. Vault contents
|
|
remain readable for audit.
|
|
\end{enumerate}
|
|
|
|
% ============================================================================
|