AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Huang, Ken, Lambros, Kyriakos Rock, Huang, Jerry, Mehmood, Yasir, Atta, Hammad, Beck, Joshua, Narajala, Vineeth Sai, Baig, Muhammad Zeeshan, Haq, Muhammad Aziz Ul, Shahzad, Nadeem, Gupta, Bhavya
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912686464303104
author Huang, Ken
Lambros, Kyriakos Rock
Huang, Jerry
Mehmood, Yasir
Atta, Hammad
Beck, Joshua
Narajala, Vineeth Sai
Baig, Muhammad Zeeshan
Haq, Muhammad Aziz Ul
Shahzad, Nadeem
Gupta, Bhavya
author_facet Huang, Ken
Lambros, Kyriakos Rock
Huang, Jerry
Mehmood, Yasir
Atta, Hammad
Beck, Joshua
Narajala, Vineeth Sai
Baig, Muhammad Zeeshan
Haq, Muhammad Aziz Ul
Shahzad, Nadeem
Gupta, Bhavya
contents This paper introduces the Agentic AI Governance Assurance & Trust Engine (AAGATE), a Kubernetes-native control plane designed to address the unique security and governance challenges posed by autonomous, language-model-driven agents in production. Recognizing the limitations of traditional Application Security (AppSec) tooling for improvisational, machine-speed systems, AAGATE operationalizes the NIST AI Risk Management Framework (AI RMF). It integrates specialized security frameworks for each RMF function: the Agentic AI Threat Modeling MAESTRO framework for Map, a hybrid of OWASP's AIVSS and SEI's SSVC for Measure, and the Cloud Security Alliance's Agentic AI Red Teaming Guide for Manage. By incorporating a zero-trust service mesh, an explainable policy engine, behavioral analytics, and decentralized accountability hooks, AAGATE provides a continuous, verifiable governance solution for agentic AI, enabling safe, accountable, and scalable deployment. The framework is further extended with DIRF for digital identity rights, LPCI defenses for logic-layer injection, and QSAF monitors for cognitive degradation, ensuring governance spans systemic, adversarial, and ethical risks.
format Preprint
id arxiv_https___arxiv_org_abs_2510_25863
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI
Huang, Ken
Lambros, Kyriakos Rock
Huang, Jerry
Mehmood, Yasir
Atta, Hammad
Beck, Joshua
Narajala, Vineeth Sai
Baig, Muhammad Zeeshan
Haq, Muhammad Aziz Ul
Shahzad, Nadeem
Gupta, Bhavya
Cryptography and Security
Artificial Intelligence
This paper introduces the Agentic AI Governance Assurance & Trust Engine (AAGATE), a Kubernetes-native control plane designed to address the unique security and governance challenges posed by autonomous, language-model-driven agents in production. Recognizing the limitations of traditional Application Security (AppSec) tooling for improvisational, machine-speed systems, AAGATE operationalizes the NIST AI Risk Management Framework (AI RMF). It integrates specialized security frameworks for each RMF function: the Agentic AI Threat Modeling MAESTRO framework for Map, a hybrid of OWASP's AIVSS and SEI's SSVC for Measure, and the Cloud Security Alliance's Agentic AI Red Teaming Guide for Manage. By incorporating a zero-trust service mesh, an explainable policy engine, behavioral analytics, and decentralized accountability hooks, AAGATE provides a continuous, verifiable governance solution for agentic AI, enabling safe, accountable, and scalable deployment. The framework is further extended with DIRF for digital identity rights, LPCI defenses for logic-layer injection, and QSAF monitors for cognitive degradation, ensuring governance spans systemic, adversarial, and ethical risks.
title AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI
topic Cryptography and Security
Artificial Intelligence
url https://arxiv.org/abs/2510.25863