From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , , , , , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2026
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866918508806275072 |
|---|---|
| author | Wen, Xiangyu Zhao, Yuang Xu, Xiaoyu Chen, Lingjun Xu, Changran Chi, Shu Ding, Jianrong Li, Zeju Li, Haomin Jiang, Li Liu, Fangxin Xu, Qiang |
| author_facet | Wen, Xiangyu Zhao, Yuang Xu, Xiaoyu Chen, Lingjun Xu, Changran Chi, Shu Ding, Jianrong Li, Zeju Li, Haomin Jiang, Li Liu, Fangxin Xu, Qiang |
| contents | The transition of agentic AI from brittle prototypes to production systems is stalled by a pervasive crisis of craft. We suggest that the prevailing orchestration paradigm-delegating the system control loop to large language models and merely patching with heuristic guardrails-is the root cause of this fragility. Instead, we propose Arbiter-K, a Governance-First execution architecture that reconceptualizes the underlying model as a Probabilistic Processing Unit encapsulated by a deterministic, neuro-symbolic kernel. Arbiter-K implements a Semantic Instruction Set Architecture (ISA) to reify probabilistic messages into discrete instructions. This allows the kernel to maintain a Security Context Registry and construct an Instruction Dependency Graph at runtime, enabling active taint propagation based on the data-flow pedigree of each reasoning node. By leveraging this mechanism, Arbiter-K precisely interdicts unsafe trajectories at deterministic sinks (e.g., high-risk tool calls or unauthorized network egress) and enables autonomous execution correction and architectural rollback when security policies are triggered. Evaluations on OpenClaw and NanoBot demonstrate that Arbiter-K enforces security as a microarchitectural property, achieving 76% to 95% unsafe interception for a 92.79% absolute gain over native policies. The code is publicly available at https://github.com/cure-lab/ArbiterOS. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2604_18652 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers Wen, Xiangyu Zhao, Yuang Xu, Xiaoyu Chen, Lingjun Xu, Changran Chi, Shu Ding, Jianrong Li, Zeju Li, Haomin Jiang, Li Liu, Fangxin Xu, Qiang Cryptography and Security Artificial Intelligence The transition of agentic AI from brittle prototypes to production systems is stalled by a pervasive crisis of craft. We suggest that the prevailing orchestration paradigm-delegating the system control loop to large language models and merely patching with heuristic guardrails-is the root cause of this fragility. Instead, we propose Arbiter-K, a Governance-First execution architecture that reconceptualizes the underlying model as a Probabilistic Processing Unit encapsulated by a deterministic, neuro-symbolic kernel. Arbiter-K implements a Semantic Instruction Set Architecture (ISA) to reify probabilistic messages into discrete instructions. This allows the kernel to maintain a Security Context Registry and construct an Instruction Dependency Graph at runtime, enabling active taint propagation based on the data-flow pedigree of each reasoning node. By leveraging this mechanism, Arbiter-K precisely interdicts unsafe trajectories at deterministic sinks (e.g., high-risk tool calls or unauthorized network egress) and enables autonomous execution correction and architectural rollback when security policies are triggered. Evaluations on OpenClaw and NanoBot demonstrate that Arbiter-K enforces security as a microarchitectural property, achieving 76% to 95% unsafe interception for a 92.79% absolute gain over native policies. The code is publicly available at https://github.com/cure-lab/ArbiterOS. |
| title | From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2604.18652 |