Bibliography and source works¶
The papers distinguish the collection's source works from external literature. Source works establish what the author proposed. External references explain established concepts, methods, and limits; their inclusion does not validate the proposed systems or imply endorsement by their authors.
External literature¶
Hohfeld, Wesley Newcomb. “Some Fundamental Legal Conceptions as Applied in Judicial Reasoning.” The Yale Law Journal 23, no. 1 (November 1913): 16–59. DOI: 10.2307/785533. Journal record.
The collection adapts distinctions among jural relations to its institutional vocabulary. Their legal application depends on the person, system, and jurisdiction concerned. Yale describes Hohfeld's two-part contribution in its institutional account.
Saltzer, Jerome H., and Michael D. Schroeder. “The Protection of Information in Computer Systems.” Proceedings of the IEEE 63, no. 9 (September 1975): 1278–1308. DOI: 10.1109/PROC.1975.9939. Author-hosted text.
The protection principles provide context for complete mediation, least privilege, and separation of privilege. They constrain how an architecture should be assessed; they are not evidence that a named architecture satisfies them.
Lamport, Leslie. “Time, Clocks, and the Ordering of Events in a Distributed System.” Communications of the ACM 21, no. 7 (July 1978): 558–565. DOI: 10.1145/359545.359563. Author's publication record.
The paper supplies foundational context for event ordering in distributed systems. A causal ordering relation should not be confused with an empirical causal-effect estimate, a complete explanation of an actor's reasoning, or a guarantee that an external observation is correct.
Moreau, Luc, and Paolo Missier, editors. PROV-DM: The PROV Data Model. W3C Recommendation, 30 April 2013. Recommendation.
PROV-DM provides an established model for provenance involving entities, activities, agents, and their relations. Provenance can support explanation and assessment of a result. It does not independently establish the truth of every claim recorded in the provenance.
Birkholz, Henk; Dave Thaler; Michael Richardson; Ned Smith; and Wei Pan. Remote ATtestation procedureS (RATS) Architecture. RFC 9334, January 2023. DOI: 10.17487/RFC9334. RFC text.
The architecture distinguishes evidence, its appraisal, and the decision made by a relying party. It helps explain why attestation, trust, freshness, and authorization are related but separate matters. This collection does not claim RATS conformance or treat attestation as proof of an arbitrary business outcome.
Fielding, Roy T.; Mark Nottingham; and Julian Reschke. HTTP Semantics. RFC 9110, June 2022, §9.2.2, “Idempotent Methods.” DOI: 10.17487/RFC9110. RFC text.
The definition separates an operation's intended effect from auxiliary effects such as request logging. The collection uses that distinction in its glossary. An idempotent operation does not establish exactly-once delivery or make every repeated external action safe.
Hernán, Miguel A., and James M. Robins. Causal Inference: What If. Boca Raton: Chapman & Hall/CRC, 2020. Authors' book page and electronic edition.
The book provides methodological context for distinguishing observed association from a justified causal claim. The collection's work histories and provenance records do not replace assumptions about interventions, identification, confounding, and the scope of a causal study.
Gneiting, Tilmann, and Adrian E. Raftery. “Strictly Proper Scoring Rules, Prediction, and Estimation.” Journal of the American Statistical Association 102, no. 477 (March 2007): 359–378. DOI: 10.1198/016214506000001437. Author-hosted article.
The article provides established context for evaluating probabilistic forecasts and interpreting propriety under stated conditions. Those properties do not automatically establish the incentives of a composite reputation policy, nor do they measure the quality of an autonomous institution's decisions.
Authorization and interactive agents¶
Cutler, Joseph W.; Craig Disselkoen; Aaron Eline; Shaobo He; Kyle Headley; Michael Hicks; Kesha Hietala; Eleftherios Ioannidis; John Kastner; Anwar Mamat; Darin McAdams; Matt McCutchen; Neha Rungta; Emina Torlak; and Andrew Wells. “Cedar: A New Language for Expressive, Fast, Safe, and Analyzable Authorization (Extended Version).” arXiv:2403.04651, submitted 7 March 2024, revision 8 March 2024. Author-deposited manuscript and record.
The work separates policy evaluation, validation, and analysis and describes a Lean model and Rust implementation. Its results do not establish conformance of this collection's systems.
Lodderstedt, Torsten; John Bradley; Andrey Labunets; and Daniel Fett. Best Current Practice for OAuth 2.0 Security. RFC 9700, BCP 240, January 2025. DOI: 10.17487/RFC9700. RFC text.
The guidance covers threats and controls for delegated access. Possessing a credential does not establish unrestricted authority over the holder's resources.
Yao, Shunyu; Jeffrey Zhao; Dian Yu; Nan Du; Izhak Shafran; Karthik Narasimhan; and Yuan Cao. “ReAct: Synergizing Reasoning and Acting in Language Models.” arXiv:2210.03629, submitted 6 October 2022, revision 10 March 2023. Author-deposited manuscript and record.
Interleaved reasoning and action is a precedent for interactive agents. The collection does not infer independent runtime authority enforcement from the prompting method or its benchmark results.
Debenedetti, Edoardo; Jie Zhang; Mislav Balunović; Luca Beurer-Kellner; Marc Fischer; and Florian Tramèr. “AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.” arXiv:2406.13352, submitted 19 June 2024, revision 24 November 2024. Author-deposited manuscript and record.
The framework evaluates useful tasks and security properties when agents encounter untrusted tool data. Its published task and attack populations do not transfer a guarantee to another agent or environment.
Effects, recovery, and formal systems¶
Birrell, Andrew D., and Bruce Jay Nelson. “Implementing Remote Procedure Calls.” ACM Transactions on Computer Systems 2, no. 1 (February 1984): 39–59. Author's publication record.
The original design discusses invocation, communication, and failure semantics. The citation identifies that historical design rather than asserting that every modern transport has the same contract.
Saltzer, Jerome H.; David P. Reed; and David D. Clark. “End-to-End Arguments in System Design.” ACM Transactions on Computer Systems 2, no. 4 (November 1984): 277–288. DOI: 10.1145/357401.357402. Author-hosted article.
The article is a revised version of a 1981 conference paper. It examines where an application property must be established, including duplicate suppression, crash recovery, and acknowledgement.
Fowler, Martin. “Event Sourcing.” Author's architecture essay, 12 December 2005. Original essay.
The essay describes reconstructing application state from a sequence of changes and discusses the boundary with external systems during replay. It is an authored design explanation, not a universal recovery proof.
Temporal Technologies. “Temporal Workflow Execution overview” and “Activity Execution.” Maintained product documentation, examined 10 October 2026. Workflow execution; activity execution.
The documentation describes durable execution history, replay, and activity behavior. This collection makes no comparative performance claim and does not infer a unique external effect merely from workflow durability.
Lamport, Leslie. Specifying Systems: The TLA+ Language and Tools for Hardware and Software Engineers. Addison-Wesley, 2002. Author's book and accompanying material.
The distinction among specification, safety, liveness, fairness, and implementation applies to the finite model results reported in this collection. Checking a selected model is not acceptance of an arbitrary deployment.
Semantic representation and build provenance¶
Kellogg, Gregg; Pierre-Antoine Champin; and Dave Longley, editors. JSON-LD 1.1: A JSON-based Serialization for Linked Data. W3C Recommendation, 16 July 2020. Versioned recommendation.
The specification supplies an established semantic representation. It does not itself establish application understanding or permission to perform an operation.
SLSA contributors. “Provenance.” SLSA specification version 1.1, examined 10 October 2026. Versioned specification.
Version 1.1 is retained here as the comparison edition; the examined site identifies 1.2 as current. Provenance describes build origin and inputs. This publication's hash manifest is an artifact-identity mechanism, without a claimed SLSA security level or trusted-builder attestation.
Authored source corpus¶
Andrew Durden authored the research discussed in the sixteen public papers. Consult the public research map and editorial method for scope and evidence qualifications. Exact private document inventories are withheld.
Citing this edition¶
Use Andrew Durden as the author, Governed Autonomy as the collection title, publication edition 2026.10.7 (retained predecessor papers also identify 2026.10.6), the paper title, and the relevant section. Include the edition identifier when discussing a claim that could change after review. Repository citation metadata is supplied in CITATION.cff.
See Author for authorship, publication preparation, and review status.
Canonical representation references for the successor¶
Rundgren, Anders; Bradley Jordan; and Samuel Erdtman. JSON Canonicalization Scheme (JCS). RFC 8785, June 2020. RFC text.
JCS specifies a constrained JSON value language and deterministic serialization. Its numeric constraints and preservation of Unicode string data are part of that scope. This publication's independent pair-framing example is not JCS and claims no conformance.
Bormann, Carsten, and Paul Hoffman. Concise Binary Object Representation (CBOR). RFC 8949, December 2020. RFC text.
Sections 4.2.1–4.2.3 distinguish deterministic encoding choices, including map ordering. A protocol still needs to specify its admitted values and profile. Deterministic bytes alone do not establish authorization or cross-language semantic equivalence. Offline copies of these two public RFCs were consulted on 12 October 2026; their full text is not redistributed here.