Prior art and the contribution of this collection¶
The collection's contribution is an institutional account of continuing purpose, authority, obligations, evidence, and recourse across changes in cognition and implementation. It combines separately developed doctrines and architectures, making their premises and unresolved composition questions explicit. It builds on established protection, distributed-systems, formal-methods, and provenance work. The presence of these ingredients does not establish priority for the combined account or superiority over another system.
This comparison uses the primary sources identified in the bibliography. Source records and document contents were checked on 10 October 2026. Standards are identified by their editions; evolving vendor documentation is dated by the examination. No external work is presented as an endorsement or validation of this collection.
Institutions, governance, and authorization¶
Hohfeld distinguishes legal positions that ordinary language can collapse into one word, such as a claim, privilege, power, or immunity. The institutional thesis adapts that distinction to persistent computational actors. The adaptation helps describe who can change a rule, who owes performance, and who can challenge an act. A technical classification does not create jurisdictional recognition or legal personhood. Hohfeld.
Saltzer and Schroeder's least privilege, complete mediation, and separation of privilege supply protection principles for the actual effect boundary. Cedar demonstrates an explicit policy language with evaluation, validation, and analysis as distinct functions; its published formal and implementation results belong to Cedar. OAuth's security guidance illustrates why delegated credentials need audience, privilege, and replay controls. These techniques address permission decisions. The institutional question here additionally concerns the continuing owner of a purpose and duty, and the effect of a grant's withdrawal on unfinished work. The extra scope requires additional evidence, rather than inheriting a security result from the underlying technique. Protection principles, Cedar, OAuth security.
ReAct studies interleaved reasoning and action in language models. AgentDojo evaluates agents using tools over untrusted data, including prompt-injection attacks and defenses. Those works establish important precedents for interactive agents and adversarial evaluation. This collection focuses on a different conjunction: model proposals must remain separate from current external authority, durable obligations, and independently observed consequences. A model that rejects malicious text is not thereby a completely mediated runtime; a mediated runtime can still choose a poor authorized action. Both useful task completion and prohibited effects need evaluation. ReAct, AgentDojo.
Provenance, evidence, and the subject of a claim¶
PROV-DM supplies a model of entities, activities, agents, and their provenance relations. RATS separates evidence, appraisal, and a relying party's decision. SLSA provenance identifies build inputs and execution details so consumers can assess artifact origin. These are useful foundations for attribution and inspection. They do not make every attributed statement correct or establish that a business objective was fulfilled. PROV-DM, RATS, SLSA.
The collection connects provenance to the continuing conditions under which a claim can govern action. An observation can remain authentic after becoming stale; an authorized attempt can occur without a completed effect; a completed unauthorized effect needs an incident account. The proposal is to preserve these different subjects through reuse and recovery. It requires evidence that the representation captures the relevant relationship and that the consumer retains its scope.
Distributed effects and durable execution¶
Birrell and Nelson's RPC work examines communication, call identity, retransmission, and failure semantics. Saltzer, Reed, and Clark's end-to-end argument includes duplicate suppression, crash recovery, and acknowledgement among its examples: lower-level mechanisms alone cannot necessarily establish the application property. HTTP's idempotence definition concerns the intended server effect of repeated identical requests; it is not a guarantee of exactly-once delivery. RPC, End-to-end argument, HTTP semantics.
Event sourcing retains changes from which application state can be reconstructed. Durable workflow systems such as Temporal retain execution history and resume computations after interruption. Workflow recovery, activity retry, destination-side deduplication, and the completion of an external objective remain different subjects. An external payment, publication, or deletion cannot be made uniquely effective solely by replaying an internal log. Event sourcing, Temporal.
The collection's continuity account concerns what a successor still owes and what it can establish about the outside world. The public exhibit makes a narrow instance executable: an obligation survives a process exit after the destination commits; the successor reconciles the witness before settlement. Its unique-effect result depends on the witness's atomic authority and deduplication contract. It introduces no new universal exactly-once result.
Formal methods, change control, and application meaning¶
Lamport's event ordering distinguishes causal ordering from assumptions about a universal physical clock. TLA+ describes state transitions, invariants, liveness, and their assumptions. A finite model check establishes a result about the selected model and bounds. Connecting it to real source, configuration, deployment, and observers requires a refinement or conformance argument. The three reported AD8 models retain exactly that boundary. Event ordering, TLA+, AD8 models.
JSON-LD provides an established representation of linked data and semantic identifiers. Such representation is useful but does not itself supply application understanding, complete dependency discovery, current authority, or effect verification. Semantic OS investigates maintaining application knowledge outside transient model context. CSSL and IC/POAR investigate how changes in meaning, premises, approved experience, and implementation remain connected. Their broader claims require the missing constructions and evaluation evidence identified in those papers. JSON-LD.
A comparison by responsibility¶
| Established foundation | What this collection adapts | Additional research obligation |
|---|---|---|
| Legal-position distinctions and protection principles | Separate initiative, permission, duty, amendment power, and recourse | Establish meaningful external custody and mediation, including administrator and founder powers |
| Policy languages and delegated-access security | Keep authorization outside learned competence and generated proposals | Preserve scope through every actual consumer, effect route, and recovery operation |
| Interactive agents and adversarial tool evaluation | Evaluate useful work together with authority and evidence | Measure indirect influence, ordinary performance, and prohibited consequences under a declared threat model |
| Provenance and attestation | Retain the subject, origin, limits, and lifetime of evidence | Establish factual adequacy and current applicability separately from authentic origin |
| RPC, idempotence, event histories, and durable workflows | Continue an obligation after an uncertain effect and a changed worker | Bind the specific external result to its duty under the destination's actual guarantees |
| Formal transition models and verification | State invariants, premises, and bounded results precisely | Demonstrate faithful implementation and complete relevant observation |
| Semantic representation and application models | Preserve supported meaning through application and implementation change | Measure understanding maintenance, compatibility, currentness, and end-user outcomes |
Original claims and how they could lose support¶
The central institutional synthesis is an authored theoretical contribution. Its value is tested by whether the distinctions produce better explanations, controllable behavior, and useful continuity in identified systems. Mere adoption of the vocabulary is insufficient. Freehold and Cuttlefish provide implemented subjects for investigation, with source and deployment evidence separated from behavioral assurance.
The family papers make additional, distinct proposals: consequence classifications that survive reuse; explicit premises for semantic change; qualified method substitution; governed transfer of experience; and prospective evaluation of uncertainty. Each retains its own version and proof obligations. Similar terminology does not establish interoperability among them.
Comparative claims about reliability, security, cost, human comprehension, or economic benefit remain unmeasured unless the paper identifies an acquired population, comparator, method, and results. A simpler workflow might achieve equal useful outcomes at lower cost; an explicit institutional model might omit a decisive dependency or introduce a confusing decision. Such results would narrow the contribution. This collection makes no exhaustive priority search, superiority claim, or independent peer-review claim. The claim register and research agenda identify what reviewers can inspect and what remains to be tested.