4 papers
Revocation Is Not Complete at Receipt: An Executable Outcome Contract for Distributed Agent-Tool Gateways
Lifei Liu, Haoran Yu, Danping Zhang
Distributed agent workflows cache delegated authority at tool gateways. Revocation may be reported at issuer commit, transport acknowledgment, or receiver persistence, although non…
CreepScope: Measuring Post-Use Authorization Exposure in Tool-Using Agents
Haoran Yu, Lifei Liu, Danping Zhang +4
Authorization checks at individual tool calls do not reveal how long earlier authority remains usable. We study this lifecycle failure as privilege creep: a capability stays reacha…
Cost-Aware Post-Hoc Deferral Under Calibration and Shift: An Environmental AI Case Study
Haoran Yu, Lifei Liu, Danping Zhang
Choosing a deferral policy for a frozen classifier requires more than ranking uncertain cases: confidence may be miscalibrated, errors have unequal costs, reviewers can err, and de…
Beyond Lexical Metrics: Sentence-Embedding Detection of Reviewer Habituation in AI Code Review
Haoran Yu, Lifei Liu, Danping Zhang
Code review is a key quality checkpoint between AI-generated code and production. As AI coding agents submit pull requests at scale, it is unclear whether reviewers reduce scrutiny…