[2603.18829] Agent Control Protocol: Admission Control for Agent Actions

Computer Science > Cryptography and Security arXiv:2603.18829 (cs) [Submitted on 19 Mar 2026 (v1), last revised 20 Mar 2026 (this version, v2)] Title:Agent Control Protocol: Admission Control for Agent Actions Authors:Marcelo Fernandez (TraslaIA) View a PDF of the paper titled Agent Control Protocol: Admission Control for Agent Actions, by Marcelo Fernandez (TraslaIA) View PDF HTML (experimental) Abstract:Agent Control Protocol (ACP) is a formal technical specification for governance of autonomous agents in B2B institutional environments. ACP is the admission control layer between agent intent and system state mutation: before any agent action reaches execution, it must pass a cryptographic admission check that validates identity, capability scope, delegation chain, and policy compliance simultaneously. ACP defines the mechanisms of cryptographic identity, capability-based authorization, deterministic risk evaluation, verifiable chained delegation, transitive revocation, and immutable auditing that a system must implement for autonomous agents to operate under explicit institutional control. ACP operates as an additional layer on top of RBAC and Zero Trust, without replacing them. It is designed specifically for the problem that neither model solves: governing what an autonomous agent can do, under what conditions, with what limits, and with complete traceability for external auditing -- including across organizational boundaries. The v1.14 specification comprises 36 techn...