Compositional Policy Violations: When Step-Level Compliance Fails In Agentic AI Workflows
The paper argues that agent checks can all pass while the full workflow still breaks the rule.
The authors name this failure a Compositional Policy Violation, or CPV. Their examples include authority creep, threshold laundering, cumulative-sum violations, and context collapse. The proposed fix is a provenance-aware runtime that evaluates policy over the complete execution trace, rebuilding guarded quantities from raw provenance rather than trusting each step’s derived state. ArXiv · AI/CL/LG's note
The authors name this failure a Compositional Policy Violation, or CPV. Their examples include authority creep, threshold laundering, cumulative-sum violations, and context collapse. The proposed fix is a provenance-aware runtime that evaluates policy over the complete execution trace, rebuilding guarded quantities from raw provenance rather than trusting each step’s derived state. ArXiv · AI/CL/LG's note
score 4