AI RESEARCH
Authorization Propagation in Multi-Agent AI Systems: Identity Governance as Infrastructure
arXiv CS.AI
•
ArXi:2605.05440v1 Announce Type: new The security discussion around agentic AI focuses heavily on prompt injection. This paper argues that multi-agent systems also create a distinct authorization problem: maintaining authorization invariants as non-human principals retrieve data, delegate tasks, and synthesize results across changing boundaries. We call this problem authorization propagation. It is not reducible to prompt injection and is not fully addressed by classical access-control models such as RBAC, ABAC, or Re.