V. Hemamalini, Likhith Kumar Reddy Ponnapati, Aviv P Joji, Garv S Rathore
The rapid proliferation of digital educational credentials has intensified challenges related to credential fraud, privacy infringement, and reliance on centralized verification infrastructures. Conventional credential verification mechanisms depend on Public Key Infrastructure managed by centralized Certificate Authorities, resulting in single points of failure, limited scalability, and increased operational overhead. Although blockchain-based credentialing approaches introduce immutability and tamper resistance, such solutions often suffer from a privacy–transparency trade-off, as verification commonly requires exposing complete credential data or associated metadata on public ledgers. A privacy-preserving decentralized framework for Self-Sovereign Identity and Verifiable Credentials is presented to address these limitations. The proposed architecture combines distributed ledger-based trust anchoring with zero-knowledge cryptographic techniques to enable secure and confidential credential verification. Credential commitments are immutably anchored on a high-throughput consensus network, while verification is performed using Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge, enabling proof of credential validity without revealing underlying secrets or sensitive attributes. Verification is conducted without continuous involvement of the issuing authority, thereby eliminating centralized dependency and improving system availability. Experimental evaluation demonstrates that the framework supports sub-second proof generation and millisecond-level verification, while maintaining minimal on-chain storage and predictable operational costs. The results indicate that the proposed approach provides a scalable, efficient, and privacy-respecting solution for decentralized academic credential verification in modern digital identity ecosystems.
Traditional philanthropic frameworks often struggle with financial opacity and a relianceon centralized intermediaries, which frequently leads to an erosion of donor trust andsystemic mismanagement. This paper proposes a Decentralized Charity Fund ManagementSystem that mitigates these risks by encoding the complete donation lifecycle withinEthereum smart contracts, ensuring transparency and accountability by design. Utilizing agovernance model inspired by Decentralized Autonomous Organizations (DAOs), thesystem grants donors proportional voting rights based on their contributions, empoweringthem to collectively oversee fund disbursement. Capital is released to campaign organizersonly after a majority of donors approve specific withdrawal proposals, which must besupported by cryptographic expenditure proofs hosted on the InterPlanetary File System(IPFS). Additionally, the system features an autonomous refund mechanism that activatesif a campaign fails to reach its financial target by a set deadline, allowing for the directreclamation of funds without central intervention. Implementation via a React-baseddecentralized application (DApp) and validation through Hardhat-based testing confirmthat this frameowrk enforces all governance rules deterministically, effectively eliminatingthe need for centralized authority in the charitable ecosystem.
Y Liu, Zedan Zhao, Boyu Zhao, Na Wang · 6 authors
Decentralized identity (DID) is a key infrastructure for Web3, granting users sovereign control over their private identity data. While existing DID systems like FADID-TT (WWW'25) realize anonymity and traceability within a single domain, the Web3 ecosystem is a multiverse of independent domains like DeFi, GameFi, and DAO. This multi-domain reality presents critical issues for current DID solutions. First, most existing solutions are built on the monolithic committee architecture, facing severe scalability bottlenecks as the committee size grows. Second, most existing solutions cannot offer strong cross-domain anonymity, where frequent cross-domain interaction inevitably exposes the user's privacy. Third, existing methods for tracing the identities of malicious users are inefficient.
Surya Bahadur Kathayat, Magnus Svendsen, Brage Hagemann Brataas
Web3 applications strive to enable decentralization and user sovereignty, but often remain inaccessible to mainstream users due to complex onboarding and unfamiliar interaction paradigms. This study presents a Web2-inspired onboarding solution that integrates an embedded custodial wallet with OpenID Connect (OIDC) authentication via Vipps, a Norwegian bank-backed identity provider with over 4.6 million verified users. The proposed approach abstracts wallet management and removes the need for seed-phrase setup while introducing real-world identity assurance into the Web3 environment. A blockchain-based Battleship proof-of-concept was developed to demonstrate the approach, aiming to make Web3 interactions more intuitive and trustworthy. A mixed-method evaluation, combining usability testing and semi-structured interviews, revealed that integrating familiar login flows with verified identities improves usability, conceptual understanding, and both peer and ecosystem trust. The findings suggest that leveraging centralized identity providers can act as a pragmatic bridge between Web2 and Web3, potentially lowering initial onboarding barriers.
Cloud-based SaaS platforms now run essential services across finance, healthcare, and government sectors. Many of these systems include automated agents and decision engines that operate at high speed and scale. Identity and access governance therefore serves as a central control layer. Traditional IAM models depend on fixed roles, centralized authorization servers, and periodic reviews. Such structures struggle in distributed, multi-tenant environments that process millions of access requests each day. Prior studies address adaptive authentication, Zero Trust security, decentralized identity, anomaly detection, and cloud resilience. However, these solutions often function separately rather than within a unified framework. This paper introduces a Resilient Identity and Access Governance Architecture that integrates real time risk evaluation, distributed policy enforcement, lifecycle governance for human and machine identities, and fault tolerance in a single design. The framework defines measurable targets for availability, detection time, throughput, and policy propagation. Risk scoring occurs during live authorization decisions, and enforcement spans multiple nodes. The result is a scalable identity governance model suitable for complex SaaS ecosystems that require high availability and consistent control.
Peer-to-peer (P2P) payments facilitate rapid direct transactions but are frequently compromised by trust asymmetry, leading to substantial risks of non-delivery or non-payment. This study addresses these vulnerabilities by introducing a lightweight, deterministic escrow mechanism based on Ethereum smart contracts, specifically designed to bridge the regulatory gap in consumer protection. Unlike conventional escrow systems that rely on costly human intermediaries or complex decentralized autonomous organization (DAO) structures, the proposed "FairPay" model advances the state-of-the-art by offering a streamlined five-state lifecycle architecture comprising Created, Funded, WorkSubmitted, Released, and Refunded stages. The research prioritizes an analytical problem-solution flow, focusing on a state-machine design that enforces automated role-based restrictions. Methodological evaluation conducted on the Ethereum Sepolia testnet demonstrates a 100% functional success rate across all unit test scenarios. Furthermore, gas cost analysis reveals that the system is economically viable for granular transactions, with core operational functions maintaining a low execution overhead. Beyond operational success, the primary scholarly contribution lies in the design insight of balancing high cryptographic security with granular transaction accessibility, providing a scalable framework for the modern digital economy. However, the system currently assumes binary participant decisions for work verification, representing a transparency-oriented limitation in handling highly subjective service deliverables. Ultimately, this study demonstrates that algorithmic trust, mediated through a simplified state-machine, offers a more efficient and transparent alternative to existing high-complexity blockchain models, effectively resolving the tension between decentralized security and practical usability in P2P digital interactions.
The problem of verifying the authenticity of academic and professional credentials has been one of the biggest challenges. The conventional methods such as resumes, certificates, and online profiles can be easily faked, and there is no trusted system for their verification. Even though blockchain with its transparency and immutability seems an attractive solution, but implementing it on a large scale is very expensive, too slow, and even complicated. We introduce X GENESIS, a hybrid framework that integrates blockchain with AI, to solve these problems. X GENESIS, through Layer-2 scaling, batch NFT minting, off-chain storage to store the metadata and hash on chain (Commit-Store Pattern) with event driven architecture, enables credential issuance to be done in a cheaper cost and more efficient manner. So we have build a Decentralized application which mints the SBT's (Soulbound tokens) and NFT's (Non- Fungible token) as per the usage and type of credential. Our main focus is on academic credentials, so here the users can hold NFT's and can list them to others. Our application also aim that real talent should be valued and also for the recruiters perspective they can get the real talent they want without wasting there time on the false profiles. So to make our application more secure we have build AI agents, which checks for plagiarism, fraud detection, skill extraction, and recommendation insight provision, so trust is further enhanced. As a result$\mathbf{X}$GENESIS can achieve higher throughput and lower operational costs than traditional blockchain methods existing. This framework ensures that credentials are verifiable, tamper-proof, and built to last, which can be used in universities, hiring platforms, and government bodies that issue official certifications.
A zero-knowledge proximity proof certifies geometric nearness but carries no commitment to an application context. In stateful geo-content systems, where drops can share coordinates, policies evolve, and content has persistent identity, this gap can permit proof transfer between application objects unless extra operational invariants are maintained. We present a systems-security analysis of this deployment problem: a taxonomy of context-binding vulnerabilities, a formal off-circuit verification model for a transcript-adversary that holds a recorded proof but cannot obtain fresh coordinates, an assumption comparison across five binding strategy classes, and a concrete instantiation, Zairn-ZKP, that embeds drop identity, policy version, and session context as public circuit inputs. Compared with a strong off-circuit alternative based on stored-digest server checking, in-proof binding reduces operational invariants from four to two and adds no measurable proving cost relative to the sound geo-only baseline (-0.12 ms median in our setup). It also removes a correctness pitfall we identify empirically: a plausible off-circuit implementation that omits one server-side check remains vulnerable to cross-drop transfer. Measurements across six network conditions, seven venues in four countries, and an epoch-window simulation indicate that same-epoch transfer is realistic in dense urban deployments unless per-request nonces are maintained. Across five platforms and seven binding strategies, the results support a deployable methodology for reducing assumption surfaces in stateful ZK-backed verification workflows.
Location-based systems that combine encrypted geographic search with zero-knowledge proximity proofs typically treat the two phases as independent. Under an honest-but-curious server, this leaves an authorization provenance gap: once session state is purged, no forensic procedure can attribute a proof to its originating search session, because the proof's public inputs encode no session-identifying information. We formalize this gap as the search-authorized proof (SAP) security notion and show via a concrete audit re-association attack that proof-external mechanisms, where authorization evidence remains outside the proof, cannot prevent forensic misattribution when the same drop parameters recur across sessions. Search-Bound Proximity Proofs (SBPP) realize the SAP requirements without modifying the ZKP circuit: session nonce, Merkle-root result-set commitment, and signed receipt are decomposed into independently auditable components, enabling property-level fault isolation in offline audit. Experiments on synthetic and real-world data (110,776 OpenStreetMap POIs) show sub-millisecond absolute overhead on a 125 ms Groth16 baseline.
AIGP-Σ (AI Governance Protocol — Sigma) is a post-quantum cryptographic identity and authorization framework designed for autonomous AI agents operating in multi-agent and agentic payment environments. The protocol suite consists of five interconnected specifications: WP-01: Core Protocol — ML-DSA (CRYSTALS-Dilithium) based identity anchoring with STARK zero-knowledge proofs via RISC0, Bitcoin blockchain timestamping, and a cryptographic Kill Switch mechanism for emergency AI halt. WP-02: Kill Switch — Formal specification of the HALT proof system enabling verifiable, tamper-proof shutdown of AI agents without revealing operational state. WP-03: SSL for Agents — A mutual TLS-equivalent handshake protocol adapted for AI agent-to-agent communication, providing forward secrecy and post-quantum resistance. WP-04: Agentic Payments — Authorization layer for autonomous financial transactions executed by AI agents, with cryptographic scope limitation and audit trails. WP-05: Multi-Agent Orchestration — Trust propagation and delegation model for hierarchical multi-agent systems with verifiable credential chains.
Prof. S. P. Palaskar, Swaraj Chikhale, Shantanu Chimote, Rakshit Sinha · 6 authors
Abstract— Traditional identity systems rely on centralized authorities, which creates single points of failure and privacy risks. We propose IDentix, a decentralized identity framework leveraging blockchain and cryptography to secure user credentials while preserving privacy. In IDentix, each user owns a self-sovereign identity (SSI) represented by a public/private key pair and a Decentralized Identifier (DID) registered on an Ethereum smart contract. Trusted issuers (e.g. governments, banks) provide verifiable credentials (VCs) to users off-chain, and users present cryptographic proofs (such as zero-knowledge proofs) of specific attributes to verifiers. Verifiers authenticate credentials by checking issuer signatures against public keys on the blockchain and querying an immutable credential registry. Our prototype on the Ethereum Sepolia testnet demonstrates that this design yields tamper-evident identity proofs without exposing personal data. As shown in prior work [1], blockchain-based SSI greatly reduces risks of identity theft while giving users full control over their data. Keywords— Blockchain; decentralized identity; self-sovereign identity; verifiable credentials; decentralized identifiers; identity verification; Ethereum; zero-knowledge proof.
This study presents ZK-EHR, a decentralized access control framework designed to enable secure and privacy-preserving sharing of encrypted electronic health records across institutional boundaries. Unlike existing blockchain-based EHR access control systems that expose user identities on-chain or lack cryptographic privacy guarantees, ZK-EHR decouples authorization from identity disclosure by integrating zk-SNARK-based proofs with blockchain smart contracts to verify policy compliance without revealing user roles, affiliations, or credentials. The framework employs three differentiated actor roles—Patient (Data Owner), Doctor (Care Provider), and Researcher (Authorized Analyst)—with distinct policy-driven access workflows, a custom Groth16 zero-knowledge circuit for role-based constraint enforcement, and a modular architecture combining on-chain verification with off-chain encrypted storage via IPFS. Concrete design proposals for access revocation and replay attack prevention are introduced to address operational security requirements. The system was evaluated under multiple operational and adversarial scenarios. Experimental results indicate consistent on-chain verification latency (approximately 390 ms), reliable rejection of tampered submissions, and per-verification gas consumption of 216,631 gas. A comparative analysis against representative baseline systems demonstrates that ZK-EHR uniquely combines identity anonymity, on-chain cryptographic policy enforcement, and auditable encrypted record retrieval. These findings establish the feasibility of zk-SNARK-based access control for decentralized, verifiable, and privacy-aware EHR management.
Traditional digital card games rely on centralized servers, introducing catastrophic single points of failure, while decentralized Web3 alternatives fail to achieve real-time viability due to prohibitive block latency. This paper introduces Panoptes, an optimized, hybrid cryptographic engine that enforces low-latency decentralized consensus for peer-to-peer state channels. Assuming a highly hostile user-space environment, Panoptes treats the host application space and its underlying managed runtime as fundamentally compromised.A bifurcated architecture is detailed utilizing a hardened native airgap and direct OS-level memory mapping to process ciphertexts, bypassing standard and predictable libc allocators. To mitigate automated memory scrapers and frustrate asynchronous Direct Memory Access (DMA) attacks, Panoptes implements a multiplexed decoy memory topology (The Vault). This architecture relies on strict virtual page guarding, offline decryption, and temporal starvation via millisecond-scale execution windows. The protocol replaces commutative encryption with a deterministic Hand Commitment Payload, utilizing X25519 KEM, XOR- based Secret Sharing, and ChaCha20-Poly1305 to enforce Strict Zero-Trust Consensus.
Three model substitution scenarios were executed against a live inference endpoint with real HTTP requests, signed attestation JWTs, and OPA policy enforcement. In each scenario, every tested workload, artifact, or API identity control relevant to that scenario — workload JWT validation, health checks, gateway process continuity, artifact manifest integrity, API key authentication — remained valid while the model changed. In each scenario, a structural identity measurement based on activation geometry during a standard forward pass detected the substitution and the enforcement layer denied the request. Three substitutions were tested and three were detected, with zero false accepts in this run. The warm-path verification latency was 5.7–6.7 seconds on a single A100 with the model already loaded. The complete evidence chain — before/after measurement results, attestation claim summaries, OPA policy evaluations, and HTTP response codes — is published alongside this note as machine-readable JSON. This is a technical note, not a numbered entry in the research series. Supplementary Material. This note is accompanied by three machine-readable evidence files: cat3_results.json (structured results for all three scenarios, including the full before/after evidence chain for Scenario A with signed attestation claims, OPA policy evaluations, and HTTP response codes), manifest_authorized.json (SHA-256 build manifest for the enrolled model, 10 files, all verified), and manifest_substituted.json (SHA-256 build manifest for the substituted model, 10 files, all verified). All three files are available for download as supplementary files attached to this record. The Neural Network Identity Series — Mathematical foundations, empirical validation, and governance frameworks for verifying which model is running Newest addition: Technical Note: The Disappearing Window — AI Logprob Access Withdrawal and the Structural Verifiability of Frontier Model Contracts (DOI: 10.5281/zenodo.20362098) Paper 1: The δ-Gene: Inference-Time Physical Unclonable Functions from Architecture-Invariant Output Geometry (DOI: 10.5281/zenodo.18704275) Paper 2: Template-Based Endpoint Verification via Logprob Order-Statistic Geometry (DOI: 10.5281/zenodo.18776711) Paper 3: The Geometry of Model Theft: Distillation Forensics, Adversarial Erasure, and the Illusion of Spoofing (DOI: 10.5281/zenodo.18818608) Paper 4: Provenance Generalization and Verification Scaling for Neural Network Forensics (DOI: 10.5281/zenodo.18872071) Paper 5: Beneath the Character: The Structural Identity of Neural Networks — Mathematical Evidence for a Non-Narrative Layer of AI Identity (DOI: 10.5281/zenodo.18907292) Paper 6: Which Model Is Running?: Structural Identity as a Prerequisite for Trustworthy Zero-Knowledge Machine Learning (DOI: 10.5281/zenodo.19008116) Paper 7: The Deformation Laws of Neural Identity (DOI: 10.5281/zenodo.19055966) Paper 8: What Counts as Proof? — Admissible Evidence for Neural Network Identity Claims (DOI: 10.5281/zenodo.19058540) Paper 9: Composable Model Identity — Formal Hardening of Structural Attestations in the Enterprise Identity Stack (DOI: 10.5281/zenodo.19099911) Paper 10:Where Identity Comes From: Path Sensitivity and Endpoint Underdetermination in Neural Network Training (DOI: 10.5281/zenodo.19118807) Paper 11: Post-Hoc Disclosure Is Not Runtime Proof: Model Identity at Frontier Scale (DOI: 10.5281/zenodo.19216634) Paper 12: Family-Dependent Response to Reasoning Distillation Across Structural and Functional Identity Layers (DOI: 10.5281/zenodo.19298857) Paper 13: Safety-Alignment Removal as a Model-Identity Failure — Structural Evidence from Published Weight-Level Mutation Checkpoints (DOI: 10.5281/zenodo.19383019) Technical Note: Agent Identity Is Not Model Identity (DOI: 10.5281/zenodo.19240883) Technical Note: Gap Invariance: Why PPP Measurements Are Domain-Independent by Construction (DOI: 10.5281/zenodo.19275524) Technical Note: Measured Model Substitution Under Valid Agent Credentials (DOI: 10.5281/zenodo.19342848) Technical Note: Artifact Identity Is Not Runtime Identity — Trustfall Lite and the Boundary of File-Level Model Verification (DOI: 10.5281/zenodo.20019127) Formal Verification Stack for Neural Network Structural Identity (IT-PUF Coq Proofs) (DOI: 10.5281/zenodo.18930621) Copyright (c) 2026 Anthony Ray Coslett / Fall Risk AI, LLC. All Rights Reserved. Confidential and Proprietary. Patent Pending (Applications 63/982,893, 63/990,487, 63/996,680, 64/003,244).
The exponential proliferation of Internet of Things (IoT) devices presents critical challenges to traditional centralized identity and access management systems, which are plagued by issues of scalability, single points of failure, and significant privacy risks. While blockchain technology offers a promising decentralized alternative, its direct application is often hindered by low transaction throughput, high costs, and the computational limitations of IoT devices. This study addresses these challenges by proposing and formally evaluating HybID-AC, a novel hybrid architecture for decentralized identity and access management tailored for large-scale, heterogeneous IoT ecosystems. The methodology involves a dual-layer design that separates global trust anchoring from local execution. A highly scalable, feeless Directed Acyclic Graph (DAG) based distributed ledger serves as a public "anchor layer" for registering W3C standard Decentralized Identifiers (DIDs) and access policy hashes. All high-frequency access control operations are processed off-chain at the "edge layer" using the DIDComm v2 peer-to-peer protocol, Attribute-Based Access Control (ABAC) for fine-grained policy enforcement, and Zero-Knowledge Proofs (ZKP) to ensure privacy-preserving attribute verification. The results of our analytical evaluation demonstrate that the HybID-AC architecture achieves orders-of-magnitude improvements in latency and cost-efficiency compared to fully on-chain models, maintaining consistent performance as the network scales. Furthermore, we introduce an original probabilistic model that provides a quantitative metric for assessing the integral security risk of ABAC policies against attribute compromise. The study concludes that this hybrid approach effectively resolves the inherent trade-offs of blockchain in an IoT context, offering a robust, scalable, and interoperable framework that empowers devices with self-sovereign identity while ensuring security and privacy by design.
Public discourse plays a critical role in shaping trust, legitimacy, and governance dynamics within decentralized Web3 ecosystems. However, existing studies often examine Web3 discourse through isolated lenses such as sentiment or topic modeling, which limits their ability to capture how emotional expression and communicative purpose jointly convey strategic intent. This study proposes a three-stage decision analytics framework that transforms unstructured Web3 discourse into diagnostic signals by jointly modeling industry domain, emotional tone, and communicative purpose. The analysis draws on 10,840 user-generated posts collected from X, Reddit, YouTube, and the ENS DAO forum, using a human-in-the-loop annotation process combined with transformer-based text classification models. The framework is evaluated using a domain-adapted language model and a general-purpose baseline, with robustness assessed through five-fold cross-validation. The results indicate that curiosity and optimism frequently align with promotional intent in infrastructure and application-oriented domains, whereas skepticism and concern are more prevalent in governance-related discourse. These findings demonstrate that emotional tone and communicative intent operate as structured, decision-relevant signals rather than incidental sentiment. The proposed framework supports systematic, diagnostic monitoring of narrative dynamics as decision support, enabling organizations, platform operators, and governance stakeholders to identify emerging legitimacy risks and shifts in community trust within decentralized environments.
Authorization tokens in distributed systems are typically context-free: a cryptographically valid token carries no binding to the specific transaction for which it was issued. This enables reuse and cross-context presentation attacks that are undetectable at the cryptographic layer. In regulated financial infrastructure, cross-border payments, and autonomous agent systems, transaction-scoped enforcement is a hard requirement that existing standards leave unaddressed. We introduce the first formal security model for policy-bound transaction tokens. We define the syntax of a policy-bound transaction token scheme over a formal transaction context space and introduce three game-based security notions: transaction binding (TB), which simultaneously resists forgery and cross-context reuse; existential unforgeability under chosen-context attack (EUF-CCA); and unlinkability (UNL). We prove that TB strictly implies EUF-CCA, establish a formal separation between TB and UNL, and identify the inherent tension between unlinkability and auditability. We construct a scheme parameterized by any EUF-CMA-secure signature scheme and a random oracle, and prove that it achieves transaction binding security with a tight reduction requiring no rewinding. We then address the complementary privacy problem by formalizing zero-knowledge compliance privacy (ZK-CP) and constructing an enhanced scheme that augments transaction-binding tokens with a non-interactive zero-knowledge proof of policy compliance. We prove that the enhanced scheme simultaneously achieves TB security and ZK-CP, and show how it integrates with decentralized identity (DID) systems to enable fully privacy-preserving authorization where the verifier learns only whether compliance is satisfied. We give a concrete instantiation using Ed25519 and SHA-512, derive bit-security parameters, analyze performance costs, and discuss deployment considerations including regulatory alignment with PSD2, MiCA, DORA, the GENIUS Act, SEC token taxonomy, and FinCEN BSA requirements.
This paper investigates the strategic behavior of validators in blockchain systems utilizing the Proof-of-Stake (PoS) consensus mechanism through the application of game theory. A mathematical model of a non-cooperative game with complete information is proposed, where validators act as rational agents aiming to maximize their expected payoff by choosing between honest validation and malicious actions, specifically a double-spending attack. The model incorporates key economic parameters of the system: block and attestation rewards, transaction fees, operational costs, slashing penalties, and the probability of detecting protocol violations. Utility functions for two primary strategies – honest and attacking – are formalized, and conditions for the existence of Nash equilibrium, the central solution concept in game theory, are analyzed. The analysis demonstrates that under effective punishment mechanisms, the "all-honest" equilibrium is stable: an individual validator has no incentive to deviate from protocol-compliant behavior, as potential losses from penalties significantly outweigh any gains from a failed attack. Conversely, the "all-attackers" equilibrium, while theoretically possible, is practically unattainable due to the prohibitively high cost of acquiring a majority stake, rendering such a strategy economically infeasible. A quantitative example based on a hypothetical network of 1000 validators confirms these findings and highlights the critical importance of balancing incentives for honest behavior with strong disincentives for malicious actions. The study emphasizes the crucial role of economic security in PoS systems, where stability is ensured not only by technical safeguards but also by carefully designed economic mechanisms. The developed model can be used by blockchain protocol designers to calibrate consensus parameters, thereby promoting decentralization, resilience, and long-term network reliability. Future research can extend the model by incorporating heterogeneous validators, repeated games, and the analysis of other attack vectors. Keywords: Proof-of-Stake, validators, game theory, Nash equilibrium, economic security, slashing, double-spending attack, game model, blockchain, consensus.
Blockchain technology has been widely used in the field of Internet of Things, providing effective support for solving security challenges in Internet of Things systems. However, due to the immature development language and deployment platform, smart contracts are prone to various vulnerabilities. Considering the immutability of smart contracts, efficient vulnerability detection before deployment is particularly critical. The existing detection methods have two main limitations: they can only identify a limited number of specific vulnerabilities, resulting in low coverage; the implicit correlation information between vulnerability types is ignored. In order to solve these problems, this paper proposes a smart contract multi-vulnerability detection model CorrelaScan (correlation-aware smart contract analyzer) that integrates vulnerability type correlation awareness. The model is based on a multi-task learning architecture, including a shared layer and a specific task layer. The shared layer uses BERT to extract shared features, while the specific task layer uses BiGRU to learn specific task features for vulnerability detection and type classification. In addition, a vulnerability type embedding module is integrated in the task-specific layer. The module mines potential associations by calculating the similarity between smart contract opcodes and vulnerability types, thereby enhancing detection guidance and improving model performance. Experimental verification on public datasets shows that the model can simultaneously detect 10 types of vulnerabilities such as integer overflow or underflow, reentrancy and timestamp dependence, with an average F1 value of 85.22%. Its detection performance exceeds the current state-of-the-art methods.
Current AI deployment stacks authenticate agents, workloads, and credentials but do not verify which neural network is computing at inference time. Recent incidents — including the undisclosed use of an open-weight foundation model inside a commercial product, industrial-scale distillation campaigns, and emerging agent identity standards that authenticate software without authenticating models — show that this gap has practical consequences. Post-hoc disclosure resolved these incidents; runtime proof would have made the model identity question answerable at inference time. This paper asks whether runtime model identity is technically feasible at frontier scale. We present three results. First, we enrolled and verified five open-weight transformer models spanning 8 billion to 72.7 billion parameters across three families, with zero false acceptances in all pairwise comparisons and self-verification within the acceptance threshold for all models. A thermodynamic observable predicted by extreme value theory remained within two percent of its predicted value across the full range, with no statistically significant scale-dependent correction detected across more than two orders of magnitude in parameter count. Second, we tested structural separability on three declared-lineage distillation pairs spanning 8 billion to 70 billion parameters — each derivative sharing identical architecture with its base — and measured separations ranging from 2,858 to 4,583 times the acceptance threshold, increasing monotonically with model scale across two base-model families. All derivatives self-verified within the acceptance threshold. Third, we demonstrate a frontier-scale software attestation path — including signed JWT issuance and downstream policy consumption — and situate it within a previously formalized attestation architecture that composes with enterprise identity infrastructure, complementing rather than replacing current agent identity frameworks. These results demonstrate that runtime model identity is measurable and separable across the tested range of open-weight instruct-tuned transformers from 8B to 72.7B, with a frontier-validated software attestation path and an inherited route to stronger hardware-backed and proof-backed assurance. The Neural Network Identity Series — Mathematical foundations, empirical validation, and governance frameworks for verifying which model is running Newest addition: Technical Note: The Disappearing Window — AI Logprob Access Withdrawal and the Structural Verifiability of Frontier Model Contracts (DOI: 10.5281/zenodo.20362098) Paper 1: The δ-Gene: Inference-Time Physical Unclonable Functions from Architecture-Invariant Output Geometry (DOI: 10.5281/zenodo.18704275) Paper 2: Template-Based Endpoint Verification via Logprob Order-Statistic Geometry (DOI: 10.5281/zenodo.18776711) Paper 3: The Geometry of Model Theft: Distillation Forensics, Adversarial Erasure, and the Illusion of Spoofing (DOI: 10.5281/zenodo.18818608) Paper 4: Provenance Generalization and Verification Scaling for Neural Network Forensics (DOI: 10.5281/zenodo.18872071) Paper 5: Beneath the Character: The Structural Identity of Neural Networks — Mathematical Evidence for a Non-Narrative Layer of AI Identity (DOI: 10.5281/zenodo.18907292) Paper 6: Which Model Is Running?: Structural Identity as a Prerequisite for Trustworthy Zero-Knowledge Machine Learning (DOI: 10.5281/zenodo.19008116) Paper 7: The Deformation Laws of Neural Identity (DOI: 10.5281/zenodo.19055966) Paper 8: What Counts as Proof? — Admissible Evidence for Neural Network Identity Claims (DOI: 10.5281/zenodo.19058540) Paper 9: Composable Model Identity — Formal Hardening of Structural Attestations in the Enterprise Identity Stack (DOI: 10.5281/zenodo.19099911) Paper 10:Where Identity Comes From: Path Sensitivity and Endpoint Underdetermination in Neural Network Training (DOI: 10.5281/zenodo.19118807) Paper 11: Post-Hoc Disclosure Is Not Runtime Proof: Model Identity at Frontier Scale (DOI: 10.5281/zenodo.19216634) Paper 12: Family-Dependent Response to Reasoning Distillation Across Structural and Functional Identity Layers (DOI: 10.5281/zenodo.19298857) Paper 13: Safety-Alignment Removal as a Model-Identity Failure — Structural Evidence from Published Weight-Level Mutation Checkpoints (DOI: 10.5281/zenodo.19383019) Technical Note: Agent Identity Is Not Model Identity (DOI: 10.5281/zenodo.19240883) Technical Note: Gap Invariance: Why PPP Measurements Are Domain-Independent by Construction (DOI: 10.5281/zenodo.19275524) Technical Note: Measured Model Substitution Under Valid Agent Credentials (DOI: 10.5281/zenodo.19342848) Technical Note: Artifact Identity Is Not Runtime Identity — Trustfall Lite and the Boundary of File-Level Model Verification (DOI: 10.5281/zenodo.20019127) Formal Verification Stack for Neural Network Structural Identity (IT-PUF Coq Proofs) (DOI: 10.5281/zenodo.18930621) Copyright (c) 2026 Anthony Ray Coslett / Fall Risk AI, LLC. All Rights Reserved. Confidential and Proprietary. Patent Pending (Applications 63/982,893, 63/990,487, 63/996,680, 64/003,244).
Autonomous AI agents increasingly execute consequential actions against operational infrastructure. This paper presents AEGIS, a constitutional governance architecture that enforces deterministic policy at the agent action boundary — post-reasoning, pre-execution. AEGIS satisfies Anderson's reference monitor properties, aligns with all four functions of the NIST AI Risk Management Framework, and introduces a decentralized federation model for cross-organizational governance intelligence sharing. Submitted to IEEE Computer, Special Issue on AI Governance and Compliance.