paperJuly 2026Unreviewed

Securing Multi-Tool AI Agent Chains With Dynamic, Real-Time Compositional Policies

Chris Schneider, Kriti Faujdar, Philipp Schoenegger, Ben Bariach

Abstract

Modern AI agent implementations such as frontier coding agents chain multiple tools at runtime that create a security surface that per-tool guardrails are unable to address, as individually permitted tools can violate organizational policies when composed. We propose the Dynamic Security Control Compositor (DSCC), a two-phase approach to compositional security for multi-tool agent chains. In Phase 1, at session checkout, a Most Restrictive Set (MRS) algorithm composes per-tool security policies

Cite

@misc{schneider2026securing,
  title = {{Securing Multi-Tool AI Agent Chains With Dynamic, Real-Time Compositional Policies}},
  author = {Chris Schneider and Kriti Faujdar and Philipp Schoenegger and Ben Bariach},
  year = {2026},
  month = jul,
  eprint = {2607.03423},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2607.03423}
}