paperSeptember 2026Unreviewed

CAPMAS: Capability-Based Delegation of Privileges in Multi-Agent Systems

Rasmus Moorits Veski, Rachid Guerraoui, David Froelicher

Abstract

Agentic systems require secure and efficient delegation of privileges across multiple collaborating agents. Existing approaches fall into two categories. Some propagate user identities directly to agents, obscuring accountability and creating persistent over-privilege risks that are amplified by the non-deterministic behaviour of AI agents. Others rely on continuous synchronization with a central Identity and Access Management (IAM) provider, introducing additional latency and communication over

Cite

@misc{veski2026capmas,
  title = {{CAPMAS: Capability-Based Delegation of Privileges in Multi-Agent Systems}},
  author = {Rasmus Moorits Veski and Rachid Guerraoui and David Froelicher},
  year = {2026},
  month = sep,
  eprint = {2609.06500},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2609.06500}
}