Bonded Recourse for Smart-Contract Settlement of Compensable Agent Side Effects
cs.CR, cs.DC, cs.MA
Submitted: 2026-09-01
Updated: 2026-09-01
Comments: 9 pages, 3 figures, 8 tables. Accepted at BCCA 2026 (IEEE International Conference on Blockchain Computing and Applications)
Code: https://github.com/mpi-dsg/recourse
Project page: https://realityeth.github.io/docs/html/whitepaper.html
License: http://creativecommons.org/licenses/by/4.0/
The gist: Autonomous agent runtimes execute tool actions that mutate databases, repositories, and cloud services across organizational boundaries.
Terminology
Abstract
Autonomous agent runtimes execute tool actions that mutate databases, repositories, and cloud services across organizational boundaries. Authorization and local compensation cover pre-action admission and in-runtime rollback, but neither settles the residual harm left after a permitted action fails. We design Recourse, a smart-contract settlement protocol for compensable agent side effects that binds each admitted action to scope, recovery, evidence, payout, and collateral. Recourse separates ex ante eligibility from ex post objective settleability: typed receipts make objective residual claims computable under an optimistic-oracle challenge pattern, while subjective or incomplete claims route to ERC-792 arbitration or exclusion. We implement the contract suite, deploy it on Base Sepolia, build adapters against Postgres, Git, and cloud-compatible local sandboxes, and evaluate the system on a deterministic harness, sandbox traces, adversarial sweeps, and property-based fuzzing. Against authorization-only and local-compensation baselines, bonded coverage cuts uncompensated harm. The on-chain tier supplies neutral custody, public challenge, non-cooperative payout, and portable history under cross-organizational trust assumptions.
Sources
- Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agents
- TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commerce
- ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restore
- Quantifying Trust: Financial Risk Management for Trustworthy AI Agents
- Insured Agents: A Decentralized Trust Insurance Mechanism for Agentic Economy
- Agent Contracts: A Formal Framework for Resource-Bounded Autonomous AI Systems
- Augur: a decentralized oracle and prediction market platform
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Estimating the Social Cost of Corporate Data Breaches
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills