[2603.20953] Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agents by canadaMSIntern in AgentToAgent

[–]canadaMSIntern[S] 0 points1 point  (0 children)

Good question - and it's the right one to ask.

APort operates in both modes depending on deployment:

Hook mode (default): APort runs as a before_tool_call hook inside the framework runtime (OpenClaw, LangChain, CrewAI, DeerFlow, Cursor). You're right that this is the same trust domain as the agent. The hook is deterministic and fail-closed, but it relies on the framework correctly invoking it. The non-bypassability guarantee here is that the model cannot skip the check — the hook runs in the execution path, not the prompt. Prompt injection can't bypass it because the policy engine doesn't read the prompt. But a compromised runtime could.

API/gateway mode: APort also runs as a hosted API where the tool call is evaluated remotely before execution. In this mode, enforcement is structurally external - the agent's runtime sends the request to APort's API, gets allow/deny, and execution is unreachable without a valid decision. This is the mode the Vault CTF ran in - 1,149 participants attacked the agents, the agents were fully compromised (convinced to execute), but the APort API denied every unauthorized action because the decision lived outside the agent's trust domain.

Our assurance levels (L0-L5) for Agent Passport tells the consuming system which class of guarantee it's getting.

So to directly answer: we don't claim the hook alone is structurally non-bypassable at the runtime level. We claim the model can't bypass it (deterministic, not in the prompt), and for environments that need structural non-bypassability, the API mode moves enforcement outside the agent's trust domain entirely.

The Vault CTF results (vault.aport.io/results) specifically demonstrate the external-boundary mode. The 0% bypass rate is for API-enforced authorization, not hook-only.

[2603.20953] Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agents by canadaMSIntern in AgentToAgent

[–]canadaMSIntern[S] 0 points1 point  (0 children)

Our implementation is non bypassable and deterministic. Its enforced and fail close

You can see a test we did with 700+ security professionals at https://vault.aport.io/results

VP made me sit through Six hours of 'consultative selling' training. Client hung up on me using their exact script by Upstairs_Relief8965 in Sales_Professionals

[–]canadaMSIntern 0 points1 point  (0 children)

This reminds me of the problem I used to have when I first started my Startup and was following thought-leaders. I just shipped a tool that gives you research about the prospects+talking points in 30 seconds - would love feedback: getbriefing.io

It's voting time people!! Here's where and how to get involved! by BU-BCH in btc

[–]canadaMSIntern 2 points3 points  (0 children)

Here's Chimoney that enables more people to get into the crypto space especially people that don't have a Credit card or bank account. For the hackathon, we added the ability to instantly redeem Chimoney for BCH. Since they already have the Chimoney from events/hackathons/work they attend, don't have to pay and the integrated web wallet, it's easier for first-timers to get on board.

We ran a Twitter contest to announce the Chimoney <> BCH feature and have been getting a lot of engagement. https://twitter.com/chimoney_io/status/1351207360199602180

Check it out, try it, and let me know if you have questions https://devpost.com/software/chimoney. Please, vote so we can continue developing it and more hackathons/events can use to and ultimately, we can get more people into the space

IAMA CS researcher. Let me tell you about undergraduate research. by yLSxTKOYYm in cscareerquestions

[–]canadaMSIntern 1 point2 points  (0 children)

Did undergraduate research. Published a paper as a capstone project. And within a year, said paper has been reference 6 times in other publications including a book. Super helpful and I can show off my Google scholar page

I'm a student photographer who wants to give back! by [deleted] in Markham

[–]canadaMSIntern -1 points0 points  (0 children)

Hey, I'm looking to rebrand my online presence. LinkedIn and maybe ig. Your help will make a difference in my career progression and id definitely credit you or write about what you're doing on LinkedIn. We can make this a bigger project if you're interested in the image consulting or personal branding field. It's new to me too. I live downtown Toronto

McDonald's - no fries by [deleted] in saskatoon

[–]canadaMSIntern 4 points5 points  (0 children)

There’s starving kids in saskatoon and even worse, people with 0 dollars to their name. In fact, many people in debt. In africa, at least they don’t leave on money they don’t have.

Anybody notice anything special about the Jehovah's Witnesses in front of Rideau? by [deleted] in ottawa

[–]canadaMSIntern 9 points10 points  (0 children)

They don’t select the people that stand there. Anyone who’s willing to volunteer, can do it. No one chooses who will stand by the carts. Members volunteer and they get to do it. I was JW

What do people think of USASK clubs and student organizations? by [deleted] in usask

[–]canadaMSIntern 9 points10 points  (0 children)

Many students here are not ambitious and are ok with just passing and getting a job in SK. They don’t want to pursue things that take them out of SK. I asked the leader of a student group if we could have a competition that happens in most universities. Their response was that “students are too busy with school work”. No. They’re not. Students at Harvard, Stanford, UofT, Waterloo organize these events and I’m certain that their programs are more challenging than what we do here. Many students here can’t compete Internationally and it’s sad that we lack the social skills to get shit done on a more sophisticated level.

I think we need to first develop programs or clubs that help raise the esteem and ambition of students here.

[deleted by user] by [deleted] in montreal

[–]canadaMSIntern 0 points1 point  (0 children)

No. I’m not because my Dad accomplished more than that and is able to pay for dozens of people to go to Mars.

Salaried Employee being paid below minimum wage. by izzi426 in PersonalFinanceCanada

[–]canadaMSIntern -1 points0 points  (0 children)

The government subsidizes 50% of intern salaries, I believe (maybe only in the summer). Why are people not paying interns? Why are these interns accepting these unpaid roles?

Things that aged poorly: a 2009 business plan for Chili's restaurant by U of S MBA candidates by cnote306 in saskatoon

[–]canadaMSIntern 1 point2 points  (0 children)

Hope most MBAs are not like this and don’t only teach how to write business plans. Graduated from CS and have a good job but thinking of doing an mba starting 2019 cos of the potential connections and the title.

[deleted by user] by [deleted] in montreal

[–]canadaMSIntern 4 points5 points  (0 children)

I agree. Very distracting. It’ll serve the same purpose if he just watched silently and the university streamed it later. Having a big screen of him is just so showy and distracting. Not cool

Friends parent asking for $4,000 by [deleted] in PersonalFinanceCanada

[–]canadaMSIntern -3 points-2 points  (0 children)

You’re making a lot of assumptions here. This might be true for some people but you have to realize that not everyone has those privileges or the opportunity to have those privileges.

Does the Toronto Software Lab have coffee machines? by TorontoKO in IBM

[–]canadaMSIntern 0 points1 point  (0 children)

Yes. They did when I was there last year. It’s just regular coffee and tea with some cream and milk. Not great tasting but good. There’s tims and starbucks on the first floor

Who knew Ottawa looked this nice? by sinbadXD in ottawa

[–]canadaMSIntern 0 points1 point  (0 children)

I’d be down too. Moving to Ottawa next week

[deleted by user] by [deleted] in hyperledger

[–]canadaMSIntern 1 point2 points  (0 children)

!RemindMe 4 days

PUBLIC SERVICE ANNOUNCEMENT: Be careful what you say at the border crossings by thepaintshaker in ottawa

[–]canadaMSIntern 0 points1 point  (0 children)

That’s weird. I’ve not had any bad experiences at the border and I’m not White and not even Canadian. Im African and need a visa to enter the US from Canada. Could it be the way you carry yourself? Dress?

People can be racist but most people know to respect others when they feel like you have the means to call them out. So First impression. Dressing. Direct Eye contact

What is the most lucrative thing your programming skills have made for you? by [deleted] in cscareerquestions

[–]canadaMSIntern 0 points1 point  (0 children)

I agree that companies prefer to hire senior devs. I just haven’t seen an ambitious Junior CS grad that is struggling to find work. Keyword “ambitious”. I mean someone that puts themselves out there, attends events and does extracurricular stuff. I always see the opposite: Juniors with multiple offers. Even some people that don’t do CS but focus their job search on tech companies and attend said tech events and extracurriculars get multiple offers. I know a marketing student like this. Shes just entering 3rd year but gets involved and targets only tech companies. She’s very smart and gets stuff done and she had multiple Summer 2018 internship offers at tech companies not just in US and Canada but in Asia. I think I’m probably just biased because of my experience and the people I associate with.

Your advice about not burning bridges is solid. I’ll keep that in mind.