Sovereign Execution Brokers: Enforcing Certificate-Bound Authority in Agentic Control Planes

The paper introduces the Sovereign Execution Broker (SEB), a runtime enforcement mechanism designed to ensure certificate-bound authority in autonomous agent infrastructures. SEB verifies mutation requests against certified execution contracts, manages identity scoping, and records decisions while separating proposal, admission, and execution phases. Its implementation is evaluated on AWS and Kubernetes, focusing on latency, revocation propagation, drift detection, and fault injection security, providing a robust framework for enhancing control in agentic workflows.