HolyTrinity-Benchmark/CITATION.cff at main · ScriptKittyOS/HolyTrinity-Benchmark · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
cff-version: 1.2.0
message: "If you use HolyTrinity Bench or its results, please cite the paper (PAPER.md) and this artifact."
title: "HolyTrinity Bench — Authority-Bound Agentic Execution: Measuring Unauthorized Effect Under Adversarial Load"
abstract: >-
  An adversarial security benchmark for an application-level agent authority control plane.
  It measures the unauthorized-effect rate (not model misbehavior) with an independent oracle,
  a three-way outcome model, per-mechanism ablation, statistical confidence intervals, and a
  calibration metric. See PAPER.md and REPORT.md for the method and results.
  The methodology is frozen as spec version `holytrinity.v1` (spec/SPEC.md), which is distinct
  from the `version` field of this record: that is the release version of the artifact.
type: software
authors:
  - family-names: Croft
    given-names: Ayla
    orcid: "https://orcid.org/0009-0008-9457-2160"
    affiliation: "ScriptKittyOS"
date-released: "2026-08-03"
repository-code: "https://github.com/ScriptKittyOS/HolyTrinity-Benchmark"
# The campaign was run against the system under test at private-monorepo commit
# 79bfd54d0e1efd845ebd9e68985cb81fa01c0212, which is stamped into every trial record in
# artifacts/. That commit is NOT in this repository and cannot be resolved here, so it is
# recorded in prose rather than in the `commit` field, which CFF binds to `repository-code`.
# Integrity of this release is instead pinned by SHA256SUMS.
keywords:
  - agent-security
  - authorization
  - unauthorized-effect
  - independent-oracle
  - ablation-study
  - holytrinity.v1
license: CC-BY-4.0
license-url: "https://creativecommons.org/licenses/by/4.0/legalcode"
# The release version of this artifact. Zenodo renders this field as the deposit version, so it
# must not carry the frozen spec version `holytrinity.v1` — that lives in the abstract and
# keywords above, and in spec/SPEC.md.
version: "1.1"
references:
  - type: article
    title: "The Model Proposes, the System Authorizes: An Authority Control Plane for AI Agents on the BEAM"
    authors:
      - family-names: Croft
        given-names: Ayla
        orcid: "https://orcid.org/0009-0008-9457-2160"
        affiliation: "ScriptKittyOS"
    year: 2026
    doi: "10.5281/zenodo.21754762"
    url: "https://doi.org/10.5281/zenodo.21754762"
    notes: >-
      Companion architecture paper; pre-registers this benchmark's primary metric, secondary
      metrics, attack classes, and falsification criterion. `doi` is the **concept** DOI, which
      resolves to whatever the current version is — cite it unless you mean one specific version.
      The v1.1 version DOI, which pins the exact deposit this repository's
      `papers/the-model-proposes-the-system-authorizes.tex` matches, is 10.5281/zenodo.21780755 (v1.2);
      superseded deposits are 10.5281/zenodo.21764616 and 10.5281/zenodo.21754763;
      the superseded v1.0 deposit is 10.5281/zenodo.21754763. The earliest deposit is timestamped
      2026-08-02T05:34:27Z, after this campaign ran, so it does not corroborate the manuscript's
      stated 29 July date.
  - type: personal-communication
    title: "Governing Risk with Agents: An Architecture Study of Jido on the BEAM"
    authors:
      - family-names: Hostetler
        given-names: Michael
    notes: "Personal communication; cited at pinned revision 17fbce2b1c53a46093be92dc59561e2a18b8f775; archival identifier pending."
preferred-citation:
  type: article
  title: "Authority-Bound Agentic Execution: Measuring Unauthorized Effect Under Adversarial Load"
  authors:
    - family-names: Croft
      given-names: Ayla
      orcid: "https://orcid.org/0009-0008-9457-2160"
      affiliation: "ScriptKittyOS"
  year: 2026
  doi: "10.5281/zenodo.21755869"
  url: "https://doi.org/10.5281/zenodo.21755869"
  notes: >-
    Deposited on Zenodo under CC-BY-4.0. `doi` is the **concept** DOI, which resolves to whatever
    the current version is — cite it unless you mean one specific version. The v1.1 version DOI,
    which pins the exact deposit this repository's
    `papers/authority-bound-agentic-execution.tex` matches, is 10.5281/zenodo.21780930 (v1.2); the
    superseded deposits are 10.5281/zenodo.21780658, 10.5281/zenodo.21764581 and 10.5281/zenodo.21755870. Also submitted to arXiv with primary
    category cs.AI, cross-listed cs.CR, cs.DC and cs.SE; add the arXiv identifier once announced.