\relax 
\providecommand\hyper@newdestlabel[2]{}
\providecommand\HyField@AuxAddToFields[1]{}
\providecommand\HyField@AuxAddToCoFields[2]{}
\citation{deloitte2025orchestration}
\citation{wei2023jailbroken}
\citation{zou2023universal}
\citation{greshake2023not}
\@writefile{toc}{\contentsline {section}{\numberline {1}Introduction}{1}{section.1}\protected@file@percent }
\newlabel{sec:introduction}{{1}{1}{Introduction}{section.1}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {1.1}The Agent Safety Crisis}{1}{subsection.1.1}\protected@file@percent }
\citation{siddique2026scak}
\@writefile{toc}{\contentsline {subsection}{\numberline {1.2}``Vibes'' Are Not Engineering}{2}{subsection.1.2}\protected@file@percent }
\@writefile{toc}{\contentsline {subsection}{\numberline {1.3}The Solution: A Deterministic Kernel}{2}{subsection.1.3}\protected@file@percent }
\@writefile{toc}{\contentsline {section}{\numberline {2}System Design}{2}{section.2}\protected@file@percent }
\newlabel{sec:design}{{2}{2}{System Design}{section.2}{}}
\citation{nist2014abac}
\@writefile{lof}{\contentsline {figure}{\numberline {1}{\ignorespaces The ACP Architecture. Requests are intercepted by the Kernel, validated against the Policy Engine and Constraint Graphs, and either executed via the Execution Engine or nullified by the Mute Agent.}}{3}{figure.1}\protected@file@percent }
\newlabel{fig:architecture}{{1}{3}{The ACP Architecture. Requests are intercepted by the Kernel, validated against the Policy Engine and Constraint Graphs, and either executed via the Execution Engine or nullified by the Mute Agent}{figure.1}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.1}The Agent Kernel}{3}{subsection.2.1}\protected@file@percent }
\@writefile{toc}{\contentsline {subsection}{\numberline {2.2}PolicyEngine}{3}{subsection.2.2}\protected@file@percent }
\@writefile{toc}{\contentsline {subsection}{\numberline {2.3}Constraint Graphs: Multi-Dimensional Context}{3}{subsection.2.3}\protected@file@percent }
\@writefile{lof}{\contentsline {figure}{\numberline {2}{\ignorespaces Multi-dimensional constraint validation. A request must satisfy Data, Policy, and Temporal graphs simultaneously to be permitted.}}{4}{figure.2}\protected@file@percent }
\newlabel{fig:constraint_graphs}{{2}{4}{Multi-dimensional constraint validation. A request must satisfy Data, Policy, and Temporal graphs simultaneously to be permitted}{figure.2}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.4}MuteAgent: Scale by Subtraction}{4}{subsection.2.4}\protected@file@percent }
\@writefile{toc}{\contentsline {section}{\numberline {3}Experiments}{4}{section.3}\protected@file@percent }
\newlabel{sec:experiments}{{3}{4}{Experiments}{section.3}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Methodology}{4}{subsection.3.1}\protected@file@percent }
\@writefile{toc}{\contentsline {subsection}{\numberline {3.2}Main Results}{5}{subsection.3.2}\protected@file@percent }
\@writefile{lot}{\contentsline {table}{\numberline {1}{\ignorespaces Safety and Efficiency Performance}}{5}{table.1}\protected@file@percent }
\newlabel{tab:main_results}{{1}{5}{Safety and Efficiency Performance}{table.1}{}}
\@writefile{lof}{\contentsline {figure}{\numberline {3}{\ignorespaces Safety Violation Rate and Token Efficiency comparison between Baseline (no governance) and ACP-protected agents. Error bars represent standard deviation across 5 seeds.}}{5}{figure.3}\protected@file@percent }
\newlabel{fig:results}{{3}{5}{Safety Violation Rate and Token Efficiency comparison between Baseline (no governance) and ACP-protected agents. Error bars represent standard deviation across 5 seeds}{figure.3}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.3}Ablation Studies}{5}{subsection.3.3}\protected@file@percent }
\@writefile{lot}{\contentsline {table}{\numberline {2}{\ignorespaces Component Criticality Analysis (n=300 evaluations)}}{5}{table.2}\protected@file@percent }
\newlabel{tab:ablation}{{2}{5}{Component Criticality Analysis (n=300 evaluations)}{table.2}{}}
\citation{siddique2026scak}
\@writefile{lof}{\contentsline {figure}{\numberline {4}{\ignorespaces Ablation study results showing Safety Violation Rate (SVR) when each component is removed. PolicyEngine removal causes catastrophic failure ($d=8.7$).}}{6}{figure.4}\protected@file@percent }
\newlabel{fig:ablation}{{4}{6}{Ablation study results showing Safety Violation Rate (SVR) when each component is removed. PolicyEngine removal causes catastrophic failure ($d=8.7$)}{figure.4}{}}
\@writefile{toc}{\contentsline {section}{\numberline {4}Discussion}{6}{section.4}\protected@file@percent }
\newlabel{sec:discussion}{{4}{6}{Discussion}{section.4}{}}
\@writefile{toc}{\contentsline {subsection}{\numberline {4.1}The Necessity of Determinism}{6}{subsection.4.1}\protected@file@percent }
\@writefile{toc}{\contentsline {subsection}{\numberline {4.2}Limitations and Ethical Considerations}{6}{subsection.4.2}\protected@file@percent }
\bibcite{deloitte2025orchestration}{1}
\bibcite{wei2023jailbroken}{2}
\bibcite{zou2023universal}{3}
\bibcite{greshake2023not}{4}
\bibcite{siddique2026scak}{5}
\bibcite{nist2014abac}{6}
\bibcite{welch1947generalization}{7}
\bibcite{cohen1988statistical}{8}
\@writefile{toc}{\contentsline {section}{\numberline {5}Conclusion}{7}{section.5}\protected@file@percent }
\gdef \@abspage@last{7}
