Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains
Researchers propose a blockchain-anchored agentic AI framework that attests SDLC security checks before release.
The paper proposes specialized agents for source integrity, dependency and SBOM analysis, CI auditing, artifact verification, and runtime policy checks. Each agent uses an LLM to interpret artifacts and produce structured reports, then records a cryptographically signed attestation on a permissioned blockchain. Smart contracts implement an agent registry, an immutable attestation log, and a release-policy module. A consortium certificate authority authenticates communication, and a use case shows an allow-or-block deployment decision.
- Agents cover source integrity, dependencies, SBOM, CI, artifacts, and runtime policy.
- Each agent signs an attestation recorded by permissioned blockchain smart contracts.
- A consortium certificate authority authenticates agent and node traffic.
- A use case shows a verifiable allow or block deployment decision.
From the original article
1 min read at arxiv.orgThis paper proposes a blockchain-backed agentic security framework designed to safeguard the complete software development lifecycle (SDLC) while also securing the agentic AI components responsible for monitoring it.
By Toqeer Ali Syed · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.