Faramesh: A Protocol-Agnostic Execution Control Plane for Autonomous Agent Systems

TL;DR

Faramesh introduces a protocol-agnostic execution control system for autonomous agents, enabling deterministic authorization, auditability, and governance of actions to prevent unintended real-world side effects.

Contribution

It presents a novel, framework- and model-agnostic control plane with a non-bypassable authorization boundary and provenance logging for autonomous agent systems.

Findings

Enforces execution-time authorization for agent actions

Supports multi-agent and multi-tenant deployments

Provides auditability and deterministic replay capabilities

Abstract

Autonomous agent systems increasingly trigger real-world side effects: deploying infrastructure, modifying databases, moving money, and executing workflows. Yet most agent stacks provide no mandatory execution checkpoint where organizations can deterministically permit, deny, or defer an action before it changes reality. This paper introduces Faramesh, a protocol-agnostic execution control plane that enforces execution-time authorization for agent-driven actions via a non-bypassable Action Authorization Boundary (AAB). Faramesh canonicalizes agent intent into a Canonical Action Representation (CAR), evaluates actions deterministically against policy and state, and issues a decision artifact (PERMIT/DEFER/DENY) that executors must validate prior to execution. The system is designed to be framework- and model-agnostic, supports multi-agent and multi-tenant deployments, and remains independent of transport protocols (e.g., MCP). Faramesh further provides decision-centric, append-only provenance logging keyed by canonical action hashes, enabling auditability, verification, and deterministic replay without re-running agent reasoning. We show how these primitives yield enforceable, predictable governance for autonomous execution while avoiding hidden coupling to orchestration layers or observability-only approaches.