The Stateful Isolation Law

Formal Contamination Bounds for Multi-Principal AI Systems


Catalogs 25+ demonstrated attacks including PROMPTPEEK (99% prompt reconstruction), LeftoverLocals (181 MB/query leakage), and Agentic Confused Deputy (82.4% inter-agent compromise). Defines the Stateful Isolation Law — a unified formal framework comprising a contamination functional parameterized by Rényi divergence, six enforceable clauses, and compliance tiers mapping to GDPR, EU AI Act, and FedRAMP.

Files

File Description
paper.pdf Full specification

Citation

DOI: 10.6084/m9.figshare.31272868

License

CC BY-NC-ND 4.0