PCM: A Proof-Carrying Message Protocol for Verifiable Multi-Agent Communication

Summary

The paper proposes Proof-Carrying Messages (PCM), a protocol in which each claim between AI agents carries evidence from an append-only Merkle log, with inclusion proofs signed by an attesting signer the agent cannot control. On a benchmark of 926 messages, 712 of them lies in 16 classes, PCM accepts 10 lies, all stale evidence (1.4%, 95% CI 0.8-2.6%), while plain A2A accepts all 712.

Related items

• InfoUnderstanding and Mitigating Role Spoofing in LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-119050: Agno PandasTools unsafe reflection allows code execution via prompt injectionSimilar attack · NVD/CVE Database
• Low3 Ways AI Agents Already Operate in Your BrowserSimilar attack · BleepingComputer
• InfoAdversa AI Launches Coding Agent Security Platform to Block Cyberattacks on AI Agents in Real TimeSimilar attack · Adversa AI Blog
• InfoSEAL: Sealed Queries for Local Sanitization against Indirect Prompt InjectionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)