CONTINUITY: Security-Context Contracts for Composable LLM Agent Controls

TL;DR - CONTINUITY is a framework for preserving security-critical context as LLM-agent actions pass through multiple controls and components. It uses verifiable contracts and authenticated authorization evidence to ensure external effects remain tied to valid principals, policies, provenance, and delegated tasks.

• Models components with assume-guarantee contracts and carries context through signed grants, transition receipts, typed releases, transformation witnesses, and execution permits.
• Formalizes “end-to-end consequence integrity,” requiring every realized external effect to have a valid, current authorization chain.
• Evaluates 32 fault classes across four application domains using a deterministic cross-layer fault-injection suite.
• Across 2,560 attack instances, the full configuration produced no harmful external effects while completing 700 benign tasks and escalating 200 ambiguous cases.