Quota Delegation and Adversarial Checkpoint-Interval Design

Determine how quota semantics should interact with mandate delegation and how checkpoint-interval policy should be configured under adversarial suppression in the MANDATO governance proxy.

Background

MANDATO is presented as a system under construction whose specification tracks six unresolved design points. Among the explicitly identified points are the interaction between quota semantics and delegation, and the selection of checkpoint intervals when an adversarial operator may attempt to suppress records before external anchoring. These issues concern the operational semantics and tamper-evidence guarantees of the signed-mandate enforcement and hash-chained audit architecture.

References

Six open design points (APERTO-01–06) are tracked publicly in the specification, including the interaction between quota semantics and delegation, and checkpoint-interval policy under adversarial suppression.

— Mandato: Protocol-Level Enforcement of Digitally Signed Mandates on AI Agent Actions with Cryptographically Chained Audit Trails  (2608.14074 - Racioppi, 14 Aug 2026) in Section 6, “Implementation Status and Evaluation Plan,” subsection “Status”