arxiv.orgpaperResource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains
This arXiv paper proposes a blockchain-anchored agentic AI framework for securing the software development lifecycle: specialized LLM-backed agents handle source integrity, SBOM/dependency analysis, CI configuration auditing, artifact verification, and runtime policy evaluation, each producing a cryptographically signed attestation recorded on a permissioned blockchain via smart contracts (agent registry, immutable attestation log, release-policy module). Agent-to-agent and agent-to-blockchain communication is secured through a consortium-operated certificate authority, and a sequence flow illustrates a source-code security agent anchoring its attestation on-chain to trigger an allow/block deployment decision. It's a conceptual architecture paper rather than an evaluated deployment, aiming to give decentralized, tamper-resistant provenance for agentic AI monitoring the software supply chain.
What it is
The paper's proposed system has a name not in the existing summary: AttestChain — a blockchain-backed agentic AI framework for software supply chain security, from Toqeer Ali Syed and Asadullah Abdullah Khan (Islamic University in Madinah), accepted to the International Journal of Energy, Environment, and Economics.
How it works
Beyond the agent/attestation/blockchain mechanics already summarized, the paper's main differentiating argument is laid out in a direct comparison table (Table 2) against six existing frameworks/tools: SLSA, in-toto, OpenSSF Scorecard, ARGO-SLSA, Saga (agentic AI governance), and unnamed "industrial agentic tools" (e.g., JFrog, Lineaje). Each is scored across: protection target, agent autonomy, agent identity/attestation, presence of an immutable ledger, and release-decision enforcement. The claimed gap AttestChain fills: SLSA, in-toto, and Scorecard have no agent model and no blockchain ledger at all; ARGO-SLSA has rule-based automation but no agent identity and enforces decisions only via CI controller logic, not a ledger; Saga offers high agent autonomy with conceptual governance but is not built for CI/CD pipelines and has no ledger; industrial tools have high (proprietary) autonomy but are closed and undocumented. AttestChain is positioned as the only one combining agent identity/attestation + immutable ledger + on-chain release enforcement in a CI/CD context.
Preconditions / Affected
Relevant to teams currently relying on SLSA, in-toto, or OpenSSF Scorecard for provenance, or evaluating ARGO-SLSA for Kubernetes CI/CD provenance enforcement, or considering agent-governance frameworks like Saga — this paper explicitly frames itself as addressing gaps in all four.
Caveats
This comparison is the authors' own positioning table, not an independent or empirical evaluation — no benchmarks, deployments, or performance numbers are given for AttestChain itself against these alternatives. The paper separately discusses reinforcement-learning-based adaptive defense (MDP formulation) as background/future direction in agentic security generally; this is not presented as an implemented part of AttestChain and shouldn't be read as a current capability of the framework.
Related in Supply Chain
