Blockchain secures AI agents protecting software development processes
Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains
Cryptography and SecurityArtificial Intelligence
Summary
Software development involves many steps that need protection from security problems. The paper by the authors presents a system where special AI agents watch over these steps and produce security reports. These agents use blockchain technology to record trustworthy proof of their checks, making sure their work can’t be faked or altered. This helps teams know if their software can be safely released, improving overall software safety.
What this means in practice
- •For software security teams: Use blockchain-attested AI agents to verify code integrity and secure deployment decisions in software pipelines.
- •For cloud infrastructure operators: Deploy decentralized agents that provide continuous security monitoring anchored on blockchain for cloud-hosted software supply chains.
Authors
Toqeer Ali Syed, Asadullah Abdullah Khan
Abstract
This paper proposes a blockchain-backed agentic security framework designed to safeguard the complete software development lifecycle (SDLC) while also securing the agentic AI components responsible for monitoring it. The framework coordinates a set of specialised security agents, covering source integrity, dependency and SBOM analysis, CI configura tion auditing, artifact verification, and runtime policy evaluation, each supported by a large language model (LLM) that interprets artefacts, reasons over tool outputs, and produces structured security reports. To ensure agent trustworthiness, every agent generates a cryptographically signed attestation that is recorded in a permissioned blockchain via smart contracts, including an agent registry, an immutable attestation log, and an enforceable release-policy module. Communication among agents and with blockchain nodes is secured using a consortium-operated certificate authority, ensuring authenticated and tamper-resistant interactions. A detailed use-case and sequence flow demonstrate how a source code security agent performs analysis, anchors its attestation on-chain, and triggers a verifiable allow/block deployment decision. The proposed framework of fers decentralised integrity transparent provenance, uninterrupted security assurance and a generalisable architecture to incorporate the agentic AI into the modern software supply chain security.