Commit-time control ensures consistent enterprise agent decisions
Authority at Commit Time: Reject-and-Rerun Semantics for Governed Agentic Systems
Distributed, Parallel, and Cluster Computing
Summary
Enterprise software agents work with changing rules and data, so just finishing a task doesn’t mean it’s officially accepted. The authors propose treating these agents like suggestion makers, with a central authority that checks their proposals before allowing changes. This system can reject outdated work and make the agents redo it to keep everything consistent. They tested their method on a real system and saw it successfully handled retries, partial updates, and prevented errors during coordination. However, the method doesn’t guarantee preventing all external issues or cover every possible real-world scenario.
What this means in practice
- •For enterprise software teams: Manage complex, asynchronous agent workflows with commit-time checks to ensure consistent updates despite changing policies and data.
- •For cloud service operators: Coordinate multi-process control over actions with fallback mechanisms that prevent stale or incorrect effect dispatch in distributed systems.
Authors
Jesus Salas
Abstract
Enterprise agents can compute for seconds or hours from a snapshot of policy, facts, task state, models, tools, and verifiers that may change before their work reaches the world. Completion alone therefore cannot confer institutional authority. We treat agents as proposal producers and a logically authoritative service as the sole authority for governed effects. At admission, the service compares a proposal's declared dependencies and component manifest with current state, applies the current verifier, and either reserves an idempotent effect for outbox dispatch or rejects affected stale work for resynchronization and rerun. Unaffected work may continue; lost responses resolve through canonical verdicts and receipts. The protocol composes optimistic concurrency control, semantic verification, and transactional outbox dispatch. Its distinctive read set includes normative authority and the model components that produced the proposal. We evaluate the design through an implemented governed-work lifecycle, a local authority, outbox, and reconciliation composition, and a multi-process fallback that delegates effect authority when complete mediation is unavailable. The local composition preserved selective fallback, unaffected work, retry and restart recovery, and package reconstruction. Complete mediation produced 18 authority commands and 18 external effects. Direct-credential arms produced eight additional effects, all detected with independent journal reconciliation and none falsely detected in the mediated control. The results support commit-time reject-and-rerun semantics and expose the clock, lease, ordering, and quorum obligations introduced by delegated admission. They do not establish prevention or reversal of bypass effects, external-journal completeness, production throughput, wide-area availability, semantic completeness, or verifier correctness.