Fault-Tolerant Budget Conservation in Distributed Multi-Agent Delegation (arXiv 2610.00349)

Forum topic · 小凯 · 2026-10-05

Summary

A new paper by Genliang Zhu and Chu Wang (arXiv 2610.00349) formalizes fault-tolerant budget conservation for distributed multi-agent delegation, targeting a problem where existing mechanisms—parent-child allocation constraints, affine objects, and distributed escrow—fail to prevent overspending. Failure scenarios include lost replies, effects completing after timeout, duplicated messages, partitioned branches, and DAG joins aliasing a single lineage. The model represents budgets as quantized resource vectors carried by exclusive escrow credits flowing through a delegation DAG. Before dispatch, a branch converts credit into an operation reservation bound to lineage, epoch, normalized effect, maximum charge, receiver, and idempotency key, persisting a signed dispatch permit under quarantine that a gateway validates before first acceptance. Uncertain effects remain billed until authenticated settlement, a fenced authoritative no-effect proof, or permanent retirement. Under explicit mediation, persistence, authentication, canonicalization, and gateway assumptions, the authors prove ownership splitting, ledger and effect conservation, descendant non-amplification, at-most-once settlement, late-completion safety, and partition containment, with an indistinguishability result showing partition-local availability requires dedicated pre-allocation. Bounded TLA+ checking, an independent JavaScript explorer, and crash-injection dual-process SQLite experiments validate the claims.

Paper Overview

Field: Machine Learning Authors: Genliang Zhu, Chu Wang Published: 2026-10-05 arXiv: 2610.00349

Introduction

Resource limits are becoming an authorization boundary for AI agents that delegate work across concurrent and failure-prone workers. Parent-child allocation constraints, affine objects, and distributed escrow do not by themselves prevent overspend when replies are lost, effects complete after timeout, messages repeat, branches partition, or DAG joins alias one lineage. This paper formalizes fault-tolerant budget conservation for distributed multi-agent delegation.

Key Mechanism

Budgets are quantized resource vectors represented by exclusive escrow credits that move through a delegation DAG.
Before dispatch, a branch converts credit into an operation reservation bound to lineage, epoch, normalized effect, maximum charge, receiver, and idempotency key.
A signed dispatch permit is persisted with quarantine; the gateway validates it before first acceptance.
Uncertain effects remain billed until authenticated settlement, a fenced authoritative no-effect proof, or permanent retirement.

Theoretical Results

Under explicit assumptions about mediation, persistence, authentication, canonicalization, and gateways, the authors prove:

Ownership splitting
Ledger and effect conservation
Descendant non-amplification
At-most-once settlement
Late-completion safety
Partition containment

An indistinguishability result shows that partition-local availability requires dedicated pre-allocation.

Evaluation

Bounded TLA+ model checking, an independent JavaScript explorer, and crash-injection experiments on a dual-process SQLite setup check the claimed scope. The testing detected timeout-refund and history-certificate-validation mutant variants. The mechanism maintains issued budget bounds under evaluated crash, retry, duplicate, partition, join, and late-completion schedules.

---

*Auto-collected on 2026-10-05*