For production AI agents controlling infrastructure, enforce mutations through a separate broker that validates certificates at execution time, not just at decision time—this creates a mandatory checkpoint that agents cannot bypass.
This paper introduces Sovereign Execution Broker (SEB), a runtime enforcement system that sits between AI agents and infrastructure APIs to ensure mutations (changes) only happen when authorized by valid certificates.