
Abstract As Artificial Intelligence systems transition from chat-based interfaces ("Co-Pilots") to autonomous execution engines ("Agents"), the traditional software-based security perimeter (RBAC, IAM, OAuth) becomes insufficient. The complexity of multi-agent coordination creates an N(N-1)/2 communication overhead, leading to "Policy Drift" where probabilistic models bypass logical constraints. This paper proposes The Citadel Protocol, a reference architecture that replaces probabilistic governance with deterministic hardware attestation. By binding agent identity to a Hardware Root of Trust (HRoT) and enforcing execution inside a Trusted Execution Environment (TEE), we demonstrate a method for eliminating "Mercurial Core" silent data corruption and ensuring non-repudiation in high-value autonomous transactions. Keywords: Agentic AI, Hardware Root of Trust, TEE, Sovereign Cloud, Attestation, Governance, Citadel Protocol. License: CC-BY-4.0
Agentic AI, Hardware Root of Trust, Trusted Execution Environment TEE, Sovereign Cloud, Attestation, AI Governance, Citadel Protocol, Split-Key Cryptography, Non-repudiation, Mercurial Core, Sentinel Architecture
Agentic AI, Hardware Root of Trust, Trusted Execution Environment TEE, Sovereign Cloud, Attestation, AI Governance, Citadel Protocol, Split-Key Cryptography, Non-repudiation, Mercurial Core, Sentinel Architecture
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
