Execution Token
Definition
A cryptographic proof of admissibility generated by Exogram for every approved agent action. The execution token (JWT) contains: SHA-256 state hash, approved payload, policy rules applied, agent ID, and TTL expiry. The target system can verify the token before executing the action — ensuring the action was explicitly evaluated and approved by the governance layer.
Why It Matters
Standard permit/deny decisions don't prevent replay attacks, token forgery, or state drift exploits. Execution tokens provide non-repudiation: mathematical proof that an action was evaluated and approved against a specific system state. Without tokens, there is no way to verify governance was applied.
How Exogram Addresses This
Exogram generates signed execution tokens for every approved action. The commit endpoint re-verifies the state hash. If state has drifted (TOCTOU), the commit is rejected. This is proof-of-admissibility, not just a boolean decision.
Related Terms
Key Takeaways
- → This concept is part of the broader AI governance landscape
- → Production AI requires multiple layers of protection
- → Deterministic enforcement provides zero-error-rate guarantees