AID-Guard: Stateful Authorization for Delegated Agent Effects
Keeping AI agents from accidentally doing the same task twice
When AI agents use external tools, a single approved request can accidentally trigger multiple effects if something goes wrong in delivery or recovery. AID-Guard is a new system that tracks authorization through the entire lifecycle — from approval through retries and crashes — ensuring one approved action produces exactly one real-world effect. In testing with Stripe and Resend payment systems, the protocol prevented all 44 simulated attacks while allowing legitimate requests through.
As AI agents increasingly handle financial transactions, account changes, and other irreversible actions, duplicate effects from retry failures could charge customers twice, send duplicate emails, or create orphaned database records. AID-Guard closes a gap where traditional "request approval" stops working once delivery gets messy — a gap that exists in most current AI agent frameworks. This matters because real systems crash, timeouts happen, and networks lose responses; a robust authorization system needs to survive that chaos without creating accidental duplicates.