<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.baysal-asimov-safety-architecture" target="https://datatracker.ietf.org/doc/html/draft-baysal-asimov-safety-architecture-00">
   <front>
      <title>The Asimov Safety Architecture for Autonomous AI Agents</title>
      <author initials="H. I." surname="Baysal" fullname="Halil Ibrahim Baysal">
         <organization>h-network</organization>
      </author>
      <date month="March" day="27" year="2026" />
      <abstract>
	 <t>   This document specifies the Asimov Safety Architecture (ASA), a
   hierarchical dual-gate security framework for autonomous AI agents
   that operate with action execution capabilities.  The architecture
   combines a deterministic pattern denylist (Gate 1) with a stateless,
   context-free LLM judge (Gate 2), governed by a strict four-layer
   priority hierarchy.

   The key insight motivating this architecture is that a single LLM
   will not reliably self-enforce its own safety rules under adversarial
   pressure.  The ASA addresses this by architecturally separating the
   reasoning model from the judging model, ensuring the judge cannot be
   manipulated through conversational context.

   This specification defines the mandatory components, layer semantics,
   conflict resolution rules, inter-component trust model, and
   conformance requirements for implementations of the Asimov Safety
   Architecture.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-baysal-asimov-safety-architecture-00" />
   
</reference>
