PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents
PACE is a security framework for LLM agents that prevents them from causing harm by controlling tool usage. It intercepts every action through four phases: Propose, Cut & Certify (checking paths and capabilities), Enforce, and Finalize. This ensures that only actions with verified authority and safe execution paths are allowed to proceed.