Provenact names "stale authorization" as the core failure of agent governance.

arXiv 2608.02764 targets agents that issue refunds, reserve inventory and move money, where budgets and approval status change between authorization and effect. The authors define policy-state serializability: committed effects must be explainable as authorized against the policy state immediately before they occur. A PostgreSQL prototype prevented stale authorizations that baselines passing policy state as ordinary request context missed, while holding delayed approvals without blocking unrelated work. If your agent touches money, read this one.