Technical Requirements for Agent Runtime Security (group standard, launched 2026-09-09)

Abstract

A group standard formally launched on 9 September 2026, proposed by the Cyber Security Association of China and drafted by Ant Group with research institutes, carriers and Internet companies. It focuses on what an agent actually did during execution, whether it deviated from the task, and how risk is remediated in time. Requirements span risk monitoring and control, risk detection and decision, central analysis, and performance and stability, running through the whole chain of user intent, agent planning, tool invocation, system execution and result delivery. Through layered detection and defence in depth, a single unauthorized call, an abnormal chain or a single intent deviation can each be identified, assessed and handled. It forms the runtime half of the "authenticate identity, read intent, guard runtime" baseline, complementing the identity and authorization framework launched the same day, and corresponds directly to the runtime governance duties of an agent gateway.