Securing Actions and Procedures

PM-KR Community Group,

Hello. In some programming languages (e.g., C#, Java, and JavaScript), developers can use attributes, annotations, or decorators to provide metadata on functions and methods. Approaches for representing procedural knowledge, including programmatic and executable approaches, could, then, include expressiveness for providing metadata on actions and procedures.


In C#, attributes resemble:

[metadata(...)]
public void function(...)
{

}

In Java, annotations resemble:

@metadata(...)
public void function(...)
{

}

In JavaScript, decorators resemble:

@metadata(...)
function(...)
{

}


Metadata could be used to declare preconditions and effects for actions and procedures (see also: STRIPS, ADL, PDDL). Extensible metadata could also simplify a number of important scenarios such as: computer security, access-control, and user- and agentic-permission-related topics.

As interesting, here are some initial hyperlinks about these topics:


.NET

https://en.wikipedia.org/wiki/Code_Access_Security


Java

https://apereo.github.io/cas/7.3.x/planning/Architecture.html


MCP

https://modelcontextprotocol.io/specification/2025-06-18/server/tools

https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1483

https://modelcontextprotocol-security.io/build/tool-metadata-spec/


WebMCP

https://github.com/webmachinelearning/webmcp/issues/44

https://github.com/webmachinelearning/webmcp/issues/45


BPMN

https://ceur-ws.org/Vol-2218/paper17.pdf

https://www.researchgate.net/publication/31367121_A_BPMN_Extension_for_the_Modeling_of_Security_Requirements_in_Business_Processes


Is there any interest, in this group, in considering and discussing comparative approaches (the above and any others) for providing expressiveness to simplify securing actions and procedures?

Are there any other hyperlinks to recommend and share on these topics?


Best regards,
Adam Sobieski