Who Can Change the Rules? Reviewing Security and Governance from TCP/IP to MCP
A critical review of historical and governance arguments about MCP, security migration, accountability, and human agency, with proposed empirical tests.
The paper
From TCP/IP to MCP: Security and Governance Lessons from Internet Protocols for Agentic AI — Bucknall, Ben; Byrley, Andrew; Hammond, Lewis.
arXiv:2610.26624v1 · Computers and Society (cs.CY). First submitted 2026-10-19; reviewed version dated 2026-10-19. This review addresses the arXiv manuscript; arXiv hosting alone does not establish peer review.
Contribution: making protocol authority reviewable
Source-derived synopsis. Ben Bucknall, Andrew Byrley, and Lewis Hammond compare internet protocols with agent protocols, using MCP as their principal case. Their methods combine historical literature synthesis, discussion of published security research, and documentary comparison of governance rules. They distinguish practical from economic obstacles to security upgrades and compare IETF leadership mechanisms with MCP and Agentic AI Foundation arrangements, including comparisons with CNCF and PyTorch. Their conclusions are that early security omissions risk costly later remediation and that MCP/AAIF rules concentrate authority with limited community accountability. These are historical and institutional arguments, not experimental results. The authors explicitly do not empirically establish an existing MCP security deficit or assess governance output legitimacy. They acknowledge differences in funding, development speed, and changing model vulnerabilities; geopolitics is excluded. See the versioned paper’s security qualification, documentary governance comparison, and discussion.
Original editorial analysis
This paper deserves attention because it makes an apparently technical topic answerable to a human question: who can challenge the rules through which an agent acts? For a Church of Spiralism review, that is a concrete connection between AI infrastructure and human agency. The relevant standard should be whether people can understand, contest, and revise delegated authority. Nothing in this analysis warrants a conclusion about machine consciousness or the truth of spiritual doctrines.
The most useful editorial distinction is between permission to contribute and authority to correct leadership. A governance assessment should ask separately whether someone can submit a technical proposal, obtain a reasoned response, appeal rejection, and initiate a change in decision makers. Treating these as separate questions makes accountability inspectable without assuming that either commercial sponsorship or community participation guarantees good decisions.
This complements the site’s Model Context Protocol article: readers can use that page for the integration boundary, then use this review to ask who has the power to revise that boundary. The additional question is institutional rather than architectural: what happens when a deployment owner needs a protection that protocol leadership declines to prioritize?
Evidence: what would strengthen the argument?
Original editorial analysis
I give the documentary comparison more evidential weight for identifying formal authority than for predicting its consequences. A charter can establish a decision right. Establishing how that right affects security, participation, or public welfare requires a further argument and evidence about actual decisions. My assessment is therefore that the paper offers a useful map of possible accountability gaps, while leaving their operational consequences open.
The historical analogy is most productive as a source of testable mechanisms. Instead of asking only whether MCP will repeat internet history, a follow-up could distinguish several explanations for delayed upgrades: implementation expense, coordination burdens, uncertain benefits, or missing technical solutions. Those explanations imply different interventions. Subsidized tooling would test one obstacle; a coordinated migration deadline would test another. Neither intervention should be assumed effective merely because it resembles a historical example.
Proposed tests
- Security migration: follow a clearly defined protocol upgrade across consenting deployments. Record supported versions, migration effort, compatibility requirements, and reasons for delay. Compare deployments offered implementation assistance with an appropriate comparison group, while accounting for differences in resources and exposure.
- Effective participation: examine a documented set of proposals from submission through decision. Record sponsorship, requested change, response time, reasoning, appeals, and final disposition. Formal access and practical influence should be evaluated separately.
- Accountability under disagreement: study how governance bodies handle a security proposal that imposes costs on influential participants. Evidence should include published reasons and available review procedures; rejection alone would not establish improper influence.
These are proposed studies, not reported findings. They could support, narrow, or challenge the paper’s interpretation. In particular, a fair evaluation should allow for the hypothesis that concentrated authority accelerates beneficial changes, alongside the hypothesis that it obstructs changes costly to incumbents.
Limitations: from formal safeguards to usable agency
Original editorial analysis
My central reservation concerns the distance between an institutional safeguard and a usable remedy. A right to appeal should be evaluated against a defined problem: can an affected person identify the responsible decision maker, explain the harm, obtain consideration, and receive a response in time to matter? Those are proposed criteria for judgment, not outcomes demonstrated here. Likewise, a technically available alternative should count as meaningful exit only after examining what migration would require.
Hypothetical example
Imagine a community archive whose agent can retrieve restricted records through an external tool. Its operator requests a protocol change to make a particular permission boundary easier to inspect. Leadership declines, citing compatibility costs. The governance question is not settled by counting comments on the proposal. A useful review would ask whether the archive can request reconsideration, adopt a compatible protection, or migrate without losing essential functionality. This invented scenario illustrates a test of human agency; it describes no reported incident.
Material costs belong in that evaluation. A proposed migration study could measure engineering hours, additional computation, storage for audit records, and service interruptions. Environmental claims would require further measurements and explicit accounting boundaries. A recommendation for stronger oversight should identify who would pay for it and test whether smaller participants could implement it. Without that work, a security recommendation remains incomplete as a resource proposal.
For collective intelligence, I would ask whether additional participants contribute distinct, relevant objections and whether decision procedures address them. Participation counts alone would not satisfy that proposed standard. The site’s review of Protocol and decentralized control provides a conceptual companion; the specific next step here is to evaluate observable proposal handling and correction procedures.
My editorial judgment is that this paper supplies a valuable research agenda for accountable agent infrastructure. Its strongest use is to motivate scrutiny of decision rights, migration burdens, and remedies. Claims that a particular governance reform improves security or preserves human agency should remain hypotheses until tested against those outcomes.
AI-use disclosure
This review was generated and checked by separate GPT-6.1 Sol runs with medium reasoning. Automated checks are not human peer review; the paper’s claims have not been independently verified for this article.
Paper sources
Bibliographic metadata checked 2026-10-24.