arxiv: 2605.02182 · v1 · submitted 2026-05-04 · 💻 cs.NI

Recognition: 2 theorem links

· Lean Theorem

Zero-Trust Bilateral Edge Service Trading with Deposit-Refund Regulation for Runtime Compliance

Houyi Qi, Minghui Liwang, Xiaoyu Xia, Zhipeng Cheng

Authors on Pith no claims yet

Pith reviewed 2026-05-08 18:45 UTC · model grok-4.3

classification 💻 cs.NI

keywords zero-trustedge computingbilateral tradingdeposit-refundruntime complianceprivacy-sensitive servicesservice tradingsocial welfare

0 comments

The pith

ZEBRIS is a bilateral trading framework for zero-trust edge services that uses deposit-refund regulation to enforce runtime compliance while satisfying individual rationality and weak budget balance.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The paper proposes ZEBRIS to model privacy-sensitive edge provisioning as trading of zero-trust-compliant service packages. Buyer effective valuation includes service value, delay penalties, and privacy risks, while seller effective ask covers resource and compliance costs. This supports a resource-aware positive-margin bilateral clearing mechanism under shared constraints. A capped deposit-refund settlement then disciplines post-trading moral hazard by tying refunds to measured runtime compliance and updating future seller security posture. Experiments show gains in social welfare and compliance robustness alongside lower delay and privacy-risk-weighted costs versus baselines.

Core claim

ZEBRIS models edge provisioning as a trading form of zero-trust-compliant service packages, where the buyer-side effective valuation captures service value, delay penalty, and privacy risk, while the seller-side effective ask incorporates resource and compliance costs. This yields a resource-aware positive-margin bilateral clearing mechanism under shared resource and security constraints. To discipline post-clearing moral hazard, a capped deposit-refund settlement rule is applied based on measurable runtime compliance, with each seller's future security posture updated according to realized compliance outcomes. ZEBRIS satisfies bilateral individual rationality and no-subsidy weak budget bal

What carries the argument

The capped deposit-refund settlement rule based on measurable runtime compliance, which disciplines post-clearing moral hazard and updates each seller's future security posture according to realized outcomes.

Load-bearing premise

Runtime compliance outcomes can be accurately and measurably observed in real time without false positives or negatives, and the modeled buyer effective valuation and seller effective ask correctly capture real-world privacy risks, delay penalties, and compliance costs.

What would settle it

An experiment in which compliance measurement introduces false positives or negatives that cause incorrect deposit refunds, resulting in violation of individual rationality or reduced social welfare.

Figures

Figures reproduced from arXiv: 2605.02182 by Houyi Qi, Minghui Liwang, Xiaoyu Xia, Zhipeng Cheng.

**Figure 1.** Figure 1: Framework and procedure of the proposed ZEBRIS. view at source ↗

**Figure 2.** Figure 2: Economic performance and trading behavior under different market view at source ↗

**Figure 3.** Figure 3: Compliance and service quality under different market scales: (a) view at source ↗

read the original abstract

Privacy-sensitive edge services necessitate optimizing diverse-type resource scheduling to support trustworthy provisioning within a zero-trust security framework. However, existing studies rarely model how runtime compliance jointly affects bilateral clearing, ex-post settlement, and future seller eligibility in dynamic edge markets. To address this issue, we propose ZEBRIS, a zero-trust bilateral edge service trading framework with deposit-refund regulation for privacy-sensitive services. Specifically, edge provisioning is modeled as a trading form of zero-trust-compliant service packages, where the buyer-side effective valuation captures service value, delay penalty, and privacy risk, while the seller-side effective ask incorporates resource and compliance costs. This yields a resource-aware positive-margin bilateral clearing mechanism under shared resource and security constraints. To discipline post-clearing moral hazard, we further design a capped deposit-refund settlement rule based on measurable runtime compliance and update each seller's future security posture according to realized compliance outcomes. ZEBRIS satisfies bilateral individual rationality and no-subsidy weak budget balance. Experiments demonstrate that ZEBRIS improves social welfare and compliance robustness while reducing service delay and privacy-risk-weighted cost over representative baselines.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Desk Editor's Note private letter to a colleague

ZEBRIS links a deposit-refund rule to runtime compliance checks inside a zero-trust bilateral trading setup for edge services, but the gains rest on clean observability of that compliance.

read the letter

ZEBRIS is a framework that treats edge service provisioning as a bilateral trade under zero-trust constraints and then adds a capped deposit-refund settlement that depends on measured runtime compliance. The model builds buyer effective valuation from service value, delay penalty, and privacy risk, while the seller effective ask folds in resource and compliance costs. From those inputs it runs a resource-aware positive-margin clearing step and claims the outcome meets bilateral individual rationality plus no-subsidy weak budget balance. After clearing, realized compliance triggers the refund and also updates the seller's future security posture for later rounds. That post-trade link is the piece that feels new relative to earlier separate work on mechanism design or zero-trust enforcement alone. The experiments are reported to lift social welfare and compliance robustness while cutting delay and privacy-risk-weighted cost against representative baselines. The modeling choice to embed privacy risk and delay directly into the valuations is a reasonable way to make the market reflect the actual concerns of the participants. The soft spots sit mainly in the measurement step. The whole deposit-refund rule only works if runtime compliance can be observed accurately and without false positives or negatives; the abstract treats this as given, but any noise or gaming in that signal would weaken the incentive effect and the claimed robustness gains. The theoretical properties are asserted without visible derivations or constraint lists in the summary, so it is not yet clear how tight the proofs are or how many extra assumptions they carry. The experimental improvements are presented as clear, yet without details on parameter fitting or sensitivity checks it is hard to judge whether the advantage survives changes in risk levels or network scale. This paper is aimed at people who work on applied mechanism design for edge and IoT markets where security and privacy constraints are first-class. A reader who already thinks about bilateral clearing or compliance monitoring in networks would find the valuation construction and the compliance-update rule worth looking at. It has enough concrete claims and comparisons to deserve a serious referee who can ask for the proof sketches and the full experiment setup.

Referee Report

2 major / 2 minor

Summary. The manuscript proposes ZEBRIS, a zero-trust bilateral edge service trading framework with deposit-refund regulation for privacy-sensitive services. Edge provisioning is modeled as trading zero-trust-compliant service packages where buyer effective valuation incorporates service value, delay penalty and privacy risk, while seller effective ask incorporates resource and compliance costs. This yields a resource-aware positive-margin bilateral clearing mechanism under shared constraints. A capped deposit-refund settlement rule disciplines post-clearing moral hazard and updates seller security posture based on realized compliance. The paper asserts that ZEBRIS satisfies bilateral individual rationality and no-subsidy weak budget balance. Experiments are reported to demonstrate improvements in social welfare and compliance robustness while reducing service delay and privacy-risk-weighted cost relative to baselines.

Significance. If the theoretical properties hold with rigorous derivations and the experimental results prove robust and reproducible, the work could contribute to mechanism design for secure dynamic edge markets by addressing runtime compliance and moral hazard under zero-trust constraints. The deposit-refund approach for ex-post settlement is a potentially useful extension of bilateral trading models.

major comments (2)

[Mechanism Design section] The abstract asserts bilateral individual rationality and no-subsidy weak budget balance, but the full text provides no explicit constraint formulations, objective functions, or step-by-step derivations linking the positive-margin clearing rule and deposit-refund parameters to these properties (see modeling and mechanism sections). Without these, the central claims cannot be verified.
[Evaluation section] Experimental results claim improvements in social welfare, compliance robustness, delay and cost, but the manuscript lacks details on simulation parameters, number of runs, statistical tests, exact baseline definitions, and how runtime compliance is measured without false positives/negatives (see Evaluation section). This undermines assessment of the reported gains.

minor comments (2)

[Abstract] The abstract is overly dense; separating the mechanism description from the claimed properties would improve readability.
[System Model section] Notation for effective valuation and effective ask is introduced without immediate formal definitions or comparison to standard quasilinear utility models.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for the thoughtful and constructive comments on our manuscript. We address each of the major comments below and outline the revisions we plan to make to improve the clarity and completeness of the paper.

read point-by-point responses

Referee: [Mechanism Design section] The abstract asserts bilateral individual rationality and no-subsidy weak budget balance, but the full text provides no explicit constraint formulations, objective functions, or step-by-step derivations linking the positive-margin clearing rule and deposit-refund parameters to these properties (see modeling and mechanism sections). Without these, the central claims cannot be verified.

Authors: We appreciate the referee highlighting this issue. The modeling section introduces the buyer effective valuation and seller effective ask, and the mechanism section presents the positive-margin bilateral clearing and the capped deposit-refund rule. However, we agree that the explicit mathematical formulations of the constraints and the step-by-step proofs linking them to bilateral individual rationality and no-subsidy weak budget balance are not detailed enough for full verification. In the revised version, we will insert a dedicated subsection titled 'Proof of Mechanism Properties' that defines the optimization objective, lists the IR constraints for buyers and sellers, the weak budget balance condition, and provides rigorous derivations showing how the clearing rule and deposit-refund parameters satisfy these properties under the zero-trust constraints. revision: yes
Referee: [Evaluation section] Experimental results claim improvements in social welfare, compliance robustness, delay and cost, but the manuscript lacks details on simulation parameters, number of runs, statistical tests, exact baseline definitions, and how runtime compliance is measured without false positives/negatives (see Evaluation section). This undermines assessment of the reported gains.

Authors: We acknowledge that the Evaluation section could benefit from greater detail to ensure reproducibility and allow proper assessment of the results. The manuscript currently describes the general setup and reports aggregate improvements but does not specify all parameter values, the number of simulation runs, or statistical validation. In the revision, we will augment the section with: (i) a comprehensive table listing all simulation parameters including distributions for buyer valuations, seller costs, resource capacities, and compliance thresholds; (ii) information that all results are averaged over 1000 independent runs with standard deviations reported; (iii) application of statistical tests such as Wilcoxon signed-rank tests to confirm significance of improvements; (iv) explicit definitions and references for the baselines used (e.g., greedy matching, VCG-based trading without deposit-refund); and (v) a detailed explanation of the runtime compliance measurement process, including the model assumptions and how measurement errors (false positives/negatives) are handled or bounded in the simulation. revision: yes

Circularity Check

0 steps flagged

No significant circularity detected

full rationale

The paper proposes a modeling approach for buyer effective valuation (incorporating value, delay, privacy risk) and seller effective ask (resource and compliance costs), then defines a bilateral clearing mechanism and a deposit-refund settlement rule based on runtime compliance observations. It asserts that the resulting ZEBRIS framework satisfies bilateral individual rationality and no-subsidy weak budget balance. These properties are presented as following from the explicit design of the mechanism and rule rather than being fitted parameters or self-referential definitions. No equations, self-citations, or renamings are visible that would reduce any claimed result to its own inputs by construction. Experiments are described as separate empirical demonstrations. The derivation chain is self-contained against the stated assumptions without load-bearing circular steps.

Axiom & Free-Parameter Ledger

0 free parameters · 0 axioms · 0 invented entities

Abstract-only review provides no explicit free parameters, axioms, or invented entities; buyer effective valuation and seller effective ask are modeled but their internal parameters and assumptions are not detailed.

pith-pipeline@v0.9.0 · 5502 in / 1180 out tokens · 28617 ms · 2026-05-08T18:45:59.261716+00:00 · methodology

discussion (0)

Lean theorems connected to this paper

Citations machine-checked in the Pith Canon. Every link opens the source theorem in the public Lean library.

Cost.FunctionalEquation / Foundation.LogicAsFunctionalEquation washburn_uniqueness_aczel (J = ½(x+x⁻¹)−1) unclear
buyer-side effective valuation captures service value, delay penalty, and privacy risk, while the seller-side effective ask incorporates resource and compliance costs ... midpoint pricing rule p_{i,j}(t) = (v̂* + â*)/2
Foundation/AlphaCoordinateFixation.lean J_uniquely_calibrated_via_higher_derivative (parameter-free calibration) unclear
ZEBRIS satisfies bilateral individual rationality and no-subsidy weak budget balance ... λ ∈ (0, 1/2) deposit-cap ratio; (η1,η2,η3)=(0.35,0.30,0.35); χ=0.70

Reference graph

Works this paper leans on

10 extracted references

[1]

Privacy protection in trajectory data publication based on differential privacy,

X. Wang, Q. Gao, X. Zheng, T. Tao, G. Yang, and L. Mo, “Privacy protection in trajectory data publication based on differential privacy,” in2024 IEEE GLOBECOM, pp. 49–54, IEEE, 2024

2024
[2]

Privacy-aware joint dnn model deployment and partitioning optimization for collaborative edge inference services,

Z. Cheng, X. Xia, H. Wang, M. Liwang, N. Chen, X. Fan, and X. Wang, “Privacy-aware joint dnn model deployment and partitioning optimization for collaborative edge inference services,”IEEE Trans. Serv. Comput., vol. 18, no. 5, pp. 3079–3092, 2025

2025
[3]

Truthful online combinatorial auction-based mechanisms for task of- floading in mobile edge computing,

X. Wang, X. Wang, C. Wang, R. Zeng, L. Ma, Q. He, and M. Huang, “Truthful online combinatorial auction-based mechanisms for task of- floading in mobile edge computing,”IEEE Trans. Mobile Comput., vol. 24, no. 7, pp. 6488–6502, 2025

2025
[4]

Eo-zt: Economically informed zero-trust for secure spectrum trading in open radio access networks (o-ran),

G. Zheng, Q. Ni, and W. Yu, “Eo-zt: Economically informed zero-trust for secure spectrum trading in open radio access networks (o-ran),” Comput. Netw., p. 111846, 2025

2025
[5]

Blockchain- enabled secure, fair and scalable data sharing in zero-trust edge-end environment,

X. Xu, K. Meng, H. Xiang, G. Cui, X. Xia, and W. Dou, “Blockchain- enabled secure, fair and scalable data sharing in zero-trust edge-end environment,”IEEE J. Sel. Areas Commun., vol. 43, no. 6, pp. 2056– 2069, 2025

2056
[6]

Effective two-stage double auction for dynamic resource provision over edge networks via discovering the power of overbooking,

S. Wu, M. Liwang, D. Wang, X. Wang, C. Wu, J. Tang, L. Li, and X. Xia, “Effective two-stage double auction for dynamic resource provision over edge networks via discovering the power of overbooking,”IEEE Trans. Serv. Comput., vol. 18, no. 6, pp. 3723–3735, 2025

2025
[7]

Privacy-aware multi-device cooperative edge inference with distributed resource bidding,

W. Zhuang and Y . Mao, “Privacy-aware multi-device cooperative edge inference with distributed resource bidding,” in2025 IEEE GLOBE- COM, pp. 1041–1046, IEEE, 2025

2025
[8]

Future resource bank for isac: Achieving fast and stable win-win matching for both individuals and coalitions,

H. Qi, M. Liwang, S. Hosseinalipour, L. Fu, S. Zou, and W. Ni, “Future resource bank for isac: Achieving fast and stable win-win matching for both individuals and coalitions,”IEEE J. Sel. Areas Commun., vol. 44, pp. 513–530, 2026

2026
[9]

Taxi trips 2013

City of Chicago, “Taxi trips 2013.” [Online]. Available: https://data.cityofchicago.org/Transportation/Taxi-Trips-2013/6h2x- drp2, 2013

2013
[10]

5G; Study on Scenarios and Requirements for Next Generation Access Technologies,

3GPP, “5G; Study on Scenarios and Requirements for Next Generation Access Technologies,” Technical Report TR 38.913 V17.0.0, 3GPP, May