Policy-Gated Zero-Trust Federated Learning: Identity-Bound Enrollment, Replay-Resistant Control, and Secure Coordination
This paper proposes and validates a policy-gated zero-trust architecture for federated learning that decouples network authentication from model influence by binding identities to signed tokens, enforcing strict enrollment leases with cryptographic nonces, and rigorously testing against 22 adversarial scenarios to ensure only authorized, fresh, and non-revoked participants can influence the global model.