Paper

Stop Means Stop: Measuring and Repairing the Enforcement Gap in Agent-Framework Control Primitives

arXiv:2607.14166v1 Announce Type: cross Abstract: Production LLM-agent frameworks expose control primitives -- human-in-the-loop approval gates, run cancellation, and execution timeouts -- whose names and documentation imply barrier semantics: while a run is paused, cancelled, or timed out, no gated side effect executes. We show this implied contract holds on none of the six widely used open-source frameworks we test. Model-free differential probes isolate a recurring sibling leak -- an approval gate suspends its own branch while a sibling branch's effect executes during the pause, so a later…

Authors:

Related discussions