arXiv AI

What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents

arXiv:2607. 22868v1 Announce Type: new Abstract: Runtime guardrails act before irreversible tool calls, but their guarantees depend on what policy state is representable, what a judge observes, and whether intervention changes future behavior.