← Back to all news
arXiv AI By Yisen Xi

Persona-Execution Separation: An Architecture Pattern for Evolving LLM Agents under Execution Audit

Read the original on arXiv AI →

The paper introduces Persona‑Execution Separation (PES), an architecture pattern that splits an LLM agent’s persona—its instructions, tone, and self‑presentation—from its execution—stateful, auditable work—by placing them in distinct trust domains linked through a governed contract bridge. PES allows the persona to evolve freely while keeping execution traceable, using mechanisms such as an approval matrix, data‑loss‑prevention exceptions, and continuous identity. A pilot implementation on a regulated digital‑employee platform demonstrated that PES successfully decouples persona drift from execution audit, preventing re‑validation or fingerprinting of hard‑asserted fields.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

Related stories

arXiv AI
Aug 24

ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents

ClawSentry is an open‑source, framework‑agnostic security supervision gateway designed to protect autonomous large language model (LLM) agents from progressive risks that can arise at four points in the agent control loop: skill admission, invocation‑time intent, execution‑time effect, and post‑action consequence. It introduces a multi‑tier decision engine—deterministic L1, rule‑anchored L2, and read‑only L3—alongside a First‑Use Skill Package Review (FSPR) and an Agent Harness Protocol (AHP) that applies a single policy across multiple agent runtimes without modifying their internals. Evaluation on SkillInject and the SkillsSafety benchmark shows that ClawSentry significantly reduces contextual adversarial skill risk (ASR) while maintaining high task success rates (TSR).

By Kai Wang, Zeming Wei, BiaoJie Zeng, Chang Jin, An Wang, Xiaokun Luan, Zhixiao Lin, Jingjing Qu, Xia Hu, Xingcheng Xu
llmsagentsmultimodalbenchmarks
More like this →
arXiv AI
Aug 24

Calibrating Criterion Revision in LLM Agents: Failure Modes and a Trace-Anchored Protocol

The paper introduces a framework for evaluating how large language model agents revise their success criteria after failures, defining five non‑compensatory conditions that must be met for a criterion revision to be considered valid. Using the CMB‑0.1 protocol, the authors test twelve cross‑domain scenarios across four system configurations, finding that no model trial satisfies all five conditions and highlighting specific failure modes such as zero‑state reconstruction and inadequate intervention sensitivity. They propose a more stringent trace‑anchored CMB‑0.4 protocol to better isolate and measure criterion revision in future studies.

By Guodong Xu
llmsagentsefficiency
More like this →