Review
Aug 2026
When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents
This work proposes SARA, which treats action induction and execution authorization as distinct runtime roles and separates action provenance from execution authority, and applies No-History-Promotion to prevent historical recurrence from laundering action origins into execution authority.
Xiao-Kun Guo, Zhen Xu, Dongdong Huo et al.
· 1 citation