It is argued that risk-free deployment must be grounded in the agent's trajectory: the recorded sequence of reasoning steps, tool invocations, and environmental observations, and the absence of adequacy metrics.
Abstract
LLM-based agents are rapidly moving from research prototypes into the core business processes of organizations, but these agents pose deployment risks to security, compliance, and functionality. In this article, we argue that risk-free deployment must be grounded in the agent's trajectory: the recorded sequence of reasoning steps, tool invocations, and environmental observations. Trajectories are available for any agent, and many failures are visible only in the trajectory. To make agents deployable and sustainable, we advocate agent testing and debugging as a systematic research direction for detecting and mitigating these risks. This article begins with the challenges of testing agents, including the oracle problem, non-determinism, trajectory validation, and the absence of adequacy metrics. We then turn to debugging agents, from automated failure attribution to repair and self-evolution. We distill these directions into a practical deployment-readiness checklist covering the full deployment lifecycle. Finally, we identify open problems, i.e., formal adequacy metrics, root-cause attribution over long-horizon trajectories, and the reliability of self-evolving agents, that the community must address to enable trustworthy agent deployment.
Through applied case studies in pharmaceutical discovery and financial systems, common design patterns that make agentic systems successful are analyzed, and practical mitigation strategies for failure modes are discussed, such as verification pipelines, fallback mechanisms, and human-in-the-loop supervision.
Grace Hui Yang, P. Venkit, Hooman Sedghamiz et al.· Proceedings of the 32nd ACM...· 0 citations
This work presents AHA, a falsifiable discovery loop that proposes a vulnerability hypothesis, constructs a falsifier, instantiates a valid attack, executes it in a sandboxed harness, reflects on the trajectory, and promotes confirmed findings into a Vulnerability Concept Graph (VCG), which provides an auditable artifa...
Cyber-capable AI agents combine language models with tools, memory, and execution environments to perform multi-step offensive-security tasks. Existing work separately measures cyber capability and catalogs attacks against agent components, but provides less guidance on containing a capable agent within the environment...
This work introduces AgentS4D, a sandboxed benchmark for lifecycle-wide runtime safety evaluation and evaluates all 20 combinations of four harnesses and five LLM backends, finding that the observed safety of an agent system varies with both its harness-LLM pairing and how risk is introduced.
Jiajun Zhou, Zhaoxuan Ke, Jihang Ye et al.· arXiv.org· 1 citation
An Information Flow Graph monitor is introduced that analyzes structural security regressions using control-flow and data-flow graph diffs alongside raw code diffs and suggests that untrained structural monitors provide a practical and auditable path toward democratizing deployment safety for organizations seeking trus...
Preeti Ravindra, Rahul Tiwari, Vincent Wolowski· arXiv.org· 1 citation· ⚡1
A four-dimensional Integration Friction Index is introduced that separates one-time engineering cost from recurring organisational, legal, and maintenance cost and shows why scope and budget enforcement cannot be delegated to system prompts.
Israt Moyeen Noumi, Tarannum Ahmed Nowshin, Md Mehedi Hasan Nipu et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.