Skip to content
Log in
Sponsored Artificial Intelligence: A Modern Approach, Global Edition Artificial Intelligence: A Modern Approach, Global Edition

From Guardrails to Compilers: A Constraint-First Runtime Substrate for Clinical AI Agents

Kaiping Zheng H. Chua S. W. Kheok K. Ngiam Marcus Chun Jin Tan R. J. Walsh R. John Ke-Wang Yuan Head Senior Consultant Marcus Chun Jin
· 0 citations · 87 references

TL;DR

A constraint-first run-time that compiles every agent action, whether a tool call, a retrieval, a semantic operator, or a final recommendation, into a constrained, provenance-tracked query plan is sketched, and the open questions it raises for the data-management community are outlined.

Semantic Scholar
View source

Similar papers

Review Open access Sep 2026

From Prompt to Provenance: BloClaw, a Capability-Gated AI4S Workstation for Auditable Computational Biology

This manuscript reports the system design, verified capability boundary, deterministic software artifacts, and a reproducible evaluation protocol for BloClaw, an AI4S workstation built around a simple principle: a scientific agent should know what it can do, show how it did it, and state what remains unvalidated.

Yao Qin, Jin-Hua Pang, Xiao-Ming Zhang · 0 citations
Review Open access Sep 2026

Policy-Constrained Runtime Defense for Tool-Using AI Agents in Enterprise API Ecosystems

A policy-constrained runtime enforcement framework that intercepts each proposed action before execution and classifies it as allow, deny, or escalate is presented, providing a structured basis for controlled evaluation of policy-constrained runtime enforcement across tool-using enterprise agents.

Swapneswar Ray · 0 citations
Preprint Sep 2026

MetaPermit: Scalable and Auditable Access Control for AI Agents via LLM-Inferred Meta-Attributes

The results show that MetaPermit produces 31% more consistent authorization decisions than LLM-driven authorization and outperforms the state-of-the-art defenses CaMeL and IPIGuard in both task completion and robustness to IPI attacks, with no malicious tool calls executed.

Han-Zhang Ma, Alicia Y. Hariri, Tian-Xiang Shen et al. · 0 citations
Preprint Aug 2026

Praxist: From Experimental Artifacts to Solution Lineages

Praxist is introduced, a lineage-centered generational system that converts reproducible artifacts and evaluator outcomes into a typed evidence graph of findings, lane-structured frontiers, and agendas, and Separating local artifact construction from cohort-level evidence synthesis lets later attempts inherit validated...

Jin Li, Ahmed Murtadha, Zhiying Wang et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Fail Loudly: An Auditable Runtime for Agentic Data Analysis

RADAR is an auditable runtime that makes an agent's analytical choices inspectable and supports their revision through execution feedback and rejects the operation or provides diagnostic feedback, allowing the agent to revise its choices before errors propagate.

Han-Xu Yan, Lang-Xuan Deng, Zheng-Le Wang et al. · 0 citations
Preprint Sep 2026

AGATE: Provenance-Based Runtime Defense Against Compositional Attacks on LLM Agents

LLM agents can produce harmful effects through sequences of ordinary operations. Judging such actions requires establishing both the authority that permits them and the origin of the data they carry. We present AGATE, an authorization and data-provenance gate at instrumented agent-harness boundaries. Operator declarati...

Xiao-Ru Zhang, Zhuo-Ran Cheng, Kai-Lin Liu et al. · 4 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.