9 papers
Binding Drift in Multi-Step Tool-Augmented Agents
Rahul Suresh Babu, Shashank Indukuri
Tool-augmented language-model agents execute multi-step workflows over external systems, resolving an entity once and then acting on it across subsequent steps. Prior work shows th…
Entity Binding Failures in Tool-Augmented Agents
Rahul Suresh Babu, Shashank Indukuri
Tool-augmented language-model agents are often evaluated by whether they select the correct tool, produce valid API arguments, and complete the requested task. However, an agent ma…
The Gate Is Only as Honest as Its Contracts: ContractGuard for the Contract Layer of Risk-Aware Causal Gating
Laxmipriya Ganesh Iyer, Rahul Suresh Babu
Risk-Aware Causal Gating (RACG) defends tool-augmented LLM agents against indirect prompt injection by removing dangerous tools from the agent's visible action space, so that even…
GIST-CMTF: Goal-State Inference for Causal Minimal Tool Filtering in LLM Agents
Rahul Suresh Babu, Rohit Shukla
Tool-augmented LLM agents rely on runtime filtering to decide which tools should be visible at each step. Causal Minimal Tool Filtering (CMTF) reduces tool-choice confusion by expo…
ToolMenuBench: Benchmarking Tool-Menu Filtering Strategies for Reliable and Efficient LLM Agents
Rahul Suresh Babu, Laxmipriya Ganesh Iyer
Tool-augmented large language model agents increasingly operate over large tool libraries, but existing evaluations often focus on whether a model can call a tool correctly rather…
Capability Minimization as a Safety Primitive: Risk-Aware Causal Gating for Least-Privilege LLM Agents
Laxmipriya Ganesh Iyer, Rahul Suresh Babu
Modern decision systems increasingly rely on learned components whose outputs may be confident yet wrong, exposing downstream actions to costly errors. We introduce Risk-Aware Caus…