What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents

Shawn Ray

Runtime guardrails act before irreversible tool calls, but their guarantees depend on what policy state is representable, what a judge observes, and whether intervention changes fu…