Separating action induction from execution authorization through distinct runtime roles is an effective approach to securing tool-augmented LLM agents

we propose SARA, which treats action induction and execution authorization as distinct runtime roles and separates action provenance from execution authority

http://arxiv.org/abs/2608.27146v1