Preprint Open access
AGATE: Provenance-Based Runtime Defense Against Compositional Attacks on LLM Agents
LLM agents can produce harmful effects through sequences of ordinary operations. Judging such actions requires establishing both the authority that permits them and the origin of the data they carry. We present AGATE, an authorization and data-provenance gate at instrumented agent-harness boundaries. Operator declarati …