{"total":21,"rows":[{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2606.06240","title":"TOKI: A Bitemporal Operator Algebra for Contradiction Resolution in LLM-Agent Persistent Memory","created":"2026-06-04","cited_by_count":8,"area":"agents"},{"id":"2606.17182","title":"Verified Detection and Prevention of Concurrency Anomalies in Multi-Agent Large Language Model Systems","created":"2026-06-15","cited_by_count":8,"area":"agents"},{"id":"2607.03333","title":"SPORK: Self-Speculative Forking to Accelerate Agentic LLM Inference","created":"2026-07-03","cited_by_count":6,"area":"agents"},{"id":"2605.12105","title":"Autonomy and Agency in Agentic AI: Architectural Tactics for Regulated Contexts","created":"2026-05-12","cited_by_count":3,"area":"agents"},{"id":"2607.00041","title":"ATM: CID-Brokered Pre-Write Admission for Multi-Agent Code Co-Synthesis","created":"2026-06-29","cited_by_count":3,"area":"agents"},{"id":"2607.14166","title":"Stop Means Stop: Measuring and Repairing the Enforcement Gap in Agent-Framework Control Primitives","created":"2026-07-15","cited_by_count":3,"area":"agents"},{"id":"2608.13900","title":"Agentic Transaction: Towards ACID-Compliant Agent Systems","created":"2026-08-14","cited_by_count":3,"area":"agents"},{"id":"2608.21156","title":"Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligence","created":"2026-08-21","cited_by_count":3,"area":"agents"},{"id":"2609.16313","title":"Cognitive Admission Control: Risk-Conditioned Assurance for Consequential Actions in Agentic Distributed Systems","created":"2026-09-14","cited_by_count":3,"area":"agents"},{"id":"2609.29095","title":"Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agents","created":"2026-09-24","cited_by_count":3,"area":"agents"},{"id":"2608.23628","title":"Callability Is Not Operability: Controlled Interface Interventions for LLM Agents","created":"2026-08-23","cited_by_count":1,"area":"agents"},{"id":"2606.02483","title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","created":"2026-06-01","cited_by_count":0,"area":"agents"},{"id":"2608.02764","title":"Stateful Governance for Concurrent Agentic Systems","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2609.00275","title":"The Irreversibility Budget: Fleet-Level Risk Accounting and Admission Control for Agent Operating Systems","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.24077","title":"LeaseGuard: Incumbent-Preserving Admission Control for Privileged LLM Agents","created":"2026-09-21","cited_by_count":0,"area":"agents"},{"id":"2609.29522","title":"Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.31301","title":"Beyond Approved Actions: Runtime Validation of Persistent Outcomes in Agent Workflows","created":"2026-09-25","cited_by_count":0,"area":"agents"},{"id":"2609.38201","title":"TomasuLLM: Out-of-Order Speculative Execution for LLM Agents","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.38266","title":"Janus: Evidence-Before-Effect Sagas and Offline-Verifiable Provenance for Agentic LLMs","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.18457","title":"Kairos: Transactional Security Enforcement at the System Boundary for LLM Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}