mlsanityData to 14 Oct 2026

GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications

arXiv 2404.06921 ↗First posted 10 Apr 2024cs.CL cs.AIcited by 23

Not on the map. Why?

Abstract (arXiv)

Large Language Models (LLMs) are evolving beyond their classical role of providing information within dialogue systems to actively engaging with tools and performing actions on real-world applications and services. Today, humans verify the correctness and appropriateness of the LLM-generated outputs (e.g., code, functions, or actions) before putting them into real-world execution. This poses significant challenges as code comprehension is well known to be notoriously difficult. In this paper, we study how humans can efficiently collaborate with, delegate to, and supervise autonomous LLMs in the future. We argue that in many cases, "post-facto validation" - verifying the correctness of a proposed action after seeing the output - is much easier than the aforementioned "pre-facto validation" setting. The core concept behind enabling a post-facto validation system is the integration of an intuitive undo feature, and establishing a damage confinement for the LLM-generated actions as effective strategies to mitigate the associated risks. Using this, a human can now either revert the effect of an LLM-generated output or be confident that the potential risk is bounded. We believe this is critical to unlock the potential for LLM agents to interact with applications and services with limited (post-facto) human involvement. We describe the design and implementation of our open-source runtime for executing LLM actions, Gorilla Execution Engine (GoEX), and present open research questions towards realizing the goal of LLMs and applications interacting with each other with minimal human supervision. We release GoEX at https://github.com/ShishirPatil/gorilla/.

Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Builds on 25 of its 42 references that are in the map. First posted on arXiv 10 Apr 2024.

Builds on

25 of 42 references.

References · 25

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  4. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  5. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  6. 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
  7. 2023Code Llama: Open Foundation Models for Codecited by 2,139
  8. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  9. 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,332
  10. 2023A Survey on Evaluation of Large Language Modelscited by 1,242
  11. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  12. 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
13 more
  1. 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 698
  2. 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
  3. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  4. 2024StruQ: Defending Against Prompt Injection with Structured Queriescited by 375
  5. 2023A Survey of Hallucination in Large Foundation Modelscited by 368
  6. 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 278
  7. 2023Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Modelscited by 264
  8. 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 145
  9. 2024IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systemscited by 130
  10. 2023Jatmo: Prompt Injection Defense by Task-Specific Finetuningcited by 106
  11. 2023Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competitioncited by 68
  12. 2023Assessing Prompt Injection Risks in 200+ Custom GPTscited by 55
  13. 2024Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applicationscited by 54

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 4; 2025: 10; 2026: 9.

23 papers.

Sort:

By area:

  1. 2024ToolSandbox: A Stateful, Conversational, Interactive Evaluation Benchmark for LLM Tool Use Capabilitiescited by 295
  2. 2024From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Futurecited by 86
  3. 2025MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agentscited by 77
  4. 2025Authenticated Delegation and Authorized AI Agentscited by 65
  5. 2025AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agentscited by 42
  6. 2025Infrastructure for AI Agentscited by 41
  7. 2026Atomix: Timely, Transactional Tool Use for Reliable Agentic Workflowscited by 30
  8. 2025AI Agentic Programming: A Survey of Techniques, Challenges, and Opportunitiescited by 28
  9. 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
  10. 2024IDs for AI Systemscited by 19
  11. 2024On Pre-training of Multimodal Language Models Customized for Chart Understandingcited by 13
  12. 2025Secure and Efficient Access Control for Computer-Use Agents via Context Spacecited by 11
11 more
  1. 2025Towards Pervasive Distributed Agentic Generative AI -- A State of The Artcited by 4
  2. 2026Tracking Capabilities for Safer Agentscited by 4
  3. 2026CoAgent: Concurrency Control for Multi-Agent Systemscited by 4
  4. 2025A Plan Reuse Mechanism for LLM-Driven Agentcited by 3
  5. 2025Querying Databases with Function Callingcited by 2
  6. 2026EvoUndo: Recoverability-Constrained Self-Evolution for LLM Agent Harnessescited by 2
  7. 2026VeriGrey: Greybox Agent Validationcited by 1
  8. 2026Composition without a Host: Carrying the Spatiotemporal-Composability Guarantee of Plugin-Based Agents across Processescited by 0
  9. 2026Do Not Restart: Residual Completion for Stateful Agent Handoffscited by 0
  10. 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systemscited by 0
  11. 2026Kairos: Transactional Security Enforcement at the System Boundary for LLM Agentscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024If LLM Is the Wizard, Then Code Is the Wand: A Survey on How Code Empowers Large Language Models to Serve as Intelligent Agents
  2. 2026Evaluating Implicit Regulatory Compliance in LLM Tool Invocation via Logic-Guided Synthesis
  3. 2025LLM-Based Human-Agent Collaboration and Interaction Systems: A Survey
  4. 2025LMR-BENCH: Evaluating LLM Agent's Ability on Reproducing Language Modeling Research
  5. 2025From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users
  6. 2025Watchdogs and Oracles: Runtime Verification Meets Large Language Models for Autonomous Systems
  7. 2026Characterizing Large Language Model Agentic Workflows: A Study on N8n Ecosystem
  8. 2026MANTRA: Synthesizing SMT-Validated Compliance Benchmarks for Tool-Using LLM Agents