AgentOps: Enabling Observability of LLM Agents
On the map: LLM agents and tool use → Software engineering coding agents
Abstract (arXiv)
Large language model (LLM) agents have demonstrated remarkable capabilities across various domains, gaining extensive attention from academia and industry. However, these agents raise significant concerns on AI safety due to their autonomous and non-deterministic behavior, as well as continuous evolving nature . From a DevOps perspective, enabling observability in agents is necessary to ensuring AI safety, as stakeholders can gain insights into the agents' inner workings, allowing them to proactively understand the agents, detect anomalies, and prevent potential failures. Therefore, in this paper, we present a comprehensive taxonomy of AgentOps, identifying the artifacts and associated data that should be traced throughout the entire lifecycle of agents to achieve effective observability. The taxonomy is developed based on a systematic mapping study of existing AgentOps tools. Our taxonomy serves as a reference template for developers to design and implement AgentOps infrastructure that supports monitoring, logging, and analytics. thereby ensuring AI safety.
Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 6 of its 8 references that are in the map. First posted on arXiv 8 Nov 2024.
Builds on
6 of 8 references.
References · 6
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2024Visibility into AI Agentscited by 77
- 2017Guidelines for including grey literature and conducting multivocal literature reviews in software engineeringcited by 38
- 2024Agent Design Pattern Catalogue: A Collection of Architectural Patterns for Foundation Model based Agentscited by 35
- 2023Towards Responsible Generative AI: A Reference Architecture for Designing Foundation Model based Agentscited by 13
- 2024Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agentscited by 13
Built on by
Citing papers per year: 2024: 1; 2025: 8; 2026: 37.
46 papers.
Sort:
By area:
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 29
- 2025AgentSight: System-Level Observability for AI Agents Using eBPFcited by 18
- 2026Auditable Agentscited by 14
- 2026Characterizing Faults in Agentic AI: A Taxonomy of Types, Symptoms, and Root Causescited by 11
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 11
- 2026TrajAudit: Automated Failure Diagnosis for Agentic Coding Systemscited by 11
- 2024Evaluation-Driven Development and Operations of LLM Agents: A Process Model and Reference Architecturecited by 10
- 2026AgentTrace: A Structured Logging Framework for Agent System Observabilitycited by 8
- 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systemscited by 7
- 2026FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systemscited by 7
- 2026REFLECT: Intervention-Supported Error Attribution for Silent Failures in LLM Agent Tracescited by 7
- 2026AgentDebugX: An Open-Source Toolkit for Failure Observability, Attribution, and Recovery in LLM Agentscited by 7
34 more
- 2025Oversight Structures for Agentic AI in Public-Sector Organizationscited by 6
- 2025Agentic Services Computingcited by 6
- 2025RAGOps: Operating and Managing Retrieval-Augmented Generation Pipelinescited by 5
- 2025LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systemscited by 4
- 2026ClawTrace: Cost-Aware Tracing for LLM Agent Skill Distillationcited by 4
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representationcited by 4
- 2026GRADE: Graph Representation of LLM Agent Dependency and Executioncited by 4
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculuscited by 3
- 2026Clawed and Dangerous: Can We Trust Open Agentic Systems?cited by 3
- 2026AI Agents Push Humans Out of the Loopcited by 3
- 2026Repair or Resample? Rethinking Failure Debugging in LLM Multi-Agent Systemscited by 3
- 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agentscited by 2
- 2026Agentic Configuration Management (ACM): A Reference Configuration Model for Governed Agentic Systemscited by 2
- 2025OpenDerisk: An Industrial Framework for AI-Driven SRE, with Design, Implementation, and Case Studiescited by 1
- 2025HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debatecited by 1
- 2026Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Textcited by 1
- 2026Harnessing Agent Skills: Architectural Patterns and a Reference Architecture for Skill-Mediated LLM Agentscited by 1
- 2026How Do Practitioners Build SE Agents? Insights from a Mixed-Methods Studycited by 1
- 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directionscited by 1
- 2026TelemetrySuffBench: Is Agent Telemetry Sufficient for Failure-Origin Diagnosis?cited by 1
- 2026Observability and Fault Injection for LLM-Based Multi-Agent Systems in Software Engineeringcited by 1
- 2026Agent-Integrated Software: Interaction Contracts and Continuous Assurancecited by 1
- 2026Agent System Operations: Categorization, Challenges, and Future Directionscited by 0
- 2026Agent Behavior Mining: Generative AI Agent Governance in Business Processescited by 0
- 2026Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agentscited by 0
- 2026Toward Continuous Assurance for the Democratization of AI Agent Creation in Industrycited by 0
- 2026The CASE Framework: A Multi-Disciplinary Control Architecture for Governing Enterprise Agentic AIcited by 0
- 2026AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systemscited by 0
- 2026Towards Agentic Cloud Engineering: Graph and Loop Engineering with a Zero-Trust Agent Harnesscited by 0
- 2026AgentKernel: The Trust-Native Agentic Operating Systemcited by 0
- 2026Who Holds the Pen? Let Specifications, Not Agents, Sign Offcited by 0
- 2026AgentWare: Automating the Lifecycle of Agentic Applications across the Edge-to-Cloud Continuumcited by 0
- 2026Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logisticscited by 0
- 2026Verify Claims, Not Scores: Evidence-Based Verification of Modular Agentscited by 0
- 2026Verify Claims, Not Scores: Evidence-Based Verification of Modular Agents1 Oct 2026
- 2026Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logistics1 Oct 2026
- 2026AgentWare: Automating the Lifecycle of Agentic Applications across the Edge-to-Cloud Continuum28 Sep 2026
- 2026Who Holds the Pen? Let Specifications, Not Agents, Sign Off24 Sep 2026
- 2026Agent-Integrated Software: Interaction Contracts and Continuous Assurance10 Sep 2026
- 2026Towards Agentic Cloud Engineering: Graph and Loop Engineering with a Zero-Trust Agent Harness30 Aug 2026
- 2026AgentKernel: The Trust-Native Agentic Operating System29 Aug 2026
- 2026Repair or Resample? Rethinking Failure Debugging in LLM Multi-Agent Systems26 Aug 2026
- 2026Observability and Fault Injection for LLM-Based Multi-Agent Systems in Software Engineering25 Aug 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systems23 Aug 2026
- 2026Agentic Configuration Management (ACM): A Reference Configuration Model for Governed Agentic Systems11 Aug 2026
34 more
- 2026The CASE Framework: A Multi-Disciplinary Control Architecture for Governing Enterprise Agentic AI10 Aug 2026
- 2026TelemetrySuffBench: Is Agent Telemetry Sufficient for Failure-Origin Diagnosis?8 Aug 2026
- 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions5 Aug 2026
- 2026Toward Continuous Assurance for the Democratization of AI Agent Creation in Industry23 Jul 2026
- 2026Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents21 Jul 2026
- 2026AgentDebugX: An Open-Source Toolkit for Failure Observability, Attribution, and Recovery in LLM Agents21 Jul 2026
- 2026How Do Practitioners Build SE Agents? Insights from a Mixed-Methods Study12 Jul 2026
- 2026GRADE: Graph Representation of LLM Agent Dependency and Execution22 Jun 2026
- 2026Agent Behavior Mining: Generative AI Agent Governance in Business Processes12 Jun 2026
- 2026REFLECT: Intervention-Supported Error Attribution for Silent Failures in LLM Agent Traces8 Jun 2026
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents3 Jun 2026
- 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agents1 Jun 2026
- 2026Agent System Operations: Categorization, Challenges, and Future Directions1 Jun 2026
- 2026Harnessing Agent Skills: Architectural Patterns and a Reference Architecture for Skill-Mediated LLM Agents29 May 2026
- 2026TrajAudit: Automated Failure Diagnosis for Agentic Coding Systems26 May 2026
- 2026FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems12 May 2026
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representation7 May 2026
- 2026ClawTrace: Cost-Aware Tracing for LLM Agent Skill Distillation26 Apr 2026
- 2026Auditable Agents7 Apr 2026
- 2026Clawed and Dangerous: Can We Trust Open Agentic Systems?27 Mar 2026
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration24 Mar 2026
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculus20 Mar 2026
- 2026Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Text17 Mar 2026
- 2026Characterizing Faults in Agentic AI: A Taxonomy of Types, Symptoms, and Root Causes6 Mar 2026
- 2026AgentTrace: A Structured Logging Framework for Agent System Observability7 Feb 2026
- 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systems14 Dec 2025
- 2025HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debate9 Dec 2025
- 2025OpenDerisk: An Industrial Framework for AI-Driven SRE, with Design, Implementation, and Case Studies15 Oct 2025
- 2025Agentic Services Computing29 Sep 2025
- 2025LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systems17 Aug 2025
- 2025AgentSight: System-Level Observability for AI Agents Using eBPF2 Aug 2025
- 2025Oversight Structures for Agentic AI in Public-Sector Organizations5 Jun 2025
- 2025RAGOps: Operating and Managing Retrieval-Augmented Generation Pipelines3 Jun 2025
- 2024Evaluation-Driven Development and Operations of LLM Agents: A Process Model and Reference Architecture21 Nov 2024
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 29
- 2025AgentSight: System-Level Observability for AI Agents Using eBPFcited by 18
- 2026Auditable Agentscited by 14
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 11
- 2026TrajAudit: Automated Failure Diagnosis for Agentic Coding Systemscited by 11
- 2024Evaluation-Driven Development and Operations of LLM Agents: A Process Model and Reference Architecturecited by 10
- 2026AgentTrace: A Structured Logging Framework for Agent System Observabilitycited by 8
- 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systemscited by 7
- 2026FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systemscited by 7
- 2026REFLECT: Intervention-Supported Error Attribution for Silent Failures in LLM Agent Tracescited by 7
- 2026AgentDebugX: An Open-Source Toolkit for Failure Observability, Attribution, and Recovery in LLM Agentscited by 7
- 2025Agentic Services Computingcited by 6
12 most cited of 31 All 31 (JSON)
- 2026AgentWare: Automating the Lifecycle of Agentic Applications across the Edge-to-Cloud Continuum28 Sep 2026
- 2026Who Holds the Pen? Let Specifications, Not Agents, Sign Off24 Sep 2026
- 2026Towards Agentic Cloud Engineering: Graph and Loop Engineering with a Zero-Trust Agent Harness30 Aug 2026
- 2026AgentKernel: The Trust-Native Agentic Operating System29 Aug 2026
- 2026Observability and Fault Injection for LLM-Based Multi-Agent Systems in Software Engineering25 Aug 2026
- 2026Agentic Configuration Management (ACM): A Reference Configuration Model for Governed Agentic Systems11 Aug 2026
- 2026The CASE Framework: A Multi-Disciplinary Control Architecture for Governing Enterprise Agentic AI10 Aug 2026
- 2026TelemetrySuffBench: Is Agent Telemetry Sufficient for Failure-Origin Diagnosis?8 Aug 2026
- 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions5 Aug 2026
- 2026Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents21 Jul 2026
- 2026AgentDebugX: An Open-Source Toolkit for Failure Observability, Attribution, and Recovery in LLM Agents21 Jul 2026
- 2026How Do Practitioners Build SE Agents? Insights from a Mixed-Methods Study12 Jul 2026
12 newest of 31 All 31 (JSON)
- 2025Oversight Structures for Agentic AI in Public-Sector Organizationscited by 6
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculuscited by 3
- 2026AI Agents Push Humans Out of the Loopcited by 3
- 2025OpenDerisk: An Industrial Framework for AI-Driven SRE, with Design, Implementation, and Case Studiescited by 1
- 2026Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Textcited by 1
- 2026Agent-Integrated Software: Interaction Contracts and Continuous Assurancecited by 1
- 2026Agent Behavior Mining: Generative AI Agent Governance in Business Processescited by 0
- 2026Toward Continuous Assurance for the Democratization of AI Agent Creation in Industrycited by 0
- 2026AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systemscited by 0
- 2026Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logisticscited by 0
- 2026Verify Claims, Not Scores: Evidence-Based Verification of Modular Agentscited by 0
- 2026Verify Claims, Not Scores: Evidence-Based Verification of Modular Agents1 Oct 2026
- 2026Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logistics1 Oct 2026
- 2026Agent-Integrated Software: Interaction Contracts and Continuous Assurance10 Sep 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systems23 Aug 2026
- 2026Toward Continuous Assurance for the Democratization of AI Agent Creation in Industry23 Jul 2026
- 2026Agent Behavior Mining: Generative AI Agent Governance in Business Processes12 Jun 2026
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculus20 Mar 2026
- 2026Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Text17 Mar 2026
- 2025OpenDerisk: An Industrial Framework for AI-Driven SRE, with Design, Implementation, and Case Studies15 Oct 2025
- 2025Oversight Structures for Agentic AI in Public-Sector Organizations5 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2025A Survey on AgentOps: Categorization, Challenges, and Future Directions
- 2025Taming Uncertainty via Automation: Observing, Analyzing, and Optimizing Agentic AI Systems
- 2026Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safety
- 2025Agentic AI Process Observability: Discovering Behavioral Variability
- 2025Aegis: Taxonomy and Optimizations for Overcoming Agent-Environment Failures in LLM Agents
- 2026LLM-Based Agents for Software and Systems Security: Approaches, Applications, and Assessment
- 2024Defining and Detecting the Defects of the Large Language Model-based Autonomous Agents
- 2026Towards Verifiably Safe Tool Use for LLM Agents