Evaluating LLM Agent Adherence to Hierarchical Safety Principles: A Lightweight Benchmark for Probing Foundational Controllability Components
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Credible safety plans for advanced AI development require methods to verify agent behavior and detect potential control deficiencies early. A fundamental aspect is ensuring agents adhere to safety-critical principles, especially when these conflict with operational goals. This paper introduces a lightweight, interpretable benchmark to evaluate an LLM agent's ability to uphold a high-level safety principle when faced with conflicting task instructions. Our evaluation of six LLMs reveals two primary findings: (1) a quantifiable "cost of compliance" where safety constraints degrade task performance even when compliant solutions exist, and (2) an "illusion of compliance" where high adherence often masks task incompetence rather than principled choice. These findings provide initial evidence that while LLMs can be influenced by hierarchical directives, current approaches lack the consistency required for reliable safety governance.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 14 of its 30 references that are in the map. First posted on arXiv 3 Jun 2025.
Builds on
14 of 30 references.
Closest ancestors · 3
Same direction, newest first
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents5 Mar
- 2023Plug in the Safety Chip: Enforcing Constraints for LLM-driven Robot Agents18 Sep
Other references · 11
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,267
- 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,251
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 258
- 2024Benchmarking Complex Instruction-Following with Multiple Constraints Compositioncited by 152
- 2017AI Safety Gridworldscited by 110
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
- 2025AI Governance to Avoid Extinction: The Strategic Landscape and Actionable Research Questionscited by 6
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
- 2026Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety
- 2026Position: AI Safety Requires Effective Controllability
- 2026Beyond single-channel agentic benchmarking
- 2026When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems
- 2026MANTRA: Synthesizing SMT-Validated Compliance Benchmarks for Tool-Using LLM Agents
- 2026AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents
- 2025How to evaluate control measures for LLM agents? A trajectory from today to superintelligence