QSAF: A Novel Mitigation Framework for Cognitive Degradation in Agentic AI
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
We introduce Cognitive Degradation as a novel vulnerability class in agentic AI systems. Unlike traditional adversarial external threats such as prompt injection, these failures originate internally, arising from memory starvation, planner recursion, context flooding, and output suppression. These systemic weaknesses lead to silent agent drift, logic collapse, and persistent hallucinations over time. To address this class of failures, we introduce the Qorvex Security AI Framework for Behavioral & Cognitive Resilience (QSAF Domain 10), a lifecycle-aware defense framework defined by a six-stage cognitive degradation lifecycle. The framework includes seven runtime controls (QSAF-BC-001 to BC-007) that monitor agent subsystems in real time and trigger proactive mitigation through fallback routing, starvation detection, and memory integrity enforcement. Drawing from cognitive neuroscience, we map agentic architectures to human analogs, enabling early detection of fatigue, starvation, and role collapse. By introducing a formal lifecycle and real-time mitigation controls, this work establishes Cognitive Degradation as a critical new class of AI system vulnerability and proposes the first cross-platform defense model for resilient agentic behavior.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 3 of its 16 references that are in the map. First posted on arXiv 21 Jul 2025.
Builds on
3 of 16 references.
References · 3
Built on by
Citing papers per year: 2025: 4; 2026: 2.
6 papers.
- 2025How Far Are We from Genuinely Useful Deep Research Agents?cited by 11
- 2025Fortifying the Agentic Web: A Unified Zero-Trust Architecture Against Logic-layer Threatscited by 3
- 2025AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AIcited by 3
- 2025DIRF: A Framework for Digital Identity Protection and Clone Governance in Agentic AI Systemscited by 2
- 2026Instruction Bleed: Cross-Module Interference in Prompt-Composed Agentic Systemscited by 0
- 2026Emergence of Agentic AI: A Review on Evolution, Background, Working Principles, Applications, Adoption Factors, and Future Research Directionscited by 0
- 2026Instruction Bleed: Cross-Module Interference in Prompt-Composed Agentic Systems24 Jun 2026
- 2026Emergence of Agentic AI: A Review on Evolution, Background, Working Principles, Applications, Adoption Factors, and Future Research Directions20 Jun 2026
- 2025How Far Are We from Genuinely Useful Deep Research Agents?1 Dec 2025
- 2025AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI29 Oct 2025
- 2025Fortifying the Agentic Web: A Unified Zero-Trust Architecture Against Logic-layer Threats17 Aug 2025
- 2025DIRF: A Framework for Digital Identity Protection and Clone Governance in Agentic AI Systems4 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025MTTR-A: Measuring Cognitive Recovery Latency in Multi-Agent Systems
- 2026A Taxonomy of Cognitive Capability Gaps in Generative and Agentic AI
- 2026Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Friction
- 2025AI Meets Brain: Memory Systems from Cognitive Neuroscience to Autonomous Agents
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents
- 2026Understanding Cognition-Induced Risks in Agentic AI Systems
- 2026FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory