PROV-AGENT: Unified Provenance for Tracking AI Agent Interactions in Agentic Workflows
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) and other foundation models are increasingly used as the core of AI agents. In agentic workflows, these agents plan tasks, interact with humans and peers, and influence scientific outcomes across federated and heterogeneous environments. However, agents can hallucinate or reason incorrectly, propagating errors when one agent's output becomes another's input. Thus, assuring that agents' actions are transparent, traceable, reproducible, and reliable is critical to assess hallucination risks and mitigate their workflow impacts. While provenance techniques have long supported these principles, existing methods fail to capture and relate agent-centric metadata such as prompts, responses, and decisions with the broader workflow context and downstream outcomes. In this paper, we introduce PROV-AGENT, a provenance model that extends W3C PROV and leverages the Model Context Protocol (MCP) and data observability to integrate agent interactions into end-to-end workflow provenance. Our contributions include: (1) a provenance model tailored for agentic workflows, (2) a near real-time, open-source system for capturing agentic provenance, and (3) a cross-facility evaluation spanning edge, cloud, and HPC environments, demonstrating support for critical provenance queries and agent reliability analysis.
Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). First posted on arXiv 4 Aug 2025.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2025: 3; 2026: 28.
31 papers.
Sort:
By area:
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directionscited by 50
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 37
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecyclecited by 27
- 2026ARGUS: Defending LLM Agents Against Context-Aware Prompt Injectioncited by 14
- 2025LLM Agents for Interactive Workflow Provenance: Reference Architecture and Evaluation Methodologycited by 10
- 2026Agent libOS: A Runtime Substrate for Capability-Controlled Self-Evolving LLM Agentscited by 10
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 9
- 2025TDFlow: Agentic Workflows for Test Driven Developmentcited by 6
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representationcited by 6
- 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agentscited by 5
- 2026TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commercecited by 4
- 2026AI-NativeBench: An Open-Source White-Box Agentic Benchmark Suite for AI-Native Systemscited by 3
19 more
- 2026Fantastic Scientific Agents and How to Build Them: AgentBuild for Rietveld Refinementcited by 3
- 2026Beyond Memory Majority: Latent-Source Reasoning for Multi-Agent Memory Arbitrationcited by 3
- 2026AgentTrails: Towards Trust and Reuse for Agentic Taskscited by 2
- 2026Fine-Grained Traceability for Transparent ML Pipelinescited by 1
- 2026Designing Agent-Ready Websites for AI Web Agents: A Framework for Machine Readability, Actionability, and Decision Reliabilitycited by 1
- 2026F(AI)2R: Who Did What, and Who Checked? Verifiable AI Provenance as an Executable Skillcited by 1
- 2026Causal-Temporal Event Graphs: A Formal Model for Recursive Agent Execution Tracescited by 0
- 2026KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Compositioncited by 0
- 2026Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaborationcited by 0
- 2026Workflow as Knowledge: Semantic Persistence for LLM-Mediated Workflowscited by 0
- 2026Toward Trustworthy Autonomous Science: A Two-Year Community Roadmapcited by 0
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Samenesscited by 0
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systemscited by 0
- 2026Workflow Cards: Structured Summaries of Workflow Executions Using Provenance Datacited by 0
- 2026TessIndex: Capability Verified Identity System for the Agent Economycited by 0
- 2026Stochastic Semantic Evidence Graphs: Uncertainty Propagation and Governance for Agentic AIcited by 0
- 2026Towards Mitigating Fabricated Consensus: The Active Provenance Gate for Multi-Agent Debate Synthesiscited by 0
- 2026K-Dense BYOK: An Open-Source AI Research Assistant That Runs Locally and Keeps a Hash-Chained Lab Notebookcited by 0
- 2026AIPOCH Open-Science: An Open-Source AI Research Workbench with Reproducible .science Packagescited by 0
- 2026AIPOCH Open-Science: An Open-Source AI Research Workbench with Reproducible .science Packages12 Oct 2026
- 2026Towards Mitigating Fabricated Consensus: The Active Provenance Gate for Multi-Agent Debate Synthesis25 Sep 2026
- 2026K-Dense BYOK: An Open-Source AI Research Assistant That Runs Locally and Keeps a Hash-Chained Lab Notebook4 Sep 2026
- 2026Stochastic Semantic Evidence Graphs: Uncertainty Propagation and Governance for Agentic AI3 Sep 2026
- 2026TessIndex: Capability Verified Identity System for the Agent Economy22 Aug 2026
- 2026Beyond Memory Majority: Latent-Source Reasoning for Multi-Agent Memory Arbitration20 Aug 2026
- 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agents19 Aug 2026
- 2026Workflow Cards: Structured Summaries of Workflow Executions Using Provenance Data11 Aug 2026
- 2026F(AI)2R: Who Did What, and Who Checked? Verifiable AI Provenance as an Executable Skill28 Jul 2026
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systems27 Jul 2026
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Sameness22 Jul 2026
- 2026AgentTrails: Towards Trust and Reuse for Agentic Tasks21 Jul 2026
19 more
- 2026Toward Trustworthy Autonomous Science: A Two-Year Community Roadmap13 Jul 2026
- 2026Designing Agent-Ready Websites for AI Web Agents: A Framework for Machine Readability, Actionability, and Decision Reliability13 Jul 2026
- 2026Workflow as Knowledge: Semantic Persistence for LLM-Mediated Workflows9 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaboration29 Jun 2026
- 2026Fantastic Scientific Agents and How to Build Them: AgentBuild for Rietveld Refinement11 Jun 2026
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents3 Jun 2026
- 2026Agent libOS: A Runtime Substrate for Capability-Controlled Self-Evolving LLM Agents2 Jun 2026
- 2026KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition25 May 2026
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representation7 May 2026
- 2026ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection5 May 2026
- 2026Causal-Temporal Event Graphs: A Formal Model for Recursive Agent Execution Traces19 Apr 2026
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle17 Apr 2026
- 2026TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commerce30 Jan 2026
- 2026Fine-Grained Traceability for Transparent ML Pipelines21 Jan 2026
- 2026AI-NativeBench: An Open-Source White-Box Agentic Benchmark Suite for AI-Native Systems14 Jan 2026
- 2025TDFlow: Agentic Workflows for Test Driven Development27 Oct 2025
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directions23 Sep 2025
- 2025LLM Agents for Interactive Workflow Provenance: Reference Architecture and Evaluation Methodology17 Sep 2025
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directionscited by 50
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 37
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecyclecited by 27
- 2026ARGUS: Defending LLM Agents Against Context-Aware Prompt Injectioncited by 14
- 2025LLM Agents for Interactive Workflow Provenance: Reference Architecture and Evaluation Methodologycited by 10
- 2026Agent libOS: A Runtime Substrate for Capability-Controlled Self-Evolving LLM Agentscited by 10
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 9
- 2025TDFlow: Agentic Workflows for Test Driven Developmentcited by 6
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representationcited by 6
- 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agentscited by 5
- 2026TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commercecited by 4
- 2026AI-NativeBench: An Open-Source White-Box Agentic Benchmark Suite for AI-Native Systemscited by 3
12 most cited of 18 All 18 (JSON)
- 2026Towards Mitigating Fabricated Consensus: The Active Provenance Gate for Multi-Agent Debate Synthesis25 Sep 2026
- 2026Stochastic Semantic Evidence Graphs: Uncertainty Propagation and Governance for Agentic AI3 Sep 2026
- 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agents19 Aug 2026
- 2026AgentTrails: Towards Trust and Reuse for Agentic Tasks21 Jul 2026
- 2026Designing Agent-Ready Websites for AI Web Agents: A Framework for Machine Readability, Actionability, and Decision Reliability13 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaboration29 Jun 2026
- 2026Fantastic Scientific Agents and How to Build Them: AgentBuild for Rietveld Refinement11 Jun 2026
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents3 Jun 2026
- 2026Agent libOS: A Runtime Substrate for Capability-Controlled Self-Evolving LLM Agents2 Jun 2026
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representation7 May 2026
- 2026ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection5 May 2026
12 newest of 18 All 18 (JSON)
- 2026Beyond Memory Majority: Latent-Source Reasoning for Multi-Agent Memory Arbitrationcited by 3
- 2026Fine-Grained Traceability for Transparent ML Pipelinescited by 1
- 2026F(AI)2R: Who Did What, and Who Checked? Verifiable AI Provenance as an Executable Skillcited by 1
- 2026Causal-Temporal Event Graphs: A Formal Model for Recursive Agent Execution Tracescited by 0
- 2026KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Compositioncited by 0
- 2026Workflow as Knowledge: Semantic Persistence for LLM-Mediated Workflowscited by 0
- 2026Toward Trustworthy Autonomous Science: A Two-Year Community Roadmapcited by 0
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Samenesscited by 0
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systemscited by 0
- 2026Workflow Cards: Structured Summaries of Workflow Executions Using Provenance Datacited by 0
- 2026TessIndex: Capability Verified Identity System for the Agent Economycited by 0
- 2026K-Dense BYOK: An Open-Source AI Research Assistant That Runs Locally and Keeps a Hash-Chained Lab Notebookcited by 0
12 most cited of 13 All 13 (JSON)
- 2026AIPOCH Open-Science: An Open-Source AI Research Workbench with Reproducible .science Packages12 Oct 2026
- 2026K-Dense BYOK: An Open-Source AI Research Assistant That Runs Locally and Keeps a Hash-Chained Lab Notebook4 Sep 2026
- 2026TessIndex: Capability Verified Identity System for the Agent Economy22 Aug 2026
- 2026Beyond Memory Majority: Latent-Source Reasoning for Multi-Agent Memory Arbitration20 Aug 2026
- 2026Workflow Cards: Structured Summaries of Workflow Executions Using Provenance Data11 Aug 2026
- 2026F(AI)2R: Who Did What, and Who Checked? Verifiable AI Provenance as an Executable Skill28 Jul 2026
- 2026Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systems27 Jul 2026
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Sameness22 Jul 2026
- 2026Toward Trustworthy Autonomous Science: A Two-Year Community Roadmap13 Jul 2026
- 2026Workflow as Knowledge: Semantic Persistence for LLM-Mediated Workflows9 Jul 2026
- 2026KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition25 May 2026
- 2026Causal-Temporal Event Graphs: A Formal Model for Recursive Agent Execution Traces19 Apr 2026
12 newest of 13 All 13 (JSON)