MI9: An Integrated Runtime Governance Framework for Agentic AI
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Agentic AI systems capable of reasoning, planning, and executing actions present fundamentally distinct governance challenges compared to traditional AI models. Unlike conventional AI, these systems exhibit emergent and unexpected behaviors during runtime, introducing novel agent-related risks that cannot be fully anticipated through pre-deployment governance alone. To address this critical gap, we introduce MI9, the first fully integrated runtime governance framework designed specifically for safety and alignment of agentic AI systems. MI9 introduces real-time controls through six integrated components: agency-risk index, agent-semantic telemetry capture, continuous authorization monitoring, Finite-State-Machine (FSM)-based conformance engines, goal-conditioned drift detection, and graduated containment strategies. Operating transparently across heterogeneous agent architectures, MI9 enables the systematic, safe, and responsible deployment of agentic systems in production environments where conventional governance approaches fall short, providing the foundational infrastructure for safe agentic AI deployment at scale. Detailed analysis through a diverse set of scenarios demonstrates MI9's systematic coverage of governance challenges that existing approaches fail to address, establishing the technical foundation for comprehensive agentic AI oversight.
Key facts. Cited by 19 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 0 of its 3 references that are in the map. First posted on arXiv 5 Aug 2025.
Builds on
0 of 3 references.
No references here yet.
Built on by
Citing papers per year: 2025: 1; 2026: 18.
19 papers.
Sort:
By area:
- 2026Runtime Governance for AI Agents: Policies on Pathscited by 18
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 15
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 9
- 2026From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AIcited by 7
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AIcited by 5
- 2026Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layercited by 3
- 2026From Runtime Records to Legal Findings: An Evidentiary-Adequacy Criterion for Agentic AI Oversightcited by 2
- 2026Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agentscited by 1
- 2026Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Executioncited by 1
- 2026Governing What the EU AI Act Excludes: Accountability for Autonomous AI Agents in Smart City Critical Infrastructurecited by 1
- 2026Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolationcited by 1
- 2026OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleetscited by 1
7 more
- 2026Implicit Intelligence -- Evaluating Agents on What Users Don't Saycited by 0
- 2026Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systemscited by 0
- 2026A Policy Algebra for Trust-Preserving Agentic AI Executioncited by 0
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026Intent Drift at SME Scale: Deployment Practice, Not Model Capability, Determines Agentic Compliancecited by 0
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governancecited by 0
- 2026Epi-Logic: A Conceptual Framework for Epistemic Runtime Control, Schema Validity Checking, and Controlled Accommodation in Autonomous AI Agentscited by 0
- 2026Epi-Logic: A Conceptual Framework for Epistemic Runtime Control, Schema Validity Checking, and Controlled Accommodation in Autonomous AI Agents21 Sep 2026
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governance9 Sep 2026
- 2026Intent Drift at SME Scale: Deployment Practice, Not Model Capability, Determines Agentic Compliance5 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026A Policy Algebra for Trust-Preserving Agentic AI Execution17 Aug 2026
- 2026OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleets14 Aug 2026
- 2026Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer30 Jul 2026
- 2026From Runtime Records to Legal Findings: An Evidentiary-Adequacy Criterion for Agentic AI Oversight1 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI2 Jun 2026
- 2026Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systems18 May 2026
- 2026Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation7 May 2026
7 more
- 2026Governing What the EU AI Act Excludes: Accountability for Autonomous AI Agents in Smart City Critical Infrastructure1 May 2026
- 2026Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Execution16 Apr 2026
- 2026Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agents9 Apr 2026
- 2026From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI6 Apr 2026
- 2026Runtime Governance for AI Agents: Policies on Paths17 Mar 2026
- 2026Implicit Intelligence -- Evaluating Agents on What Users Don't Say23 Feb 2026
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2026Runtime Governance for AI Agents: Policies on Pathscited by 18
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 15
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 9
- 2026From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AIcited by 7
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AIcited by 5
- 2026Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layercited by 3
- 2026From Runtime Records to Legal Findings: An Evidentiary-Adequacy Criterion for Agentic AI Oversightcited by 2
- 2026Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolationcited by 1
- 2026OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleetscited by 1
- 2026Implicit Intelligence -- Evaluating Agents on What Users Don't Saycited by 0
- 2026Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systemscited by 0
- 2026A Policy Algebra for Trust-Preserving Agentic AI Executioncited by 0
12 most cited of 14 All 14 (JSON)
- 2026Intent Drift at SME Scale: Deployment Practice, Not Model Capability, Determines Agentic Compliance5 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026A Policy Algebra for Trust-Preserving Agentic AI Execution17 Aug 2026
- 2026OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleets14 Aug 2026
- 2026Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer30 Jul 2026
- 2026From Runtime Records to Legal Findings: An Evidentiary-Adequacy Criterion for Agentic AI Oversight1 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI2 Jun 2026
- 2026Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systems18 May 2026
- 2026Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation7 May 2026
- 2026From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI6 Apr 2026
- 2026Runtime Governance for AI Agents: Policies on Paths17 Mar 2026
12 newest of 14 All 14 (JSON)
- 2026Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agentscited by 1
- 2026Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Executioncited by 1
- 2026Governing What the EU AI Act Excludes: Accountability for Autonomous AI Agents in Smart City Critical Infrastructurecited by 1
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governancecited by 0
- 2026Epi-Logic: A Conceptual Framework for Epistemic Runtime Control, Schema Validity Checking, and Controlled Accommodation in Autonomous AI Agentscited by 0
- 2026Epi-Logic: A Conceptual Framework for Epistemic Runtime Control, Schema Validity Checking, and Controlled Accommodation in Autonomous AI Agents21 Sep 2026
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governance9 Sep 2026
- 2026Governing What the EU AI Act Excludes: Accountability for Autonomous AI Agents in Smart City Critical Infrastructure1 May 2026
- 2026Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Execution16 Apr 2026
- 2026Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agents9 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2026Runtime Governance for Agentic AI: Action-Boundary Control with Trusted Provenance and Fail-Closed Execution
- 2026Behavioral Governance for Autonomous AI Agents: The AgentBound Framework
- 2026The Controllability Trap: A Governance Framework for Military AI Agents
- 2026SARC: A Governance-by-Architecture Framework for Agentic AI Systems
- 2026Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI
- 2025AGENTSAFE: A Unified Framework for Ethical Assurance and Governance in Agentic AI
- 2026SafeAgent: A Runtime Protection Architecture for Agentic Systems
- 2026AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents