Tapas Are Free! Training-Free Adaptation of Programmatic Agents via LLM-Guided Program Synthesis in Dynamic Environments
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Autonomous agents in safety-critical applications must continuously adapt to dynamic conditions without compromising performance and reliability. This work introduces TAPA (Training-free Adaptation of Programmatic Agents), a novel framework that positions large language models (LLMs) as intelligent moderators of the symbolic action space. Unlike prior programmatic agents typically generate a monolithic policy program or rely on fixed symbolic action sets, TAPA synthesizes and adapts modular programs for individual high-level actions, referred to as logical primitives. By decoupling strategic intent from execution, TAPA enables meta-agents to operate over an abstract, interpretable action space while the LLM dynamically generates, composes, and refines symbolic programs tailored to each primitive. Extensive experiments across cybersecurity and swarm intelligence domains validate TAPA's effectiveness. In autonomous DDoS defense scenarios, TAPA achieves 77.7% network uptime while maintaining near-perfect detection accuracy in unknown dynamic environments. In swarm intelligence formation control under environmental and adversarial disturbances, TAPA consistently preserves consensus at runtime where baseline methods fail. This work promotes a paradigm shift for autonomous system design in evolving environments, from policy adaptation to dynamic action adaptation.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 16 of its 49 references that are in the map. First posted on arXiv 15 Aug 2025.
Builds on
16 of 49 references.
Closest ancestors · 1
Same direction, newest first
Other references · 15
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Code Llama: Open Foundation Models for Codecited by 2,139
- 2020Deep Reinforcement Learning for Autonomous Driving: A Surveycited by 721
- 2024A Survey on Large Language Models for Code Generationcited by 658
- 2022DocPrompting: Generating Code by Retrieving the Docscited by 153
- 2021Retrieval Augmented Code Generation and Summarizationcited by 149
- 2022Large Language Models Meet NL2Code: A Surveycited by 138
- 2018SDRL: Interpretable and Data-efficient Deep Reinforcement Learning Leveraging Symbolic Planningcited by 78
- 2018PEORL: Integrating Symbolic Planning and Hierarchical Reinforcement Learning for Robust Decision-Makingcited by 52
- 2025LLM-Powered AI Agent Systems and Their Applications in Industrycited by 22
- 2025Large Language Models are Autonomous Cyber Defenderscited by 15
- 2019Learning STRIPS Action Models with Classical Planningcited by 14
Built on by
Citing papers per year: 2025: 1; 2026: 8.
9 papers.
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montagecited by 19
- 2025Stop Reducing Responsibility in LLM-Powered Multi-Agent Systems to Local Alignmentcited by 7
- 2026TSPO: Breaking the Double Homogenization Dilemma in Multi-turn Search Policy Optimizationcited by 5
- 2026TopoDIM: One-shot Topology Generation of Diverse Interaction Modes for Multi-Agent Systemscited by 3
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustnesscited by 3
- 2026Responsible Agentic AI Requires Explicit Provenancecited by 3
- 2026Dive into Ambiguity: A*-Inspired Multi-Agents Commonsense Obfuscation Attack on LLM Promptscited by 2
- 2026SkillFuzz: Fuzzing Skill Composition for Implicit Intents Discovery in Open Skill Marketplacescited by 2
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Modelscited by 1
- 2026SkillFuzz: Fuzzing Skill Composition for Implicit Intents Discovery in Open Skill Marketplaces2 Jul 2026
- 2026Dive into Ambiguity: A*-Inspired Multi-Agents Commonsense Obfuscation Attack on LLM Prompts31 May 2026
- 2026Responsible Agentic AI Requires Explicit Provenance16 May 2026
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness9 May 2026
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Models2 May 2026
- 2026TSPO: Breaking the Double Homogenization Dilemma in Multi-turn Search Policy Optimization30 Jan 2026
- 2026TopoDIM: One-shot Topology Generation of Diverse Interaction Modes for Multi-Agent Systems15 Jan 2026
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage4 Jan 2026
- 2025Stop Reducing Responsibility in LLM-Powered Multi-Agent Systems to Local Alignment15 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents
- 2025Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs
- 2026Distilling Knowledge from Large Language Models into Lightweight Reinforcement Learning Agents for Autonomous Cyber Operations
- 2026Stable Agentic Control: Tool-Mediated LLM Architecture for Autonomous Cyber Defense
- 2026PocketAgents: A Manifest-Driven Library of Autonomous Defense Agents
- 2026Evaluating Generalization Mechanisms in Autonomous Cyber Attack Agents
- 2025Cyber-Zero: Training Cybersecurity Agents without Runtime
- 2026TAPO: Transition-Aware Policy Optimization for LLM Agents