mlsanityData to 14 Oct 2026

Osprey: Production-Ready Agentic AI for Safety-Critical Control Systems

arXiv 2508.15066 ↗First posted 20 Aug 2025cs.MA cs.IRcited by 4

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Operating large-scale scientific facilities requires coordinating diverse subsystems, translating operator intent into precise hardware actions, and maintaining strict safety oversight. Language model-driven agents offer a natural interface for these tasks, but most existing approaches are not yet reliable or safe enough for production use. In this paper, we introduce Osprey, a framework for using agentic AI in large, safety-critical facility operations. Osprey is built around the needs of control rooms and addresses these challenges in four ways. First, it uses a plan-first orchestrator that generates complete execution plans, including all dependencies, for human review before any hardware is touched. Second, a coordination layer manages complex data flows, keeps data types consistent, and automatically downsamples large datasets when needed. Third, a classifier dynamically selects only the tools required for a given task, keeping prompts compact as facilities add capabilities. Fourth, connector abstractions and deployment patterns work across different control systems and are ready for day-to-day use. We demonstrate the framework through two case studies: a control-assistant tutorial showing semantic channel mapping and historical data integration, and a production deployment at the Advanced Light Source, where Osprey manages real-time operations across hundreds of thousands of control channels. These results establish Osprey as a production-ready framework for deploying agentic AI in complex, safety-critical environments.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 4 of its 34 references that are in the map. First posted on arXiv 20 Aug 2025.

Builds on

4 of 34 references.

References · 4

  1. 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 631
  2. 2024CRISPR-GPT for Agentic Automation of Gene-editing Experimentscited by 58
  3. 2023Human-In-the-Loop for Bayesian Autonomous Materials Phase Mappingcited by 10
  4. 2024VISION: A Modular AI Assistant for Natural Human-Instrument Interaction at Scientific User Facilitiescited by 10

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025MI9: An Integrated Runtime Governance Framework for Agentic AI
  2. 2026Harness as an Asset: Enforcing Determinism via the Convergent AI Agent Framework (CAAF)
  3. 2024Safeguarding AI Agents: Developing and Analyzing Safety Architectures
  4. 2025A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows
  5. 2026Position: AI Safety Requires Effective Controllability
  6. 2025State and Memory is All You Need for Robust and Reliable AI Agents
  7. 2025A Safety and Security Framework for Real-World Agentic Systems
  8. 2026Octopus Protocol: One-Shot Hardware Discovery and Control for AI Agents via Infrastructure-as-Prompts