Osprey: Production-Ready Agentic AI for Safety-Critical Control Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Operating large-scale scientific facilities requires coordinating diverse subsystems, translating operator intent into precise hardware actions, and maintaining strict safety oversight. Language model-driven agents offer a natural interface for these tasks, but most existing approaches are not yet reliable or safe enough for production use. In this paper, we introduce Osprey, a framework for using agentic AI in large, safety-critical facility operations. Osprey is built around the needs of control rooms and addresses these challenges in four ways. First, it uses a plan-first orchestrator that generates complete execution plans, including all dependencies, for human review before any hardware is touched. Second, a coordination layer manages complex data flows, keeps data types consistent, and automatically downsamples large datasets when needed. Third, a classifier dynamically selects only the tools required for a given task, keeping prompts compact as facilities add capabilities. Fourth, connector abstractions and deployment patterns work across different control systems and are ready for day-to-day use. We demonstrate the framework through two case studies: a control-assistant tutorial showing semantic channel mapping and historical data integration, and a production deployment at the Advanced Light Source, where Osprey manages real-time operations across hundreds of thousands of control channels. These results establish Osprey as a production-ready framework for deploying agentic AI in complex, safety-critical environments.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 4 of its 34 references that are in the map. First posted on arXiv 20 Aug 2025.
Builds on
4 of 34 references.
References · 4
- 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 631
- 2024CRISPR-GPT for Agentic Automation of Gene-editing Experimentscited by 58
- 2023Human-In-the-Loop for Bayesian Autonomous Materials Phase Mappingcited by 10
- 2024VISION: A Modular AI Assistant for Natural Human-Instrument Interaction at Scientific User Facilitiescited by 10
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Safe-SDL:Establishing Safety Boundaries and Control Mechanisms for AI-Driven Self-Driving Laboratoriescited by 0
- 2026Toward a Fully Autonomous, AI-Native Particle Acceleratorcited by 0
- 2026Networked Intelligence: Active Shared Context Graphs for Human-AI Team Sciencecited by 0
- 2026Autonomous discovery of accelerator commissioning algorithmscited by 0
- 2026Autonomous discovery of accelerator commissioning algorithms7 Aug 2026
- 2026Networked Intelligence: Active Shared Context Graphs for Human-AI Team Science14 Jul 2026
- 2026Toward a Fully Autonomous, AI-Native Particle Accelerator19 Feb 2026
- 2026Safe-SDL:Establishing Safety Boundaries and Control Mechanisms for AI-Driven Self-Driving Laboratories13 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025MI9: An Integrated Runtime Governance Framework for Agentic AI
- 2026Harness as an Asset: Enforcing Determinism via the Convergent AI Agent Framework (CAAF)
- 2024Safeguarding AI Agents: Developing and Analyzing Safety Architectures
- 2025A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows
- 2026Position: AI Safety Requires Effective Controllability
- 2025State and Memory is All You Need for Robust and Reliable AI Agents
- 2025A Safety and Security Framework for Real-World Agentic Systems
- 2026Octopus Protocol: One-Shot Hardware Discovery and Control for AI Agents via Infrastructure-as-Prompts