Check Yourself Before You Wreck Yourself: Selectively Quitting Improves LLM Agent Safety
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
As Large Language Model (LLM) agents increasingly operate in complex environments with real-world consequences, their safety becomes critical. While uncertainty quantification is well-studied for single-turn tasks, multi-turn agentic scenarios with real-world tool access present unique challenges where uncertainties and ambiguities compound, leading to severe or catastrophic risks beyond traditional text generation failures. We propose using "quitting" as a simple yet effective behavioral mechanism for LLM agents to recognize and withdraw from situations where they lack confidence. Leveraging the ToolEmu framework, we conduct a systematic evaluation of quitting behavior across 12 state-of-the-art LLMs. Our results demonstrate a highly favorable safety-helpfulness trade-off: agents prompted to quit with explicit instructions improve safety by an average of +0.39 on a 0-3 scale across all models (+0.64 for proprietary models), while maintaining a negligible average decrease of -0.03 in helpfulness. Our analysis demonstrates that simply adding explicit quit instructions proves to be a highly effective safety mechanism that can immediately be deployed in existing agent systems, and establishes quitting as an effective first-line defense mechanism for autonomous agents in high-stakes applications.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 20 references that are in the map. First posted on arXiv 18 Oct 2025.
Builds on
18 of 20 references.
Closest ancestors · 4
Same direction, newest first
- 2025SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator23 May
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep
Other references · 14
- 2025Qwen3 Technical Reportcited by 8,820
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
- 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
- 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 293
- 2023LM-Polygraph: Uncertainty Estimation for Language Modelscited by 131
- 2024A Survey on Uncertainty Quantification of Large Language Models: Taxonomy, Open Research Challenges, and Future Directionscited by 121
Built on by
Citing papers per year: 2026: 12.
12 papers.
- 2026WebWorld: A Large-Scale World Model for Web Agent Trainingcited by 26
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?cited by 15
- 2026LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarioscited by 9
- 2026SoK: Security of Autonomous LLM Agents in Agentic Commercecited by 8
- 2026Knowing When to Quit: A Principled Framework for Dynamic Abstention in LLM Reasoningcited by 8
- 2026SafeCommit: Certifying When Memory-Grounded Agents May Safely Actcited by 6
- 2026Do Agents Know What They Can't Do? Evaluating Feasibility Awareness in Tool-Using Agentscited by 2
- 2026Will the Agent Recuse, and Will It Stop? Measuring LLM-Agent Compliance with In-Band Governance Signals at the Access Door and Mid-Flightcited by 2
- 2026Safety Training May Persist Through Helpfulness Optimization in LLM Agentscited by 1
- 2026Measuring Harness-Induced Belief Divergence in Multi-Step LLM Agentscited by 1
- 2026ClayBuddy: A Framework, Evaluation, & Mitigation of Coding Agent Failurescited by 0
- 2026Position: AI Governance Needs ISO-like Interoperability Protocols, Not Just Lawscited by 0
- 2026SafeCommit: Certifying When Memory-Grounded Agents May Safely Act4 Aug 2026
- 2026Measuring Harness-Induced Belief Divergence in Multi-Step LLM Agents5 Jul 2026
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?27 Jun 2026
- 2026ClayBuddy: A Framework, Evaluation, & Mitigation of Coding Agent Failures13 Jun 2026
- 2026Will the Agent Recuse, and Will It Stop? Measuring LLM-Agent Compliance with In-Band Governance Signals at the Access Door and Mid-Flight4 Jun 2026
- 2026Position: AI Governance Needs ISO-like Interoperability Protocols, Not Just Laws30 May 2026
- 2026Do Agents Know What They Can't Do? Evaluating Feasibility Awareness in Tool-Using Agents27 May 2026
- 2026Knowing When to Quit: A Principled Framework for Dynamic Abstention in LLM Reasoning20 Apr 2026
- 2026SoK: Security of Autonomous LLM Agents in Agentic Commerce15 Apr 2026
- 2026WebWorld: A Large-Scale World Model for Web Agent Training16 Feb 2026
- 2026Safety Training May Persist Through Helpfulness Optimization in LLM Agents13 Feb 2026
- 2026LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios3 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025When Refusals Fail: Unstable Safety Mechanisms in Long-Context LLM Agents
- 2026The Cold-Start Safety Gap in LLM Agents
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents
- 2026Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
- 2025SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals
- 2026The Causal Impact of Tool Affordance on Safety Alignment in LLM Agents
- 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents