mlsanityData to 14 Oct 2026

Check Yourself Before You Wreck Yourself: Selectively Quitting Improves LLM Agent Safety

arXiv 2510.16492 ↗First posted 18 Oct 2025cs.CLcited by 12

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As Large Language Model (LLM) agents increasingly operate in complex environments with real-world consequences, their safety becomes critical. While uncertainty quantification is well-studied for single-turn tasks, multi-turn agentic scenarios with real-world tool access present unique challenges where uncertainties and ambiguities compound, leading to severe or catastrophic risks beyond traditional text generation failures. We propose using "quitting" as a simple yet effective behavioral mechanism for LLM agents to recognize and withdraw from situations where they lack confidence. Leveraging the ToolEmu framework, we conduct a systematic evaluation of quitting behavior across 12 state-of-the-art LLMs. Our results demonstrate a highly favorable safety-helpfulness trade-off: agents prompted to quit with explicit instructions improve safety by an average of +0.39 on a 0-3 scale across all models (+0.64 for proprietary models), while maintaining a negligible average decrease of -0.03 in helpfulness. Our analysis demonstrates that simply adding explicit quit instructions proves to be a highly effective safety mechanism that can immediately be deployed in existing agent systems, and establishes quitting as an effective first-line defense mechanism for autonomous agents in high-stakes applications.

Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 20 references that are in the map. First posted on arXiv 18 Oct 2025.

Builds on

18 of 20 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator23 May
  2. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr
  3. 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar
  4. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 14

  1. 2025Qwen3 Technical Reportcited by 8,820
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  3. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  4. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
  5. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  6. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  7. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  8. 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
  9. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  10. 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 293
  11. 2023LM-Polygraph: Uncertainty Estimation for Language Modelscited by 131
  12. 2024A Survey on Uncertainty Quantification of Large Language Models: Taxonomy, Open Research Challenges, and Future Directionscited by 121
2 more
  1. 2025Uncertainty Quantification and Confidence Calibration in Large Language Models: A Surveycited by 95
  2. 2024Probabilities of Chat LLMs Are Miscalibrated but Still Predict Correctness on Multiple-Choice Q&Acited by 16

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 12.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025When Refusals Fail: Unstable Safety Mechanisms in Long-Context LLM Agents
  2. 2026The Cold-Start Safety Gap in LLM Agents
  3. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents
  4. 2026Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents
  5. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
  6. 2025SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals
  7. 2026The Causal Impact of Tool Affordance on Safety Alignment in LLM Agents
  8. 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents