AGENTSAFE: A Unified Framework for Ethical Assurance and Governance in Agentic AI
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The rapid deployment of large language model (LLM)-based agents introduces a new class of risks, driven by their capacity for autonomous planning, multi-step tool integration, and emergent interactions. It raises some risk factors for existing governance approaches as they remain fragmented: Existing frameworks are either static taxonomies driven; however, they lack an integrated end-to-end pipeline from risk identification to operational assurance, especially for an agentic platform. We propose AGENTSAFE, a practical governance framework for LLM-based agentic systems. The framework operationalises the AI Risk Repository into design, runtime, and audit controls, offering a governance framework for risk identification and assurance. The proposed framework, AGENTSAFE, profiles agentic loops (plan -> act -> observe -> reflect) and toolchains, and maps risks onto structured taxonomies extended with agent-specific vulnerabilities. It introduces safeguards that constrain risky behaviours, escalates high-impact actions to human oversight, and evaluates systems through pre-deployment scenario banks spanning security, privacy, fairness, and systemic safety. During deployment, AGENTSAFE ensures continuous governance through semantic telemetry, dynamic authorization, anomaly detection, and interruptibility mechanisms. Provenance and accountability are reinforced through cryptographic tracing and organizational controls, enabling measurable, auditable assurance across the lifecycle of agentic AI systems. The key contributions of this paper are: (1) a unified governance framework that translates risk taxonomies into actionable design, runtime, and audit controls; (2) an Agent Safety Evaluation methodology that provides measurable pre-deployment assurance; and (3) a set of runtime governance and accountability mechanisms that institutionalise trust in agentic AI ecosystems.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 2 of its 4 references that are in the map. First posted on arXiv 2 Dec 2025.
Builds on
2 of 4 references.
Closest ancestors · 2
Same direction, newest first
Built on by
Citing papers per year: 2026: 9.
9 papers.
- 2026Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agentscited by 18
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 9
- 2026Faramesh: A Protocol-Agnostic Execution Control Plane for Autonomous Agent Systemscited by 4
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systemscited by 2
- 2026When Agent Automation Becomes Profitable: Quantifying and Insuring Autonomous AI Risk through Trace-Economic Underwritingcited by 2
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Networkcited by 1
- 2026From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computerscited by 0
- 2026Beyond Component Testing: Validating Agentic AI Systemscited by 0
- 2026A Policy Algebra for Trust-Preserving Agentic AI Executioncited by 0
- 2026A Policy Algebra for Trust-Preserving Agentic AI Execution17 Aug 2026
- 2026Beyond Component Testing: Validating Agentic AI Systems31 Jul 2026
- 2026When Agent Automation Becomes Profitable: Quantifying and Insuring Autonomous AI Risk through Trace-Economic Underwriting15 Jun 2026
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systems26 May 2026
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Network25 May 2026
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework25 Apr 2026
- 2026From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers20 Apr 2026
- 2026Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agents25 Feb 2026
- 2026Faramesh: A Protocol-Agnostic Execution Control Plane for Autonomous Agent Systems25 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective
- 2025A Safety and Security Framework for Real-World Agentic Systems
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security
- 2025With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems
- 2025AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models
- 2026Building the ethical AI framework of the future: from philosophy to practice
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges