mlsanityData to 7 Oct 2026

Trajectory Guard -- A Lightweight, Sequence-Aware Model for Real-Time Anomaly Detection in Agentic AI

arXiv 2601.00516 ↗First posted 2 Jan 2026cs.LG cs.AIcited by 10

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Autonomous LLM agents generate multi-step action plans that can fail due to contextual misalignment or structural incoherence. Existing anomaly detection methods are ill-suited for this challenge: mean-pooling embeddings dilutes anomalous steps, while contrastive-only approaches ignore sequential structure. Standard unsupervised methods on pre-trained embeddings achieve F1-scores no higher than 0.69. We introduce Trajectory Guard, a Siamese Recurrent Autoencoder with a hybrid loss function that jointly learns task-trajectory alignment via contrastive learning and sequential validity via reconstruction. This dual objective enables unified detection of both "wrong plan for this task" and "malformed plan structure." On benchmarks spanning synthetic perturbations and real-world failures from security audits (RAS-Eval) and multi-agent systems (Who&When), we achieve F1-scores of 0.88-0.94 on balanced sets and recall of 0.86-0.92 on imbalanced external benchmarks. At 32 ms inference latency, our approach runs 17-27× faster than LLM Judge baselines, enabling real-time safety verification in production deployments.

Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 4 of its 13 references that are in the map. First posted on arXiv 2 Jan 2026.

Builds on

4 of 13 references.

References · 4

  1. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  2. 2020ColBERT: Efficient and Effective Passage Search via Contextualized Late Interaction over BERTcited by 1,160
  3. 2024Agent-as-a-Judge: Evaluate Agents with Agentscited by 223
  4. 2021Anomaly Detection in Multi-Agent Trajectories for Automated Drivingcited by 15

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 10.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling
  2. 2026TRACE: Trajectory Reasoning through Adaptive Cross-Step Evidence Aggregation for LLM Agents
  3. 2025Intention-aware Hierarchical Diffusion Model for Long-term Trajectory Anomaly Detection
  4. 2025Detecting Silent Failures in Multi-Agentic AI Trajectories
  5. 2026StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing
  6. 2026Agent-ToM: Learning to Monitor Autonomous LLM Agents via Theory-of-Mind Reasoning
  7. 2026TrajAD: Trajectory Anomaly Detection for Trustworthy LLM Agents
  8. 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Data