mlsanityData to 14 Oct 2026

AgentTrace: A Structured Logging Framework for Agent System Observability

arXiv 2602.10133 ↗First posted 7 Feb 2026cs.SE cs.AIcited by 9

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Despite the growing capabilities of autonomous agents powered by large language models (LLMs), their adoption in high-stakes domains remains limited. A key barrier is security: the inherently nondeterministic behavior of LLM agents defies static auditing approaches that have historically underpinned software assurance. Existing security methods, such as proxy-level input filtering and model glassboxing, fail to provide sufficient transparency or traceability into agent reasoning, state changes, or environmental interactions. In this work, we introduce AgentTrace, a dynamic observability and telemetry framework designed to fill this gap. AgentTrace instruments agents at runtime with minimal overhead, capturing a rich stream of structured logs across three surfaces: operational, cognitive, and contextual. Unlike traditional logging systems, AgentTrace emphasizes continuous, introspectable trace capture, designed not just for debugging or benchmarking, but as a foundational layer for agent security, accountability, and real-time monitoring. Our research highlights how AgentTrace can enable more reliable agent deployment, fine-grained risk analysis, and informed trust calibration, thereby addressing critical concerns that have so far limited the use of LLM agents in sensitive environments.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 7 of its 11 references that are in the map. First posted on arXiv 7 Feb 2026.

Builds on

7 of 11 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025AgentSight: System-Level Observability for AI Agents Using eBPF2 Aug

Other references · 6

  1. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  2. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  3. 2024AgentOps: Enabling Observability of LLM Agentscited by 46
  4. 2024Agent Design Pattern Catalogue: A Collection of Architectural Patterns for Foundation Model based Agentscited by 35
  5. 2024LLMGuard: Guarding Against Unsafe LLM Behaviorcited by 13
  6. 2024Watson: A Cognitive Observability Framework for the Reasoning of LLM-Powered Agentscited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 9.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Towards Security-Auditable LLM Agents: A Unified Graph Representation
  2. 2026ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents
  3. 2025Verifiability-First Agents: Provable Observability and Lightweight Audit Agents for Controlling Autonomous LLM Systems
  4. 2026Observability for Delegated Execution in Agentic AI Systems
  5. 2024AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems
  6. 2026AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems
  7. 2025AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration
  8. 2026A2E : An End-to-End Agent Auditing Engine