AgentTrace: A Structured Logging Framework for Agent System Observability
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Despite the growing capabilities of autonomous agents powered by large language models (LLMs), their adoption in high-stakes domains remains limited. A key barrier is security: the inherently nondeterministic behavior of LLM agents defies static auditing approaches that have historically underpinned software assurance. Existing security methods, such as proxy-level input filtering and model glassboxing, fail to provide sufficient transparency or traceability into agent reasoning, state changes, or environmental interactions. In this work, we introduce AgentTrace, a dynamic observability and telemetry framework designed to fill this gap. AgentTrace instruments agents at runtime with minimal overhead, capturing a rich stream of structured logs across three surfaces: operational, cognitive, and contextual. Unlike traditional logging systems, AgentTrace emphasizes continuous, introspectable trace capture, designed not just for debugging or benchmarking, but as a foundational layer for agent security, accountability, and real-time monitoring. Our research highlights how AgentTrace can enable more reliable agent deployment, fine-grained risk analysis, and informed trust calibration, thereby addressing critical concerns that have so far limited the use of LLM agents in sensitive environments.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 7 of its 11 references that are in the map. First posted on arXiv 7 Feb 2026.
Builds on
7 of 11 references.
Closest ancestors · 1
Same direction, newest first
Other references · 6
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024AgentOps: Enabling Observability of LLM Agentscited by 46
- 2024Agent Design Pattern Catalogue: A Collection of Architectural Patterns for Foundation Model based Agentscited by 35
- 2024LLMGuard: Guarding Against Unsafe LLM Behaviorcited by 13
- 2024Watson: A Cognitive Observability Framework for the Reasoning of LLM-Powered Agentscited by 8
Built on by
Citing papers per year: 2026: 9.
9 papers.
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 37
- 2026Detecting Safety Violations Across Many Agent Tracescited by 14
- 2026Repair or Resample? Rethinking Failure Debugging in LLM Multi-Agent Systemscited by 3
- 2026View-oriented Conversation Compiler for Agent Trace Analysiscited by 2
- 2026The Importance of Out-of-Band Metadata for Safe Autonomous Agents: The Redpanda Agentic Data Planecited by 1
- 2026Toward Measuring Structural Drift in LLM Communication Loopscited by 0
- 2026Agent-Native Telemetry: Verifiable State-Delta Evidence for Autonomous Operationscited by 0
- 2026DNative-Twin: Decision Graphs and Digital Twins for Reconstructable Agentic Decisionscited by 0
- 2026Credit Where It Matters: Dependency-Aware Policy Optimization for Terminal Agentscited by 0
- 2026Credit Where It Matters: Dependency-Aware Policy Optimization for Terminal Agents2 Oct 2026
- 2026DNative-Twin: Decision Graphs and Digital Twins for Reconstructable Agentic Decisions3 Sep 2026
- 2026Repair or Resample? Rethinking Failure Debugging in LLM Multi-Agent Systems26 Aug 2026
- 2026Agent-Native Telemetry: Verifiable State-Delta Evidence for Autonomous Operations17 Aug 2026
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents3 Jun 2026
- 2026The Importance of Out-of-Band Metadata for Safe Autonomous Agents: The Redpanda Agentic Data Plane27 May 2026
- 2026Detecting Safety Violations Across Many Agent Traces13 Apr 2026
- 2026View-oriented Conversation Compiler for Agent Trace Analysis31 Mar 2026
- 2026Toward Measuring Structural Drift in LLM Communication Loops18 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2026Towards Security-Auditable LLM Agents: A Unified Graph Representation
- 2026ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents
- 2025Verifiability-First Agents: Provable Observability and Lightweight Audit Agents for Controlling Autonomous LLM Systems
- 2026Observability for Delegated Execution in Agentic AI Systems
- 2024AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems
- 2026AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems
- 2025AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration
- 2026A2E : An End-to-End Agent Auditing Engine