FormalJudge: A Neuro-Symbolic Paradigm for Agentic Oversight
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
As LLM-based agents increasingly operate in high-stakes domains with real-world consequences, ensuring their behavioral safety becomes paramount. The dominant oversight paradigm, LLM-as-a-Judge, faces a fundamental dilemma: how can probabilistic systems reliably supervise other probabilistic systems without inheriting their failure modes? We argue that formal verification offers a principled escape from this dilemma, yet its adoption has been hindered by a critical bottleneck: the translation from natural language requirements to formal specifications. This paper bridges this gap by proposing , a neuro-symbolic framework that employs a bidirectional Formal-of-Thought architecture: LLMs serve as specification compilers that top-down decompose high-level human intent into atomic, verifiable constraints, then bottom-up prove compliance using Dafny specifications and Z3 Satisfiability modulo theories solving, which produces mathematical guarantees rather than probabilistic scores. We validate across three benchmarks spanning behavioral safety, multi-domain constraint adherence, and agentic upward deception detection. Experiments on 7 agent models demonstrate that achieves an average improvement of 16.6% over LLM-as-a-Judge baselines, enables weak-to-strong generalization where a 7B judge achieves over 90% accuracy detecting deception from 72B agents, and provides near-linear safety improvement through iterative refinement.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 30 of its 45 references that are in the map. First posted on arXiv 11 Feb 2026.
Builds on
30 of 45 references.
Closest ancestors · 2
Same direction, newest first
- 2024The Fusion of Large Language Models and Formal Methods for Trustworthy AI Agents: A Roadmap9 Dec
- 2023A Survey on Large Language Model based Autonomous Agents22 Aug
Other references · 28
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 787
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 451
- 2023Logic-LM: Empowering Large Language Models with Symbolic Solvers for Faithful Logical Reasoningcited by 379
16 more
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2016Safety Verification of Deep Neural Networkscited by 262
- 2023AI Alignment: A Comprehensive Surveycited by 256
- 2024Foundational Challenges in Assuring Alignment and Safety of Large Language Modelscited by 193
- 2025Mobile-Agent-v3: Fundamental Agents for GUI Automationcited by 183
- 2023LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examplescited by 177
- 2023Solving Math Word Problems by Combining Language Models With Symbolic Solverscited by 124
- 2025Agent RL Scaling Law: Agent RL with Spontaneous Code Execution for Mathematical Problem Solvingcited by 62
- 2024Large Language Model Safety: A Holistic Surveycited by 56
- 2024Enchanting Program Specification Synthesis by Large Language Models using Static Analysis and Program Verificationcited by 55
- 2024SpecGen: Automated Generation of Formal Program Specifications via Large Language Modelscited by 51
- 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?cited by 23
- 2025Are Your Agents Upward Deceivers?cited by 11
- 2024Guiding Enumerative Program Synthesis with Large Language Modelscited by 9
- 2025HERMES: Towards Efficient and Verifiable Mathematical Reasoning in LLMscited by 8
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025ATA: A Neuro-Symbolic Approach to Implement Autonomous and Trustworthy Agents
- 2026Project Ariadne: A Structural Causal Framework for Auditing Faithfulness in LLM Agents
- 2025Evaluating LLM Agent Adherence to Hierarchical Safety Principles: A Lightweight Benchmark for Probing Foundational Controllability Components
- 2026Verify Before You Commit: Towards Faithful Reasoning in LLM Agents via Self-Auditing
- 2026Operational Hallucination and Safety Drift in AI Agents
- 2026Methods for Formal Verification of Agent Skills: Three Layers Toward a Mechanically Checkable Capability-Containment Proof
- 2026SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills
- 2026Closed-World Resolution Against Tool Hallucination in LLM Agents