mlsanityData to 7 Oct 2026

Near-Miss: Latent Policy Failure Detection in Agentic Workflows

arXiv 2603.29665 ↗First posted 31 Mar 2026cs.CLcited by 4

On the map: LLM agents and tool use → Software engineering coding agents

Abstract (arXiv)

Agentic systems for business process automation often require compliance with policies governing conditional updates to the system state. Evaluation of policy adherence in LLM-based agentic workflows is typically performed by comparing the final system state against a predefined ground truth. While this approach detects explicit policy violations, it may overlook a more subtle class of issues in which agents bypass required policy checks, yet reach a correct outcome due to favorable circumstances. We refer to such cases as near-misses or latent failures. In this work, we introduce a novel metric for detecting latent policy failures in agent conversations traces. Building on the ToolGuard framework, which converts natural-language policies into executable guard code, our method analyzes agent trajectories to determine whether agent's tool-calling decisions where sufficiently informed. We evaluate our approach on the τ2-verified Airlines benchmark across several contemporary open and proprietary LLMs acting as agents. Our results show that latent failures occur in 8-17% of trajectories involving mutating tool calls, even when the final outcome matches the expected ground-truth state. These findings reveal a blind spot in current evaluation methodologies and highlight the need for metrics that assess not only final outcomes but also the decision process leading to them.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 9 of its 26 references that are in the map. First posted on arXiv 31 Mar 2026.

Builds on

9 of 26 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025SABER: Small Actions, Big Errors -- Safeguarding Mutating Steps in LLM Agents26 Nov

Other references · 8

  1. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
  2. 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 196
  3. 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 182
  4. 2024CRMArena: Understanding the Capacity of LLM Agents to Perform Professional CRM Tasks in Realistic Environmentscited by 69
  5. 2025Towards Enforcing Company Policy Adherence in Agentic Workflowscited by 17
  6. 2025Effective Red-Teaming of Policy-Adherent Agentscited by 10
  7. 2025ARPaCCino: An Agentic-RAG for Policy as Code Compliancecited by 4
  8. 2025TOD-ProcBench: Benchmarking Complex Instruction-Following in Task-Oriented Dialoguescited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026AgentProcessBench: Diagnosing Step-Level Process Quality in Tool-Using Agents
  2. 2026Willful Disobedience: Automatically Detecting Failures in Agentic Traces
  3. 2026Compositional Policy Violations: When Step-Level Compliance Fails In Agentic AI Workflows
  4. 2026AgentFixer: From Failure Detection to Fix Recommendations in LLM Agentic Systems
  5. 2026When Agents Fail to Act: A Diagnostic Framework for Tool Invocation Reliability in Multi-Agent LLM Systems
  6. 2026PolicyBank: Evolving Policy Understanding for LLM Agents
  7. 2026ToolMisuseBench: An Offline Deterministic Benchmark for Tool Misuse and Recovery in Agentic Systems
  8. 2025An Approach to Checking Correctness for Agentic Systems