Near-Miss: Latent Policy Failure Detection in Agentic Workflows
On the map: LLM agents and tool use → Software engineering coding agents
Abstract (arXiv)
Agentic systems for business process automation often require compliance with policies governing conditional updates to the system state. Evaluation of policy adherence in LLM-based agentic workflows is typically performed by comparing the final system state against a predefined ground truth. While this approach detects explicit policy violations, it may overlook a more subtle class of issues in which agents bypass required policy checks, yet reach a correct outcome due to favorable circumstances. We refer to such cases as near-misses or latent failures. In this work, we introduce a novel metric for detecting latent policy failures in agent conversations traces. Building on the ToolGuard framework, which converts natural-language policies into executable guard code, our method analyzes agent trajectories to determine whether agent's tool-calling decisions where sufficiently informed. We evaluate our approach on the τ2-verified Airlines benchmark across several contemporary open and proprietary LLMs acting as agents. Our results show that latent failures occur in 8-17% of trajectories involving mutating tool calls, even when the final outcome matches the expected ground-truth state. These findings reveal a blind spot in current evaluation methodologies and highlight the need for metrics that assess not only final outcomes but also the decision process leading to them.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 9 of its 26 references that are in the map. First posted on arXiv 31 Mar 2026.
Builds on
9 of 26 references.
Closest ancestors · 1
Same direction, newest first
Other references · 8
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
- 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 196
- 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 182
- 2024CRMArena: Understanding the Capacity of LLM Agents to Perform Professional CRM Tasks in Realistic Environmentscited by 69
- 2025Towards Enforcing Company Policy Adherence in Agentic Workflowscited by 17
- 2025Effective Red-Teaming of Policy-Adherent Agentscited by 10
- 2025ARPaCCino: An Agentic-RAG for Policy as Code Compliancecited by 4
- 2025TOD-ProcBench: Benchmarking Complex Instruction-Following in Task-Oriented Dialoguescited by 2
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026PolicyGuard: A Dialogue-Grounded Sub-Agent Verifier for Policy Adherence in LLM Agentscited by 5
- 2026PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM Agentscited by 2
- 2026Policy Loopholes in Agent Evaluation: When Policy Ambiguity Masquerades as Agent Errorcited by 0
- 2026Authorization Closure Graph: Minimal Repair for LLM Agents with Evolving User Instructionscited by 0
- 2026Authorization Closure Graph: Minimal Repair for LLM Agents with Evolving User Instructions26 Sep 2026
- 2026Policy Loopholes in Agent Evaluation: When Policy Ambiguity Masquerades as Agent Error13 Sep 2026
- 2026PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM Agents20 Aug 2026
- 2026PolicyGuard: A Dialogue-Grounded Sub-Agent Verifier for Policy Adherence in LLM Agents28 Jun 2026
Similar, not cited
Close in wording, no citation either way
- 2026AgentProcessBench: Diagnosing Step-Level Process Quality in Tool-Using Agents
- 2026Willful Disobedience: Automatically Detecting Failures in Agentic Traces
- 2026Compositional Policy Violations: When Step-Level Compliance Fails In Agentic AI Workflows
- 2026AgentFixer: From Failure Detection to Fix Recommendations in LLM Agentic Systems
- 2026When Agents Fail to Act: A Diagnostic Framework for Tool Invocation Reliability in Multi-Agent LLM Systems
- 2026PolicyBank: Evolving Policy Understanding for LLM Agents
- 2026ToolMisuseBench: An Offline Deterministic Benchmark for Tool Misuse and Recovery in Agentic Systems
- 2025An Approach to Checking Correctness for Agentic Systems