Type-Checked Compliance: Deterministic Guardrails for Agentic Financial Systems Using Lean 4 Theorem Proving
On the map: LLM agents and tool use → Financial trading and forecasting agents
also in 1 more
Abstract (arXiv)
The rapid evolution of autonomous, agentic artificial intelligence within financial services has introduced an existential architectural crisis: large language models (LLMs) are probabilistic, non-deterministic systems operating in domains that demand absolute, mathematically verifiable compliance guarantees. Existing guardrail solutions -- including NVIDIA NeMo Guardrails and Guardrails AI -- rely on probabilistic classifiers and syntactic validators that are fundamentally inadequate for enforcing complex multi-variable regulatory constraints mandated by the SEC, FINRA, and OCC. This paper presents the Lean-Agent Protocol, a formal-verification-based AI guardrail platform that leverages the Aristotle neural-symbolic model developed by Harmonic AI to auto-formalize institutional policies into Lean 4 code. Every proposed agentic action is treated as a mathematical conjecture: execution is permitted if and only if the Lean 4 kernel proves that the action satisfies pre-compiled regulatory axioms. This architecture provides cryptographic-level compliance certainty at microsecond latency, directly satisfying SEC Rule 15c3-5, OCC Bulletin 2011-12, FINRA Rule 3110, and CFPB explainability mandates. A three-phase implementation roadmap from shadow verification through enterprise-scale deployment is provided.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Financial trading and forecasting agents, one of 16 directions in LLM agents and tool use. Builds on 12 of its 44 references that are in the map. First posted on arXiv 1 Apr 2026.
Builds on
12 of 44 references.
References · 12
- 2024Herald: A Natural Language Annotated Lean 4 Datasetcited by 59
- 2025VeriGuard: Enhancing LLM Agent Safety via Verified Code Generationcited by 49
- 2024Process-Driven Autoformalization in Lean 4cited by 45
- 2026Towards Verifiably Safe Tool Use for LLM Agentscited by 36
- 2025APOLLO: Automated LLM and Lean Collaboration for Advanced Formal Reasoningcited by 35
- 2025QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Languagecited by 18
- 2025Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expressioncited by 16
- 2025Systems Security Foundations for Agentic Computingcited by 13
- 2025Are LLMs Stable Formal Logic Translators in Logical Reasoning Across Linguistically Diversified Texts?cited by 5
- 2024Formalizing Automated Market Makers in the Lean 4 Theorem Provercited by 3
- 2025FastTTS: Accelerating Test-Time Scaling for Edge LLM Reasoningcited by 3
- 2026A Formal Approach to AMM Fee Mechanisms with Lean 4cited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Agentic AI for Financial Crime Compliance
- 2026PACE: Policy-Attested Contract Execution for Safe AI Agents in Decentralized Finance
- 2026Governing Agentic AI in FinTech
- 2025The Agentic Regulator: Risks for AI in Finance and a Proposed Agent-based Framework for Governance
- 2025VERAFI: Verified Agentic Financial Intelligence through Neurosymbolic Policy Generation
- 2026Authority-Inference Separation in Agentic Finance: First-Line Control, Blockchain Enforcement, and Replayable Assurance
- 2026Harness as an Asset: Enforcing Determinism via the Convergent AI Agent Framework (CAAF)
- 2026Mint-Agent: Introducing Finance-Native Agentic Foundation Models