Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Agentic AI systems plan, use tools, maintain state, and act across multi-step workflows with external effects, meaning trustworthy deployment can no longer be judged by task completion alone. The current literature remains fragmented across benchmark-centered evaluation, standards-based governance, orchestration architectures, and runtime assurance mechanisms. This paper contributes a bounded evidence synthesis across a manually coded corpus of twenty-four recent sources. The core finding is a governance-to-action closure gap: evaluation tells us whether outcomes were good, governance defines what should be allowed, but neither identifies where obligations bind to concrete actions or how compliance can later be proven. To close that gap, the paper introduces three linked artifacts: (1) a four-layer framework spanning evaluation, governance, orchestration, and assurance; (2) an ODTA runtime-placement test based on observability, decidability, timeliness, and attestability; and (3) a minimum action-evidence bundle for state-changing actions. Across sources, evaluation papers identify safety, robustness, and trajectory-level measurement as open gaps; governance frameworks define obligations but omit execution-time control logic; orchestration research positions the control plane as the locus of policy mediation, identity, and telemetry; runtime-governance work shows path-dependent behavior cannot be governed through prompts or static permissions alone; and action-safety studies show text alignment does not reliably transfer to tool actions. A worked enterprise procurement-agent scenario illustrates how these artifacts consolidate existing evidence without introducing new experimental data.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 13 of its 31 references that are in the map. First posted on arXiv 18 Apr 2026.
Builds on
13 of 31 references.
Closest ancestors · 7
Same direction, newest first
- 2026A Trace-Based Assurance Framework for Agentic AI Orchestration: Contracts, Testing, and Governance18 Mar
- 2026Runtime Governance for AI Agents: Policies on Paths17 Mar
- 2026AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security26 Jan
- 2026ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback15 Jan
- 2025WebGuard: Building a Generalizable Guardrail for Web Agents18 Jul
- 2025ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning26 Mar
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec
Other references · 6
- 2025Survey on Evaluation of LLM-based Agentscited by 190
- 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 169
- 2025Establishing Best Practices for Building Rigorous Agentic Benchmarkscited by 94
- 2026The Orchestration of Multi-Agent Systems: Architectures, Protocols, and Enterprise Adoptioncited by 13
- 2026General Agent Evaluationcited by 13
- 2026Proof-of-Guardrail in AI Agents and What (Not) to Trust from Itcited by 4
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Component Testing: Validating Agentic AI Systems
- 2025Beyond Accuracy: A Multi-Dimensional Framework for Evaluating Enterprise Agentic AI Systems
- 2026Evaluating Bounded Autonomy in Regulated Agentic AI: A Diagnostic Harness with Constitutional Rewards, Escalation Labels, and Runtime Governance
- 2026SARC: A Governance-by-Architecture Framework for Agentic AI Systems
- 2026Beyond Benchmark Islands: Toward Representative Trustworthiness Evaluation for Agentic AI
- 2026Runtime Governance for Agentic AI: Action-Boundary Control with Trusted Provenance and Fail-Closed Execution
- 2026Behavioral Governance for Autonomous AI Agents: The AgentBound Framework
- 2026The Controllability Trap: A Governance Framework for Military AI Agents