mlsanityData to 14 Oct 2026

Responsible Agentic AI Requires Explicit Provenance

arXiv 2605.17169 ↗First posted 16 May 2026cs.AI cs.CL cs.MAcited by 3

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Agentic AI is rapidly proliferating across diverse real-world domains such as software engineering, yet public trust has not kept pace. The central reason is that responsibility, despite being widely discussed, remains a subjective and unenforced concept, as no current agentic framework produces the quantifiable, traceable, and interventionable provenance needed to assign it when harm emerges from compositions no single party designed. We position that what is missing is not better benchmark-level evaluation but explicit provenance across the full agentic lifecycle, which is the only viable basis for making responsibility computable and actionable. We advance this agenda along four axes: establishing textitwhy such provenance is a structural necessity by identifying responsibility gaps across sociotechnical dimensions, formalizing textitwhat it must encode through a causal attribution function and responsibility tensor, discussing textithow it can be made computable across four lifecycle layers with preliminary experiments showing that provenance is estimable and interveneable online before irreversible harm accumulates, and examining textitwho bears responsibility through a concrete agentic incident. Explicit provenance is not a discretionary refinement but the necessary condition for responsible agentic AI, and no stakeholder across its ecosystem can afford to treat it as optional.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 49 of its 74 references that are in the map. First posted on arXiv 16 May 2026.

Builds on

49 of 74 references.

Closest ancestors · 9

Same direction, newest first

  1. 2026SkillProbe: Security Auditing for Emerging Agent Skill Marketplaces via Multi-Agent Collaboration22 Mar
  2. 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems19 Feb
  3. 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage4 Jan
  4. 2025Tapas Are Free! Training-Free Adaptation of Programmatic Agents via LLM-Guided Program Synthesis in Dynamic Environments15 Aug
  5. 2025OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents17 Jun
  6. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
  7. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents5 Mar
  8. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents18 Jan
  9. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 40

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  5. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  6. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  7. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  8. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
  9. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
  10. 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
  11. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  12. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
28 more
  1. 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 627
  2. 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 585
  3. 2021Causal Abstractions of Neural Networkscited by 422
  4. 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 384
  5. 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Taskscited by 326
  6. 2026SkillsBench: Benchmarking How Well Agent Skills Work Across Diverse Taskscited by 315
  7. 2022Conformal Risk Controlcited by 299
  8. 2022FreeMatch: Self-adaptive Thresholding for Semi-supervised Learningcited by 232
  9. 2021Trustworthy AI: From Principles to Practicescited by 207
  10. 2025Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systemscited by 185
  11. 2023Harms from Increasingly Agentic Algorithmic Systemscited by 135
  12. 2026SoK: Agentic Skills -- Beyond Tool Use in LLM Agentscited by 130
  13. 2025AgenTracer: Who Is Inducing Failure in the LLM Agentic Systems?cited by 116
  14. 2024The Ethics of Advanced AI Assistantscited by 107
  15. 2021Trustworthy AI: A Computational Perspectivecited by 93
  16. 2022Picking on the Same Person: Does Algorithmic Monoculture lead to Outcome Homogenization?cited by 91
  17. 2024Safeguarding Large Language Models: A Surveycited by 78
  18. 2023GenAI Against Humanity: Nefarious Applications of Generative Artificial Intelligence and Large Language Modelscited by 42
  19. 2023Understanding accountability in algorithmic supply chainscited by 40
  20. 2024Large Language Models Portray Socially Subordinate Groups as More Homogeneous, Consistent with a Bias Observed in Humanscited by 31
  21. 2023Long-Term Fairness with Unknown Dynamicscited by 27
  22. 2024Out-of-Distribution Detection: A Task-Oriented Survey of Recent Advancescited by 26
  23. 2025Exploring the Potential of LLMs as Personalized Assistants: Dataset, Evaluation, and Analysiscited by 17
  24. 2026Audit Trails for Accountability in Large Language Modelscited by 12
  25. 2023Accountability in Offline Reinforcement Learning: Explaining Decisions with a Corpus of Examplescited by 9
  26. 2025Enhancing Robustness of LLM-Driven Multi-Agent Systems through Randomized Smoothingcited by 9
  27. 2025Stop Reducing Responsibility in LLM-Powered Multi-Agent Systems to Local Alignmentcited by 7
  28. 2023Unravelling Responsibility for AIcited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Correct Is Not Governed: Provenance Integrity in Agentic Workflows
  2. 2026Beyond Benchmark Islands: Toward Representative Trustworthiness Evaluation for Agentic AI
  3. 2026No One to Blame: A Framework of Constitutive AI Unaccountability
  4. 2026The Accountability Horizon: An Impossibility Theorem for Governing Human-Agent Collectives
  5. 2026Where Accountability Lives: Mapping Human Responsibility to Workflow Artifacts in Agentic Software Development
  6. 2026From Traceability to Justifiability: Accountability Structures in Agentic Software Engineering
  7. 2026Toward Safe and Responsible AI Agents: A Three-Pillar Model for Transparency, Accountability, and Trustworthiness
  8. 2026Making Agent-Mediated Contributions Governable: A Project-Level Governance Manifest for Open-Source AI Collaboration