Organizational Control Layer: Governance Infrastructure at the Execution Boundary of LLM Agent Systems
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
LLM-based agents are increasingly deployed in workflows where generated outputs may trigger state-changing actions, such as price offers, refunds, payments, or tool calls. This creates an execution-boundary problem: a platform must decide whether an agent's proposed action is authorized before the action is executed. We introduce the Organizational Control Layer (OCL), a model-agnostic governance layer that separates proposal generation from environment-facing execution. OCL intercepts generated actions, checks them against role, policy, and economic constraints, and either approves, revises, blocks, or escalates them without modifying the underlying LLM generator. We evaluate OCL on adversarial buyer--seller negotiation environments adapted from AgenticPay. Across multiple frontier LLM backends, OCL reduces observed unsafe executions from 88% to 0% while increasing valid success from 12% to 96%. Ablations show that this gain comes from combining pre-execution enforcement with structured recovery, rather than from prompting or blocking alone. These results suggest that deployment-grade LLM agent systems require explicit governance at the boundary between language generation and executable action.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 22 of its 45 references that are in the map. First posted on arXiv 3 Jun 2026.
Builds on
22 of 45 references.
Closest ancestors · 5
Same direction, newest first
- 2025MARS: toward more efficient multi-agent collaboration for LLM reasoning24 Sep
- 2025MAS-ZERO: Designing Multi-Agent Systems with Zero Supervision21 May
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMs10 Jan
- 2024Proactive Agent: Shifting LLM Agents from Reactive Responses to Active Assistance16 Oct
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Society31 Mar
Other references · 17
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2025Defeating Prompt Injections by Designcited by 256
- 2024Cooperate or Collapse: Emergence of Sustainable Cooperation in a Society of LLM Agentscited by 120
- 2025ContextAgent: Context-Aware Proactive LLM Agents with Open-World Sensory Perceptionscited by 44
- 2025LLM Economist: Large Population Models and Mechanism Design in Multi-Agent Generative Simulacracited by 20
- 2025Towards Enforcing Company Policy Adherence in Agentic Workflowscited by 17
5 more
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2026Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agentscited by 12
- 2026AgenticPay: A Multi-Agent LLM Negotiation System for Buyer-Seller Transactionscited by 11
- 2025Evaluating Multi-Turn Bargain Skills in LLM-Based Seller Agentcited by 4
- 2026What Makes a Sale? Simulating End-to-End Seller--Buyer Retail Dynamics with LLM Agentscited by 2
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026Persona-Execution Separation: An Architecture Pattern for Evolving LLM Agents under Execution Auditcited by 0
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systemscited by 0
- 2026PRIMUS: Identity, Governance, and Verification for Multi-Agent Federationscited by 0
- 2026PRIMUS: Identity, Governance, and Verification for Multi-Agent Federations7 Sep 2026
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systems3 Sep 2026
- 2026Persona-Execution Separation: An Architecture Pattern for Evolving LLM Agents under Execution Audit27 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2026Coordination as an Architectural Layer for LLM-Based Multi-Agent Systems
- 2026Maat: Independent Deterministic Contract-Based Governance for Multi-Agent LLM Workflows
- 2026Governance by Construction for Generalist Agents
- 2026Agent libOS: A Runtime Substrate for Capability-Controlled Self-Evolving LLM Agents
- 2025Regulating the Agency of LLM-based Agents
- 2026Agentao: A Policy-Governed Runtime Harness for Embeddable Tool-Using LLM Agents
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective
- 2026Architectural Design, Not Only Model Intelligence, Governs Multi-Agent LLM Performance