Agentic Data Environments
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Autonomous agents promise substantial gains in speed, scale, and labor efficiency, but their failures can impose abrupt and often irreversible costs. The central challenge for agentic automation is therefore to increase the benefits of automation while bounding the consequences of failure. While databases remain central to modern computing, agents operate over a broader data environment spanning files, APIs, applications, and system state. In this talk, I will outline early work on Agentic Data Environments -- the execution substrate in which agents operate -- that both amplify agent capabilities and enforce safety guarantees. This perspective reframes data systems from passive stores of state into active substrates for safe, reliable execution.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 26 of its 50 references that are in the map. First posted on arXiv 8 Jul 2026.
Builds on
26 of 50 references.
Closest ancestors · 1
Same direction, newest first
Other references · 25
- 2017Attention Is All You Needcited by 59,932
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
- 2023Reasoning with Language Model is Planning with World Modelcited by 846
- 2024Evaluating Very Long-Term Conversational Memory of LLM Agentscited by 800
- 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 722
- 2023Can LLM Already Serve as A Database Interface? A BIg Bench for Large-Scale Database Grounded Text-to-SQLscited by 667
- 2024LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memorycited by 656
- 2023ViperGPT: Visual Inference via Python Execution for Reasoningcited by 591
13 more
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 515
- 2015Compositional Semantic Parsing on Semi-Structured Tablescited by 509
- 2025Agentic Context Engineering: Evolving Contexts for Self-Improving Language Modelscited by 349
- 2024Spider 2.0: Evaluating Language Models on Real-World Enterprise Text-to-SQL Workflowscited by 223
- 2021FeTaQA: Free-form Table Question Answeringcited by 174
- 2021Open Domain Question Answering over Tables via Dense Retrievalcited by 74
- 2024ShieldLM: Empowering LLMs as Aligned, Customizable and Explainable Safety Detectorscited by 48
- 2025General Agentic Memory Via Deep Researchcited by 42
- 2017Practical Whole-System Provenance Capturecited by 19
- 2026AgentSM: Semantic Memory for Agentic Text-to-SQLcited by 14
- 2026Pervasive Annotation Errors Break Text-to-SQL Benchmarks and Leaderboardscited by 12
- 2026Arming Data Agents with Tribal Knowledgecited by 6
- 2025Toward Systems Foundations for Agentic Explorationcited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Safe, Untrusted, "Proof-Carrying" AI Agents: toward the agentic lakehouse
- 2026Data Agents: Agentic Data Systems
- 2026The Importance of Out-of-Band Metadata for Safe Autonomous Agents: The Redpanda Agentic Data Plane
- 2026Environment Steering: Using Data Flow Control to Improve Agent Utility and Safety
- 2026A Contract-Centered Architecture for Scalable and Manageable Agentic Runtimes
- 2025What's the next frontier for Data-centric AI? Data Savvy Agents
- 2026Agent Operating Systems (AOS): Integrating Agentic Control Planes into, and Beyond, Traditional Operating Systems
- 2025Systems Security Foundations for Agentic Computing