mlsanityData to 14 Oct 2026

Beyond Component Testing: Validating Agentic AI Systems

arXiv 2607.29405 ↗First posted 31 Jul 2026cs.AI cs.MA cs.SEcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Agentic AI systems act through multi-step trajectories that combine planning, tool use, memory, interaction, and adaptation. This behavior stretches validation practice beyond component testing and one-shot input-output evaluation, because acceptable system behavior now depends on how decisions unfold over time and under changing environmental conditions. This systematic mapping study synthesizes 262 papers spanning agent evaluation, software assurance, cyber-physical systems, runtime monitoring, and regulatory guidance in order to characterize the validation problem for agentic systems. The review is organized around a five-dimension taxonomy covering behavioral, safety, temporal, regulatory, and multi-agent concerns, and uses that taxonomy to map current approaches and identify dense and sparse pairings of approaches and dimensions. The resulting map shows that the literature concentrates on behavioral evaluation (105 of 262 papers) and is thinnest on temporal validity (14 papers); regulatory work rests mainly on assurance cases and regulatory analysis, largely from IEEE-indexed venues, and multi-agent work mainly on benchmarks. Three cross-domain case studies (medical care, industrial operations, smart-mobility systems) provide operational illustrations of how the five taxonomy dimensions recur in safety-critical settings, motivated by the failure patterns documented in the reviewed literature. The paper concludes with a lifecycle-oriented research agenda centered on bounded-autonomy specifications, adversarial trajectory generation, runtime monitoring, and audit-ready evidence structures. The central claim is that trustworthy deployment of agentic AI depends on validating trajectories in context rather than assessing isolated components alone.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 46 of its 200 references that are in the map. First posted on arXiv 31 Jul 2026.

Builds on

46 of 200 references.

Closest ancestors · 9

Same direction, newest first

  1. 2026TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems16 Mar
  2. 2025Toward Trustworthy Agentic AI: A Multimodal Framework for Preventing Prompt Injection Attacks29 Dec
  3. 2025AGENTSAFE: A Unified Framework for Ethical Assurance and Governance in Agentic AI2 Dec
  4. 2025AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models30 Sep
  5. 2025AgentGuard: Runtime Verification of AI Agents28 Sep
  6. 2025G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems16 Feb
  7. 2025RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage13 Feb
  8. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
  9. 2024AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents19 Jun

Other references · 37

  1. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  2. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
  3. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
  4. 2022Language Models (Mostly) Know What They Knowcited by 1,856
  5. 2016Concrete Problems in AI Safetycited by 1,642
  6. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  7. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
  8. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
  9. 2023AgentBench: Evaluating LLMs as Agentscited by 1,267
  10. 2025Why Do Multi-Agent LLM Systems Fail?cited by 604
  11. 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
  12. 2018AI safety via debatecited by 400
25 more
  1. 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 339
  2. 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Taskscited by 326
  3. 2025Large Language Model Agent: A Survey on Methodology, Applications and Challengescited by 205
  4. 2025Survey on Evaluation of LLM-based Agentscited by 204
  5. 2023Data-centric Artificial Intelligence: A Surveycited by 203
  6. 2025SWE-rebench: An Automated Pipeline for Task Collection and Decontaminated Evaluation of Software Engineering Agentscited by 142
  7. 2026Agentic Harness Engineering: Observability-Driven Automatic Evolution of Coding-Agent Harnessescited by 142
  8. 2025Towards a Science of Scaling Agent Systemscited by 138
  9. 2022Holistic Evaluation of Language Modelscited by 131
  10. 2018Troubling Trends in Machine Learning Scholarshipcited by 108
  11. 2025ITBench: Evaluating AI Agents across Diverse Real-World IT Automation Taskscited by 51
  12. 2025Agentic AI: A Comprehensive Survey of Architectures, Applications, and Future Directionscited by 48
  13. 2021Guidance on the Assurance of Machine Learning in Autonomous Systems (AMLAS)cited by 42
  14. 2025LLM-Based Human-Agent Collaboration and Interaction Systems: A Surveycited by 29
  15. 2026Agent Drift: Quantifying Behavioral Degradation in Multi-Agent LLM Systems Over Extended Interactionscited by 28
  16. 2020Avoiding Side Effects in Complex Environmentscited by 24
  17. 2026Effective Strategies for Asynchronous Software Engineering Agentscited by 16
  18. 2026Autogenesis: A Self-Evolving Agent Protocolcited by 13
  19. 2024Decentralized Governance of Autonomous AI Agentscited by 12
  20. 2025Memory-T1: Reinforcement Learning for Temporal Reasoning in Multi-session Agentscited by 11
  21. 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systemscited by 8
  22. 2016Limits to Verification and Validation of Agentic Behaviorcited by 3
  23. 2023Reactive Multi-agent Coordination using Auction-based Task Allocation and Behavior Treescited by 3
  24. 2026Verifiable Semantics for Agent-to-Agent Communicationcited by 2
  25. 2025Agentic Temporal Graph of Reasoning with Multimodal Language Models: A Potential AI Aid to Healthcarecited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI
  2. 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control
  3. 2026Position: Behavioral Systems Require Behavioral Tests
  4. 2026The Rise of Agentic Testing: Multi-Agent Systems for Robust Software Quality Assurance
  5. 2025Architectures for Building Agentic AI
  6. 2026MAS-Lab: A Specification-Driven Validation Framework for Reliable Multi-Agent Systems
  7. 2026Towards Risk-free AI Agent Deployment
  8. 2025An Approach to Checking Correctness for Agentic Systems