Typed Federated Artifacts for the Agentic Web:Sharing Tool-Routing Knowledge Across Frozen,Heterogeneous LLM Agents
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
An open, networked web will allow agents to run frozen models from multiple vendors, keep their history private, and teach each other which tool to call and when. Flat text (prompts, example pools) makes it difficult for the protocol to distinguish between noise statistics, merging rules, and documentation. Weights and adapters cannot transfer that knowledge between platforms. We suggest sharing typed federated artifacts, schema-validated objects with well-defined fields for per-field privacy (described here, but measured), dispute resolution, and cross-model transfer, and instantiating them as SYNAPSE1, a common tool-routing knowledge. After deleting 192 garbage entries and 1,916 training items that duplicate or almost duplicate test queries, a federated compendium routes within 1.1 points of a centralized one at 20 MB of JSON per client each round on StableToolBench (3,180 tools). The same experience merged and shown to the router as typed fields rather than one flat string is worth 8.5 points on clean data and 7.4 under 60% injected contradiction. Crossing merge and rendering shows the halves are inseparable (the typed merge shown flat is the worst arm), while three conflict policies are indistinguishable, so the conflict log that motivated this work is not the On τ-bench retail, each compendium arm improves GPT-4o agents' per-step tool-call accuracy by at least 6.7 points, attributed to format rather than federated experience. Two cautionary findings conclude the paper: on a topic-labeled math proxy and StableToolBench, a TF-IDF classifier over the same labeled experience beats every LLM routing arm (by 48 and 26 points, mostly retrieval recall) because the benchmark's pool holds labeled queries for every supposedly unseen tool and every test query verbatim before our filter. It cannot measure routing to tools without labels, which routing exists for.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 10 of its 10 references that are in the map. First posted on arXiv 6 Sep 2026.
Builds on
10 of 10 references.
References · 10
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
- 2023FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learningcited by 149
- 2024OpenFedLLM: Training Large Language Models on Decentralized Private Data via Federated Learningcited by 128
- 2025Establishing Best Practices for Building Rigorous Agentic Benchmarkscited by 102
- 2024C-FedRAG: A Confidential Federated Retrieval-Augmented Generation Systemcited by 19
- 2025Can Textual Gradient Work in Federated Learning?cited by 15
- 2024Federated In-Context LLM Agent Learningcited by 10
- 2025Federated In-Context Learning: Iterative Refinement for Improved Answer Qualitycited by 8
- 2026Benchmarking the Benchmarks: A Validity Audit of Tool-Calling Evaluationcited by 8
- 2026Federate the Router: Learning Language Model Routers with Sparse and Decentralized Evaluationscited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Data Facts: A Metadata Schema for Structured Data Exchange in the NANDini Multi-Agent Ecosystem ↗
- 2026SPA: Securing Persistent LLM Agents Across Queries with Plan-First Information-Flow Control
- 2026SchemaRouter: Field-Aware Tool Routing for Efficient Heterogeneous Agentic RAG
- 2026TSCG: Deterministic Tool-Schema Compilation for Agentic LLM Deployments
- 2026From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions
- 2026Tool Forge: A Validation-Carrying Toolchain for Governed Agentic Execution
- 2026FedWorld: Scope-Aware Federation of Agent World Models
- 2026Evaluating Tool Cloning in Agentic-AI Ecosystems