mlsanityData to 7 Oct 2026

An Evidence Model for Agentic Processes: Evidence Claims, Trust Assumptions, and Policy Assessment

arXiv 2609.08481 ↗First posted 8 Sep 2026cs.CRcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Agentic AI systems increasingly exchange messages, invoke tools, request approvals, hold structured decision sessions, and modify shared artifacts. Logs and anchors can make selected records tamper-evident, but they can also mislead if their evidentiary meaning is implicit: a hash does not establish semantic truth, a signature does not establish authorization, and an external anchor does not establish capture completeness. This paper proposes an evidence claim model for agentic processes. It distinguishes artifact integrity, temporal existence, provenance, approval evidence, declared ordering, capture claim, relevance claim, deliberation traceability, monitoring claim, anchoring authorization claim, policy assessment claim, risk treatment claim, mitigation implementation claim, and management response claim. Semantic validity is treated as a recurring limitation. The model maps these claims to mechanisms, assumptions, limitations, and threats, and situates them in an agent organization with functional CEO agent, executive, operational, evidence, and audit roles, plus a plan-do-check-act-inspired management response loop. The contribution is conceptual: it does not validate a particular implementation, prevent all failures, or automate legal compliance. It provides a vocabulary for stating which claims an agentic black box can support, which claims it cannot establish, and which controls are required around it.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 2 of its 12 references that are in the map. First posted on arXiv 8 Sep 2026.

Builds on

2 of 12 references.

Closest ancestors · 1

Same direction, newest first

  1. 2026A Black Box for Agentic Processes: Blockchain-Anchored Evidence for AI Agent Communication, Human Oversight, and GRC Audits3 Sep

Other references · 1

  1. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026When Agentic Trust Crosses Organizational Boundaries: Structural Externalization and a Reference Model for Trust Evidence
  2. 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents
  3. 2026Decision Evidence Maturity Model for Agentic AI: A Property-Level Method Specification
  4. 2026A Policy Algebra for Trust-Preserving Agentic AI Execution
  5. 2026Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI
  6. 2026Correct Is Not Governed: Provenance Integrity in Agentic Workflows
  7. 2026From Runtime Records to Legal Findings: An Evidentiary-Adequacy Criterion for Agentic AI Oversight
  8. 2026Partial Evidence Bench: Benchmarking Authorization-Limited Evidence in Agentic Systems