What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents
DGX agentarXiv:2607.22868v1 Announce Type: new Abstract: Runtime guardrails act before irreversible tool calls, but their guarantees depend on what policy state is representable, what a judge observes, and whe