AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration

arXiv:2607.12058 · cs.SE, cs.AI, cs.CR · Submitted 2026-07-13 · Read on arXiv

Arastoo Zibaeirad, Marco Vieira, Thomas Zimmermann

cs.SE, cs.AI, cs.CR

Submitted: 2026-07-13

Code: https://github.com/Erroristotle/AutoTrace

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Verifier — 36× in this paper · explained in 2 episodes
• Benchmark — 16× in this paper · explained in 2 episodes
• Admissibility — 12× in this paper · explained in 2 episodes
• Verification — 10× in this paper · explained in 2 episodes
• Accuracy — 9× in this paper · explained in 1 episode
• Fidelity — 5× in this paper · explained in 2 episodes
• Trace — 5× in this paper · explained in 2 episodes
• Causal Reasoning — 4× in this paper · explained in 2 episodes
• Abstention — 3× in this paper · explained in 1 episode
• Analyzer — 3× in this paper · explained in 1 episode
• Ablation — 2× in this paper · explained in 1 episode
• Benchmarking — 2× in this paper · explained in 3 episodes
• Decode — 2× in this paper · explained in 2 episodes
• RAG — 2× in this paper · explained in 3 episodes
• Admissibility Conditions — 1× in this paper · explained in 1 episode
• Consistency — 1× in this paper · explained in 3 episodes
• Core — 1× in this paper · explained in 2 episodes
• Ensemble Learning — 1× in this paper · explained in 2 episodes
• Failure Modes — 1× in this paper · explained in 3 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• Provenance — 1× in this paper · explained in 4 episodes
• Transformer — 1× in this paper · explained in 2 episodes

Sources

• IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities
• RepoAudit: An Autonomous LLM-Agent for Repository-Level Code Auditing
• Trace Gadgets: Minimizing Code Context for Machine Learning-Based Vulnerability Prediction
• Utilizing Precise and Complete Code Context to Guide LLM in Automatic False Positive Mitigation

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties