Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales

arXiv:2607.25364 · cs.AI, cs.SE · Submitted 2026-07-28 · Read on arXiv

cs.AI, cs.SE

Submitted: 2026-07-28

Updated: 2026-09-18

Comments: 26 pages, 1 figure, 15 tables, and 2 listings. Literature and positioning updated; technical results and the arXiv identifier remain unchanged

Project page: https://cposkitt.github.io/files/publications/agentspec

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Verifier — 24× in this paper · explained in 2 episodes
• Provenance — 21× in this paper · explained in 4 episodes
• Ablation — 9× in this paper · explained in 1 episode
• Adaptation — 9× in this paper · explained in 1 episode
• Trace — 9× in this paper · explained in 2 episodes
• Benchmark — 8× in this paper · explained in 2 episodes
• Interpretability — 6× in this paper · explained in 15 episodes
• AI Agents — 5× in this paper · explained in 2 episodes
• Explanation-Bound Tool Execution — 5× in this paper
• Actor — 3× in this paper · explained in 3 episodes
• Introspection — 3× in this paper · explained in 2 episodes
• Abstraction — 2× in this paper · explained in 1 episode
• Aggregation — 2× in this paper · explained in 1 episode
• Core — 2× in this paper · explained in 2 episodes
• International Conference on Software Engineering — 2× in this paper
• Reasoning Traces — 2× in this paper · explained in 3 episodes
• Accountability — 1× in this paper · explained in 2 episodes
• Agentic System — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Chain-of-Thought Prompting — 1× in this paper · explained in 2 episodes
• Conference on Secure and Trustworthy Machine Learning — 1× in this paper
• Consistency — 1× in this paper · explained in 3 episodes
• Failure Modes — 1× in this paper · explained in 3 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Information Leakage — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• Measuring Faithfulness in Chain-of-Thought Reasoning
• Dissociation of Faithful and Unfaithful Reasoning in LLMs
• Auditable Agents
• Agent Audit: A Security Analysis System for LLM Agent Applications
• Intent-Governed Tool Authorization for AI Agents
• Defeating Prompt Injections by Design
• Securing AI Agents with Information-Flow Control

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
• VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection