ActGov: Governing LLM Agent Actions via Policy-Constrained Validation

arXiv:2609.24446 · cs.CR, cs.AI · Submitted 2026-09-21 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-09-21

Updated: 2026-09-22

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Trace — 25× in this paper · explained in 2 episodes
• Verification — 25× in this paper · explained in 2 episodes
• Benchmark — 22× in this paper · explained in 2 episodes
• Provenance — 22× in this paper · explained in 4 episodes
• Abstraction — 9× in this paper · explained in 1 episode
• Hallucination — 4× in this paper · explained in 3 episodes
• Attack Success Rate — 3× in this paper
• Formal Verification — 3× in this paper · explained in 2 episodes
• Ontology — 3× in this paper · explained in 2 episodes
• AI Agents — 2× in this paper · explained in 2 episodes
• Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
• Generalization — 2× in this paper · explained in 13 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Large Language Model (LLM) — 2× in this paper · explained in 3 episodes
• Robustness — 2× in this paper · explained in 5 episodes
• Verifier — 2× in this paper · explained in 2 episodes
• Ablation — 1× in this paper · explained in 1 episode
• Agentic Coding — 1× in this paper · explained in 1 episode
• Agentic System — 1× in this paper · explained in 2 episodes
• Consistency — 1× in this paper · explained in 3 episodes
• Formal Methods — 1× in this paper · explained in 3 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Generalizability — 1× in this paper · explained in 6 episodes
• Human-in-the-Loop — 1× in this paper · explained in 3 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• SMT solver — 1× in this paper · explained in 2 episodes
• Transferability — 1× in this paper · explained in 4 episodes

Sources

• Defeating Prompt Injections by Design
• Defending Against Indirect Prompt Injection Attacks With Spotlighting
• AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?
• VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation
• Progent: Securing AI Agents with Privilege Control
• PromptArmor: Simple yet Effective Prompt Injection Defenses
• AgentArmor: Enforcing Program Analysis on Agent Runtime Trace to Defend Against Prompt Injection
• ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection
• System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective
• IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems
• Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs