Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?

arXiv:2609.32495 · cs.CR, cs.AI, cs.CE, cs.SE · Submitted 2026-09-26 · Read on arXiv

cs.CR, cs.AI, cs.CE, cs.SE

Submitted: 2026-09-26

Updated: 2026-09-26

Code: https://github.com/open-telemetry/semantic-conventions-genai

Terminology

• Trace — 51× in this paper · explained in 2 episodes
• Benchmark — 31× in this paper · explained in 2 episodes
• Accuracy — 22× in this paper · explained in 1 episode
• Provenance — 14× in this paper · explained in 4 episodes
• Verifiability — 11× in this paper · explained in 2 episodes
• Accountability — 5× in this paper · explained in 2 episodes
• Adam — 4× in this paper · explained in 2 episodes
• Agent Harness — 4× in this paper · explained in 2 episodes
• Core — 4× in this paper · explained in 2 episodes
• Robustness — 4× in this paper · explained in 5 episodes
• AI Agents — 3× in this paper · explained in 2 episodes
• Alignment — 3× in this paper · explained in 1 episode
• Clustering — 3× in this paper · explained in 2 episodes
• International Conference on Machine Learning — 2× in this paper
• LLM judge — 2× in this paper · explained in 2 episodes
• Multi-Agent System — 2× in this paper · explained in 6 episodes
• Progressive Disclosure — 2× in this paper · explained in 2 episodes
• Verification — 2× in this paper · explained in 2 episodes
• AUC — 1× in this paper · explained in 2 episodes
• Ablation — 1× in this paper · explained in 1 episode
• Agent Architectures — 1× in this paper · explained in 1 episode
• Agentic System — 1× in this paper · explained in 2 episodes
• Annotator Agreement — 1× in this paper · explained in 1 episode
• Archetype — 1× in this paper · explained in 1 episode
• Benchmarking — 1× in this paper · explained in 3 episodes
• Chain-of-Thought Prompting — 1× in this paper · explained in 2 episodes
• Failure Modes — 1× in this paper · explained in 3 episodes
• Frozen model — 1× in this paper · explained in 3 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• In International Conference on Learning Representations — 1× in this paper
• LLM-as-a-Judge — 1× in this paper · explained in 3 episodes
• Symposium on Operating Systems Design and Implementation — 1× in this paper

Sources

• Black-Box Access is Insufficient for Rigorous AI Audits
• Why Do Multi-Agent LLM Systems Fail?
• Visibility into AI Agents
• Seeing the Whole Elephant: A Benchmark for Failure Attribution in LLM-based Multi-Agent Systems
• TRAIL: Trace Reasoning and Agentic Issue Localization
• Auditing Automated Evaluation, Error Propagation, and Runtime Mitigation in Tool-Using Language Agents
• Agentic Harness Engineering: Observability-Driven Automatic Evolution of Coding-Agent Harnesses
• Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems
• Who&When Pro: Can LLMs Really Attribute Failures in AI Agents?
• Auditable Agents
• Agent-Diff: Benchmarking LLM Agents on Enterprise API Tasks via Code Execution with State-Diff-Based Evaluation
• Inside the Scaffold: A Source-Code Taxonomy of Coding Agent Architectures
• DEMM-Bench: A Cross-Regime Benchmark for Agent-Runtime Governance-Evidence Sufficiency
• AgentTrace: Causal Graph Tracing for Root Cause Analysis in Deployed Multi-Agent Systems
• Architectural Design Decisions in AI Agent Harnesses
• $\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains
• AgenTracer: Who Is Inducing Failure in the LLM Agentic Systems?
• Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systems
• AgentSight: System-Level Observability for AI Agents Using eBPF

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs