paper-with-me

홈 › Papers

Spectral Guardrails for Agents in the Wild: Detecting Tool Use Hallucinations via Attention Topology

2026-02-08 · Valentin Noël arxiv

Deploying autonomous agents in the wild requires reliable safeguards against tool use failures. We propose a training free guardrail based on spectral analysis of attention topology that complements supervised approaches. On Llama 3.1 8B, our method achieves 97.7\% recall with multi-feature detection and 86.1\% recall with 81.0\% precision for balanced deployment, without requiring any labeled training data. Most remarkably, we discover that single layer spectral features act as near-perfect hallucination detectors: Llama L26 Smoothness achieves 98.2\% recall (213/217 hallucinations caught) with a single threshold, and Mistral L3 Entropy achieves 94.7\% recall. This suggests hallucination is not merely a wrong token but a thermodynamic state change: the model's attention becomes noise when it errs. Through controlled cross-model evaluation on matched domains ($N=1000$, $T=0.3$, same General domain, hallucination rates 20--22\%), we reveal the ``Loud Liar'' phenomenon: Llama 3.1 8B's failures are spectrally catastrophic and dramatically easier to detect, while Mistral 7B achieves the best discrimination (AUC 0.900). These findings establish spectral analysis as a principled, efficient framework for agent safety.

📄 PDF Abstract BibTeX arXiv:2602.08082

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents

2026-04-16 · Yining Hong, Yining She, Eunsuk Kang, Christopher S. Timperley 외 arxiv

There is increasing interest in integrating AI agents that invoke tools into domain-specific commercial software, where unintended tool calls can cause serious security and safety incidents. This has drawn growing resear…

Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agents

2024-08-05 · Md Shamsujjoha, Qinghua Lu, Dehai Zhao, Liming Zhu

Foundation Model (FM)-based agents are revolutionizing application development across various domains. However, their rapidly growing capabilities and autonomy have raised significant concerns about AI safety. Researcher…

modelSystematic Literature Review

PSG-Agent: Personality-Aware Safety Guardrail for LLM-based Agents

2025-09-28 · Yaozu Wu, Jizhou Guo, Dongyuan Li, Henry Peng Zou 외 arxiv

Effective guardrails are essential for safely deploying LLM-based agents in critical applications. Despite recent advances, existing guardrails suffer from two fundamental limitations: (i) they apply uniform guardrail po…

A Low-Latency Fraud Detection Layer for Detecting Adversarial Interaction Patterns in LLM-Powered Agents

2026-05-01 · Sheldon Yu, Yingcheng Sun, Hanqing Guo, Julian McAuley 외 arxiv

Large Language Model (LLM)-powered agents demonstrate strong capabilities in autonomous task execution, tool use, and multi-step reasoning. However, their increasing autonomy also introduces a new attack surface: adversa…

Fraud Detection

NiyamAI - An Intent-Bound AI Agent with Cryptographically Verifiable Guardrails using Zero-Knowledge Proofs

2026-08-07 · Aditya Katkar, Om Karkele, Kartik Mandhane, Manisha More 외 arxiv

Autonomous LLM agents with tool execution capabilities introduce severe security risks through prompt injection, goal hijacking, and unauthorized action invocation. Existing guardrails rely on unverified, host local soft…