Stop Means Stop: Measuring and Repairing the Enforcement Gap in Agent-Framework Control Primitives

Jul 17, 2026

A new preprint demonstrates that six widely used open-source LLM-agent frameworks do not reliably enforce their documented control primitives—such as approval gates, cancellation, and timeouts—allowing unintended side effects to occur during pauses. The authors introduce SOUNDGATE, a Rust-based external gate that successfully blocks all measured violations while permitting legitimate actions, with its correctness verified through model checking and large-scale differential conformance testing.

Why it matters: This work reveals a critical and previously unmeasured safety gap in popular agent frameworks and provides a verified, practical solution to enforce control primitives, reducing the risk of unintended AI actions.

Full story at: arXiv Cryptography and Security ↗