{"id":"https://openalex.org/W7214281183","doi":"https://doi.org/10.48550/arxiv.2609.29522","title":"Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races","display_name":"Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races","publication_year":2026,"publication_date":"2026-08-25","ids":{"openalex":"https://openalex.org/W7214281183","doi":"https://doi.org/10.48550/arxiv.2609.29522"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2609.29522","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.29522","pdf_url":"https://arxiv.org/pdf/2609.29522","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2609.29522","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5152862820","display_name":"Zihao Zheng","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zheng, Zihao","raw_affiliation_strings":["Washington University in St. Louis , St. Louis , Missouri , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washington University in St. Louis , St. Louis , Missouri , USA","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134177154","display_name":"Jiayu Long","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Long, Jiayu","raw_affiliation_strings":["Washington University in St. Louis , St. Louis , Missouri , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washington University in St. Louis , St. Louis , Missouri , USA","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5152942465","display_name":"Baichuan Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I178169726","display_name":"Southern Methodist University","ror":"https://ror.org/042tdr378","country_code":"US","type":"education","lineage":["https://openalex.org/I178169726"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li, Baichuan","raw_affiliation_strings":["Southern Methodist University , Dallas , Texas , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southern Methodist University , Dallas , Texas , USA","institution_ids":["https://openalex.org/I178169726"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5147670291","display_name":"Junyi Yao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yao, Junyi","raw_affiliation_strings":["Washington University in St. Louis , St. Louis , Missouri , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washington University in St. Louis , St. Louis , Missouri , USA","institution_ids":["https://openalex.org/I204465549"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9218999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9218999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.014299999922513962,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.011900000274181366,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/safety-contracts","display_name":"safety contracts","score":0.5590000152587891},{"id":"https://openalex.org/keywords/confidence-calibration","display_name":"confidence calibration","score":0.32100000977516174}],"concepts":[{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.8136000037193298},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.7342000007629395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7045999765396118},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.5604000091552734},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5479000210762024},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.44530001282691956},{"id":"https://openalex.org/C140146324","wikidata":"https://www.wikidata.org/wiki/Q1144319","display_name":"Predicate (mathematical logic)","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39969998598098755},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.383899986743927},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.36809998750686646},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3481999933719635},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3450999855995178},{"id":"https://openalex.org/C2992838255","wikidata":"https://www.wikidata.org/wiki/Q856887","display_name":"Security guard","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C2776398200","wikidata":"https://www.wikidata.org/wiki/Q508880","display_name":"Aloha","level":4,"score":0.31299999356269836},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.31049999594688416},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.3050999939441681},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.30469998717308044},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.2865000069141388},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.27059999108314514},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.25279998779296875}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2609.29522","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.29522","pdf_url":"https://arxiv.org/pdf/2609.29522","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2609.29522","doi":"https://doi.org/10.48550/arxiv.2609.29522","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2609.29522","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2609.29522","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.29522","pdf_url":"https://arxiv.org/pdf/2609.29522","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7214281183.pdf","grobid_xml":"https://content.openalex.org/works/W7214281183.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7167596465","https://openalex.org/W7162080190","https://openalex.org/W7213417668","https://openalex.org/W7201884335","https://openalex.org/W7167796025","https://openalex.org/W7124168536","https://openalex.org/W7214303292","https://openalex.org/W7125419488","https://openalex.org/W7213553841","https://openalex.org/W7162631824"],"abstract_inverted_index":{"Tool-using":[0],"language-model":[1],"agents":[2,209],"increasingly":[3],"mutate":[4],"schedulers,":[5],"data":[6],"pipelines,":[7],"object":[8],"stores,":[9],"and":[10,17,44,47,63,104,204],"access-control":[11],"systems.":[12],"Between":[13],"an":[14,86],"agent's":[15],"read":[16],"its":[18,167],"commit,":[19],"external":[20],"state":[21,62],"can":[22],"change,":[23],"but":[24,128,214],"not":[25,179,238],"every":[26,83,228],"change":[27],"makes":[28],"the":[29,150,198],"commit":[30,100],"unsafe.":[31],"We":[32,89],"separate":[33],"invalidating":[34],"races,":[35,46,140],"which":[36],"break":[37],"a":[38,161,191,194,206,220],"declared":[39,163],"safety":[40],"predicate,":[41],"from":[42,60,212],"predicate-preserving":[43],"irrelevant":[45],"ask":[48],"how":[49],"precisely":[50],"runtime":[51,232],"guards":[52,124,134],"distinguish":[53],"them.":[54],"Our":[55],"deterministic":[56],"simulator":[57],"separates":[58],"visible":[59],"authoritative":[61],"injects":[64],"five":[65],"non-atomic":[66],"failure":[67],"mechanisms":[68],"across":[69],"16":[70],"infrastructure":[71],"tasks":[72],"in":[73],"four":[74],"domains;":[75],"frozen":[76],"agent":[77],"proposals":[78],"are":[79],"replayed":[80],"counterfactually":[81],"under":[82],"controller":[84],"without":[85],"LLM":[87],"judge.":[88],"evaluate":[90],"three":[91,108,123],"commit-time":[92],"guard":[93,153],"granularities":[94],"(global":[95],"epoch,":[96],"read-set":[97],"version,":[98],"semantic":[99,236],"predicate),":[101],"multi-level":[102],"verification,":[103],"model-side":[105],"gates":[106],"on":[107,119],"locally":[109],"hosted":[110],"quantized":[111],"model":[112,242],"families":[113],"(Qwen3-4B,":[114],"Phi-4-mini,":[115],"Gemma4-8B;":[116],"3,456":[117],"trajectories":[118],"one":[120],"GPU).":[121],"All":[122],"eliminate":[125],"unsafe":[126,171,200],"commits,":[127],"their":[129],"availability":[130],"differs":[131],"sharply:":[132],"freshness-based":[133],"needlessly":[135],"block":[136,208],"92-95%":[137],"of":[138,145],"benign":[139],"forfeiting":[141],"up":[142],"to":[143,174],"43%":[144],"safe":[146],"task":[147],"completions,":[148],"while":[149],"complete":[151],"predicate":[152],"blocks":[154],"none.":[155],"That":[156],"precision":[157],"is":[158,183],"contract-dependent:":[159],"deleting":[160],"single":[162],"clause":[164],"converts":[165],"exactly":[166],"fault":[168],"family":[169],"into":[170],"commits":[172],"(up":[173],"7.9%).":[175],"Model-side":[176],"signals":[177],"do":[178],"substitute:":[180],"verbal":[181],"confidence":[182],"miscalibrated":[184],"(ECE":[185],"approximately":[186],"0.37),":[187],"action":[188],"agreement":[189],"matches":[190],"random":[192],"gate,":[193],"cautionary":[195],"prompt":[196],"leaves":[197],"direct":[199],"rate":[201],"essentially":[202],"unchanged,":[203],"after":[205],"freshness-guard":[207],"re-commit":[210],"unsafely":[211],"refreshed":[213],"still-incomplete":[215],"reads.":[216],"Under":[217],"degraded":[218],"telemetry":[219],"hidden":[221],"concurrent":[222],"mutation":[223],"remains":[224],"observationally":[225],"clean,":[226],"bounding":[227],"selective":[229],"policy.":[230],"Precise":[231],"enforcement":[233],"therefore":[234],"requires":[235],"contracts,":[237],"freshness":[239],"heuristics":[240],"or":[241],"self-assessment.":[243]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-09-26T00:00:00"}