{"id":"https://openalex.org/W7220649628","doi":"https://doi.org/10.48550/arxiv.2610.05563","title":"G-CARB: Graph-Localized Conformal Agent Risk Budget for Compositional Harm","display_name":"G-CARB: Graph-Localized Conformal Agent Risk Budget for Compositional Harm","publication_year":2026,"publication_date":"2026-10-04","ids":{"openalex":"https://openalex.org/W7220649628","doi":"https://doi.org/10.48550/arxiv.2610.05563"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.05563","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.05563","pdf_url":"https://arxiv.org/pdf/2610.05563","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.05563","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100567802","display_name":"Zijun Yu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yu, Zijun","raw_affiliation_strings":["Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5157758699","display_name":"Yu Gu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Gu, Yu","raw_affiliation_strings":["Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052855957","display_name":"Vahid Partovi Nia","orcid":"https://orcid.org/0000-0001-6673-4224","observed_orcids":["https://orcid.org/0000-0001-6673-4224"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nia, Vahid Partovi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5101678747","display_name":"Masoud Asgharian","orcid":"https://orcid.org/0000-0001-7130-5985","observed_orcids":["https://orcid.org/0000-0001-7130-5985"]},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Asgharian, Masoud","raw_affiliation_strings":["Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics and Statistics McGill University Montr\u00e9al , QC , Canada","institution_ids":["https://openalex.org/I5023651"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.48410001397132874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.48410001397132874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.13770000636577606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.09669999778270721,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/conformal-risk-control","display_name":"conformal risk control","score":0.7390000224113464},{"id":"https://openalex.org/keywords/agent-safety","display_name":"agent safety","score":0.5960000157356262},{"id":"https://openalex.org/keywords/stopping-decisions","display_name":"stopping decisions","score":0.3529999852180481}],"concepts":[{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.7053999900817871},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6776000261306763},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6492999792098999},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5153999924659729},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5112000107765198},{"id":"https://openalex.org/C162932704","wikidata":"https://www.wikidata.org/wiki/Q1058791","display_name":"Synchronizing","level":3,"score":0.5038999915122986},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.46860000491142273},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4456999897956848},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.438400000333786},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.41670000553131104},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.40950000286102295},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.29649999737739563},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C37945671","wikidata":"https://www.wikidata.org/wiki/Q7336207","display_name":"Risk-based testing","level":5,"score":0.29159998893737793},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C91302708","wikidata":"https://www.wikidata.org/wiki/Q2732056","display_name":"Ledger","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C2780257099","wikidata":"https://www.wikidata.org/wiki/Q65089289","display_name":"Risk Control","level":3,"score":0.25459998846054077},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.2542000114917755}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.05563","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.05563","pdf_url":"https://arxiv.org/pdf/2610.05563","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.05563","doi":"https://doi.org/10.48550/arxiv.2610.05563","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.05563","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.05563","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.05563","pdf_url":"https://arxiv.org/pdf/2610.05563","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7220649628.pdf","grobid_xml":"https://content.openalex.org/works/W7220649628.grobid-xml"},"referenced_works_count":1,"referenced_works":["https://openalex.org/W1553101044"],"related_works":["https://openalex.org/W7171488556","https://openalex.org/W4399695705","https://openalex.org/W7214726035","https://openalex.org/W7168246046","https://openalex.org/W4416551460","https://openalex.org/W4416832289","https://openalex.org/W7163716327","https://openalex.org/W7160704940","https://openalex.org/W7204100135","https://openalex.org/W7172522020"],"abstract_inverted_index":{"Small":[0],"language":[1],"model":[2],"(SLM)":[3],"agents":[4],"need":[5],"safety":[6],"controls":[7],"that":[8,31],"track":[9],"consequences":[10],"across":[11],"tool":[12],"calls":[13],"with":[14,111],"little":[15],"monitoring":[16],"overhead.":[17],"A":[18],"private":[19,85],"read,":[20],"for":[21],"example,":[22],"becomes":[23],"a":[24,27,51,74],"leak":[25],"when":[26,45],"later":[28],"action":[29],"sends":[30],"data":[32],"outside":[33],"the":[34,94,100,136,147],"system.":[35],"We":[36],"introduce":[37],"CARB":[38],"(Conformal":[39],"Agent":[40],"Risk":[41],"Budget),":[42],"which":[43],"calibrates":[44],"to":[46,87,130],"stop":[47],"an":[48],"agent":[49],"using":[50],"ledger":[52,91],"of":[53,135],"harm":[54],"incurred":[55],"before":[56],"stopping.":[57],"Under":[58],"exchangeable":[59],"episodes,":[60],"standard":[61],"conformal":[62],"risk":[63,122],"control":[64],"bounds":[65],"this":[66],"declared":[67],"loss":[68],"in":[69],"expectation":[70],"over":[71],"calibration":[72],"and":[73,98],"future":[75],"episode.":[76],"G-CARB":[77,115],"selects":[78],"scorer":[79],"evidence":[80],"along":[81],"observable":[82],"dependencies":[83],"from":[84],"sources":[86],"outgoing":[88],"actions.":[89],"The":[90],"still":[92],"covers":[93],"entire":[95],"executed":[96],"history,":[97],"computing":[99],"gate":[101],"score":[102],"requires":[103],"no":[104],"additional":[105],"language-model":[106],"inference.":[107],"On":[108],"AgentDojo":[109],"replay":[110],"two":[112],"14B":[113],"backbones,":[114],"roughly":[116],"halves":[117],"scorer-input":[118],"records":[119],"at":[120],"intermediate":[121],"budgets":[123],"while":[124],"improving":[125],"autonomous":[126],"task":[127],"completion":[128],"relative":[129],"full-prefix":[131],"scoring;":[132],"random":[133],"context":[134],"same":[137],"size":[138],"achieves":[139],"similar":[140],"gains.":[141],"Controlled":[142],"examples":[143],"show":[144],"how":[145],"retaining":[146],"relevant":[148],"dependency":[149],"can":[150],"further":[151],"avoid":[152],"stopping":[153],"benign":[154],"work.":[155]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-10-07T00:00:00"}