{"id":"https://openalex.org/W7150736206","doi":"https://doi.org/10.48550/arxiv.2604.02375","title":"KAIJU: An Executive Kernel for Intent-Gated Execution of LLM Agents","display_name":"KAIJU: An Executive Kernel for Intent-Gated Execution of LLM Agents","publication_year":2026,"publication_date":"2026-03-31","ids":{"openalex":"https://openalex.org/W7150736206","doi":"https://doi.org/10.48550/arxiv.2604.02375"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.02375","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02375","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.02375","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133023803","display_name":"Cormac Guerin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guerin, Cormac","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5090217029","display_name":"Frank Gu\u00e9rin","orcid":"https://orcid.org/0000-0003-1918-6311"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guerin, Frank","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.16339999437332153,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.16339999437332153,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.13220000267028809,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.12729999423027039,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/execution-model","display_name":"Execution model","score":0.5667999982833862},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.525600016117096},{"id":"https://openalex.org/keywords/scheduling","display_name":"Scheduling (production processes)","score":0.49470001459121704},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.45010000467300415},{"id":"https://openalex.org/keywords/predicate-abstraction","display_name":"Predicate abstraction","score":0.4366999864578247},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.42320001125335693},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4083000123500824},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.36719998717308044}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8705999851226807},{"id":"https://openalex.org/C2776834041","wikidata":"https://www.wikidata.org/wiki/Q25346349","display_name":"Execution model","level":2,"score":0.5667999982833862},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.525600016117096},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.49470001459121704},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4717000126838684},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.45010000467300415},{"id":"https://openalex.org/C2779907942","wikidata":"https://www.wikidata.org/wiki/Q7239630","display_name":"Predicate abstraction","level":3,"score":0.4366999864578247},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.42320001125335693},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4083000123500824},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.373199999332428},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.36719998717308044},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.352400004863739},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3449000120162964},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.314300000667572},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.298799991607666},{"id":"https://openalex.org/C53833338","wikidata":"https://www.wikidata.org/wiki/Q1061424","display_name":"Context switch","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28679999709129333},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.28610000014305115},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.28200000524520874},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.2581000030040741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.02375","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02375","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.02375","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02375","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7845479846000671}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Tool-calling":[0],"autonomous":[1],"agents":[2,52],"based":[3,117],"on":[4,118,166,181],"large":[5],"language":[6],"models":[7],"using":[8],"ReAct":[9,157,196],"exhibit":[10],"three":[11,131],"limitations:":[12],"serial":[13],"latency,":[14,189],"quadratic":[15],"context":[16],"growth,":[17],"and":[18,23,82,95,125,137,148,177],"vulnerability":[19],"to":[20,41,170],"prompt":[21],"injection":[22],"hallucination.":[24],"Recent":[25],"work":[26],"moves":[27],"towards":[28],"separating":[29],"planning":[30,171],"from":[31,60],"execution":[32,43,56,133,142],"but":[33],"in":[34,106],"each":[35],"case":[36],"the":[37,42,55,61,99,190],"model":[38],"remains":[39],"coupled":[40],"mechanics.":[44],"We":[45,65],"introduce":[46],"a":[47,74,156,163,178],"system-level":[48],"abstraction":[49],"for":[50,145],"LLM":[51,62,100],"which":[53],"decouples":[54],"of":[57],"agent":[58],"workflows":[59],"reasoning":[63],"layer.":[64],"define":[66],"two":[67],"first-class":[68],"abstractions:":[69],"(1)":[70],"Intent-Gated":[71],"Execution":[72],"(IGX),":[73],"security":[75],"paradigm":[76],"that":[77,87,160,195],"enforces":[78,192],"intent":[79],"at":[80,174,204],"execution,":[81],"(2)":[83],"an":[84],"Executive":[85],"Kernel":[86],"manages":[88],"scheduling,":[89],"tool":[90],"dispatch,":[91],"dependency":[92],"resolution,":[93],"failures":[94],"security.":[96],"In":[97],"KAIJU,":[98],"plans":[101],"upfront,":[102],"optimistically":[103],"scheduling":[104],"tools":[105],"parallel":[107,185],"with":[108],"dependency-aware":[109],"parameter":[110],"injection.":[111],"Tools":[112],"are":[113],"authorised":[114],"via":[115],"IGX":[116],"four":[119],"independent":[120],"variables:":[121],"scope,":[122],"intent,":[123],"impact,":[124],"clearance":[126],"(external":[127],"approval).":[128],"KAIJU":[129,161],"supports":[130],"adaptive":[132],"modes":[134],"(Reflect,":[135],"nReflect,":[136],"Orchestrator),":[138],"providing":[139],"progressively":[140],"finer-grained":[141],"control":[143],"apt":[144],"complex":[146],"investigation":[147],"deep":[149],"analysis":[150],"or":[151],"research.":[152],"Empirical":[153],"evaluation":[154],"against":[155],"baseline":[158],"shows":[159],"has":[162],"latency":[164],"penalty":[165],"simple":[167],"queries":[168,183],"due":[169],"overhead,":[172],"convergence":[173],"moderate":[175],"complexity,":[176],"structural":[179],"advantage":[180],"computational":[182],"requiring":[184],"data":[186],"gathering.":[187],"Beyond":[188],"separation":[191],"behavioural":[193],"guarantees":[194],"cannot":[197],"match":[198],"through":[199],"prompting":[200],"alone.":[201],"Code":[202],"available":[203],"https://github.com/compdeep/kaiju":[205]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-07T00:00:00"}