{"id":"https://openalex.org/W7163048009","doi":"https://doi.org/10.48550/arxiv.2605.30604","title":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","display_name":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7163048009","doi":"https://doi.org/10.48550/arxiv.2605.30604"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.30604","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30604","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.30604","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134201437","display_name":"George Fatouros","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fatouros, George","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050942947","display_name":"Georgios Makridis","orcid":"https://orcid.org/0000-0002-6165-7239"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Makridis, Georgios","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037177499","display_name":"George Kousiouris","orcid":"https://orcid.org/0000-0003-0961-3471"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kousiouris, George","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135392146","display_name":"John Soldatos","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Soldatos, John","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5020920798","display_name":"Dimosthenis Kyriazis","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kyriazis, Dimosthenis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.529699981212616,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.529699981212616,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.04619999974966049,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.04149999842047691,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.47519999742507935},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4471000134944916},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4325000047683716},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.43160000443458557},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.42989999055862427},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.41679999232292175},{"id":"https://openalex.org/keywords/adapter","display_name":"Adapter (computing)","score":0.41589999198913574},{"id":"https://openalex.org/keywords/trusted-computing-base","display_name":"Trusted computing base","score":0.4092999994754791},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.3986999988555908},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.38420000672340393},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.37119999527931213}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8044000267982483},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48330000042915344},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.47519999742507935},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4471000134944916},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4422999918460846},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4325000047683716},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.43160000443458557},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.42989999055862427},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.41679999232292175},{"id":"https://openalex.org/C177284502","wikidata":"https://www.wikidata.org/wiki/Q1005390","display_name":"Adapter (computing)","level":2,"score":0.41589999198913574},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.4092999994754791},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.3986999988555908},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.38420000672340393},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.37119999527931213},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3677999973297119},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3492000102996826},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.3449000120162964},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.3203999996185303},{"id":"https://openalex.org/C2780870223","wikidata":"https://www.wikidata.org/wiki/Q1004415","display_name":"Runtime system","level":2,"score":0.3149999976158142},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.31189998984336853},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.3107999861240387},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.3086000084877014},{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.30090001225471497},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.29330000281333923},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.28619998693466187},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.27950000762939453},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.27399998903274536},{"id":"https://openalex.org/C49312422","wikidata":"https://www.wikidata.org/wiki/Q691593","display_name":"Common Object Request Broker Architecture","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C53619493","wikidata":"https://www.wikidata.org/wiki/Q4787093","display_name":"Architecture framework","level":3,"score":0.265500009059906},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.26100000739097595},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.30604","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30604","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.30604","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30604","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.40612131357192993}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Regulated":[0],"cybersecurity":[1,38],"workflows":[2],"lack":[3],"a":[4,61,82,94,113,139,146,215],"runtime":[5,74,105,200],"substrate":[6],"that":[7,67,117],"enforces":[8],"organization-level":[9],"scope":[10],"across":[11],"retrieval,":[12,186],"tool":[13],"calls,":[14],"memory,":[15],"findings,":[16],"reports,":[17],"and":[18,23,57,71,87,131,155,161,172,187,212,232],"audit":[19],"while":[20],"remaining":[21],"model-agnostic":[22],"locally":[24],"deployable.":[25],"Recent":[26],"large":[27],"language":[28],"model":[29],"(LLM)":[30],"agent":[31,104],"systems":[32],"report":[33],"strong":[34],"results":[35],"on":[36],"isolated":[37],"tasks,":[39],"yet":[40],"they":[41],"do":[42],"not":[43],"by":[44],"themselves":[45],"define":[46],"an":[47,101,204],"auditable":[48],"platform":[49],"architecture":[50,106,224],"for":[51,107,183,223],"regulated":[52],"security":[53],"operations":[54],"centre":[55],"(SOC)":[56],"compliance":[58],"workflows,":[59],"where":[60,72],"single":[62],"analyst":[63],"may":[64],"trigger":[65],"actions":[66],"bind":[68],"the":[69,73,208],"organization,":[70],"must":[75],"integrate":[76],"with":[77,138,165,219],"existing":[78],"SIEM/XDR":[79,125,152],"stacks":[80],"as":[81,93,128,193,207],"primary":[83],"source":[84],"of":[85],"context":[86],"alert-driven":[88],"triggers":[89],"rather":[90,197],"than":[91,198],"operate":[92],"standalone":[95],"analytical":[96],"layer.":[97],"This":[98],"paper":[99],"proposes":[100],"organization-scoped":[102],"LLM":[103],"financial":[108],"cybersecurity.":[109],"The":[110],"contribution":[111],"is":[112,118],"typed":[114],"Security":[115],"Context":[116,176],"created":[119],"at":[120,133],"every":[121,134],"entry":[122],"point,":[123],"including":[124],"notifications":[126],"ingested":[127],"first-class":[129],"triggers,":[130],"enforced":[132],"component":[135],"boundary,":[136],"combined":[137],"shared":[140],"Runtime":[141],"Core,":[142],"logical":[143],"specialist":[144],"subagents,":[145],"governed":[147],"Tool":[148],"Adapter":[149],"Layer":[150],"exposing":[151],"query,":[153],"enrichment,":[154],"response":[156],"primitives":[157],"under":[158],"uniform":[159],"policy":[160],"audit,":[162],"structured":[163],"findings":[164],"evidence":[166,228],"references,":[167],"tiered":[168],"human-in-the-loop":[169],"(HITL)":[170],"gates,":[171],"append-only":[173],"audit.":[174],"Model":[175],"Protocol":[177],"(MCP),":[178],"extended":[179],"telemetry,":[180],"digital":[181],"twins":[182],"pentesting,":[184],"graph":[185],"federated":[188],"knowledge":[189],"sharing":[190],"are":[191],"treated":[192],"optional":[194],"extension":[195],"paths":[196],"mandatory":[199],"assumptions.":[201],"We":[202],"describe":[203],"implementable":[205],"slice":[206],"architecture's":[209],"testability":[210],"surface,":[211],"we":[213],"propose":[214],"falsifiable":[216],"evaluation":[217],"plan":[218],"metric-level":[220],"pass":[221],"criteria":[222],"readiness,":[225],"security-policy":[226],"enforcement,":[227],"traceability,":[229],"output":[230],"quality,":[231],"operational":[233],"observability.":[234]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-02T00:00:00"}