{"id":"https://openalex.org/W7166087472","doi":"https://doi.org/10.48550/arxiv.2606.26524","title":"VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills","display_name":"VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills","publication_year":2026,"publication_date":"2026-06-25","ids":{"openalex":"https://openalex.org/W7166087472","doi":"https://doi.org/10.48550/arxiv.2606.26524"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.26524","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26524","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.26524","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139388848","display_name":"Ying Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139462583","display_name":"Yanju Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yanju","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135185398","display_name":"Hongbo Wen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wen, Hongbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139399146","display_name":"Bosi Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Bosi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135227037","display_name":"Hanzhi Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Hanzhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139414761","display_name":"Peiran Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Peiran","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139459389","display_name":"Yu Feng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Feng, Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5100600477","display_name":"Yi Tian","orcid":"https://orcid.org/0000-0002-0831-6275"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Yuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.4544999897480011,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.4544999897480011,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.061799999326467514,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.055399999022483826,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.6746000051498413},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.6633999943733215},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5885999798774719},{"id":"https://openalex.org/keywords/argument","display_name":"Argument (complex analysis)","score":0.5278000235557556},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.47510001063346863},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.4171999990940094},{"id":"https://openalex.org/keywords/finite-state-machine","display_name":"Finite-state machine","score":0.38100001215934753},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.3619000017642975}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7599999904632568},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.6746000051498413},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.6633999943733215},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5885999798774719},{"id":"https://openalex.org/C98184364","wikidata":"https://www.wikidata.org/wiki/Q1780131","display_name":"Argument (complex analysis)","level":2,"score":0.5278000235557556},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5005999803543091},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.47510001063346863},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.4171999990940094},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.38100001215934753},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3619000017642975},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.3610000014305115},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3427000045776367},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3411000072956085},{"id":"https://openalex.org/C2778447413","wikidata":"https://www.wikidata.org/wiki/Q1238731","display_name":"Vigil","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.29840001463890076},{"id":"https://openalex.org/C18460168","wikidata":"https://www.wikidata.org/wiki/Q5416707","display_name":"Event calculus","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C201677973","wikidata":"https://www.wikidata.org/wiki/Q1209840","display_name":"Specification language","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C4777664","wikidata":"https://www.wikidata.org/wiki/Q1536492","display_name":"Linear temporal logic","level":2,"score":0.2506999969482422},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.26524","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26524","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.26524","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26524","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6120214462280273}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agentic":[0],"systems":[1],"increasingly":[2],"act":[3],"through":[4],"third-party":[5],"skills,":[6],"allowing":[7,205],"model-generated":[8],"decisions":[9],"to":[10,79,83,90,94,207],"affect":[11],"files,":[12],"communication":[13],"channels,":[14],"and":[15,32,92,156,185,235,246],"cyber-physical":[16],"devices.":[17],"These":[18],"skills":[19],"often":[20],"include":[21],"natural-language":[22],"specifications":[23,37],"that":[24,108,172,196,210],"define":[25],"access":[26],"permissions,":[27],"disclosure":[28],"limits,":[29],"execution":[30,89,146],"privileges,":[31],"required":[33],"preconditions.":[34],"Although":[35],"such":[36,164],"describe":[38],"the":[39,88,97],"intended":[40],"boundaries":[41],"of":[42],"skill":[43,152],"behavior,":[44],"they":[45],"do":[46],"not":[47],"by":[48],"themselves":[49],"provide":[50],"executable":[51],"runtime":[52,135],"enforcement.":[53],"Enforcing":[54],"them":[55],"raises":[56],"a":[57,63,68,72,120,169,247],"contextual":[58],"granularity":[59,99],"challenge:":[60],"even":[61],"when":[62],"policy":[64,170,240],"is":[65,190],"written":[66],"for":[67,138],"particular":[69],"task":[70],"context,":[71],"monitor":[73],"must":[74],"still":[75],"decide":[76],"which":[77],"events":[78],"observe,":[80],"what":[81],"state":[82],"retain,":[84],"how":[85],"far":[86],"across":[87,111],"reason,":[91],"where":[93],"intervene.":[95],"Choosing":[96],"wrong":[98],"can":[100],"either":[101],"block":[102],"benign":[103],"executions":[104],"or":[105,124,217],"miss":[106],"violations":[107,209,241],"emerge":[109],"only":[110],"multiple":[112,160],"actions.":[113],"Most":[114],"existing":[115],"enforcement":[116,125,136,175],"mechanisms,":[117],"however,":[118],"assume":[119],"fixed":[121,225],"event":[122,213],"model":[123],"point.":[126],"In":[127],"this":[128],"work,":[129],"we":[130],"present":[131],"VIGIL,":[132],"an":[133,143],"end-to-end":[134],"framework":[137],"agentic":[139],"systems.":[140],"VIGIL":[141,167,206,238],"checks":[142],"agent's":[144],"actual":[145],"trace":[147],"against":[148],"behavioral":[149],"policies":[150,165,198],"from":[151],"specifications,":[153],"operator-defined":[154],"constraints,":[155,184],"global":[157],"rules":[158,195],"spanning":[159,232],"skills.":[161],"To":[162],"make":[163],"executable,":[166],"introduces":[168],"language":[171,189],"captures":[173],"context-specific":[174],"requirements":[176],"over":[177,202,243],"agent-tool":[178],"events,":[179],"including":[180],"temporal":[181],"dependencies,":[182],"argument":[183,215],"value-flow":[186],"conditions.":[187],"The":[188],"paired":[191],"with":[192,242],"symbolic":[193],"evaluation":[194],"translate":[197],"into":[199],"SMT":[200],"constraints":[201],"finite":[203],"traces,":[204],"detect":[208],"depend":[211],"on":[212,224],"order,":[214],"relationships,":[216],"cross-call":[218],"value":[219],"flow":[220],"rather":[221],"than":[222],"relying":[223],"single-call":[226],"filters.":[227],"On":[228],"real":[229],"LLM-agent":[230],"runs":[231],"office-document,":[233],"operational,":[234],"engineering":[236],"tasks,":[237],"detects":[239],"95%":[244],"recall":[245],"false-positive":[248],"rate":[249],"below":[250],"10%.":[251]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-27T00:00:00"}