{"id":"86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4","title":"Routine Operations Can Break Pattern Relationships in LLM Agent Harnesses","argument":"Boming Xia, Qinghua Lu, Dino Sejdinovic and Liming Zhu argue that routine operations can break architectural pattern relationships in LLM agent harnesses without changing code. Harnesses distribute tool mediation, state management and safety guardrails across services, plugins and configuration; operations can change runtime order or retained state. The authors study five relationships across five released harnesses, with a main sample of fourteen independently written plugins.\n\nThey report that reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while every plugin stayed active, allowing a prohibited edit to execute. Which alternatives worked depended on the requirement: preserving required order or needed state held on tested paths and operation sequences, while other allocations prevented prohibited effects but missed edits rejected elsewhere. The authors’ central point is that a pattern relationship depends on the running system and its history, not just its design. They recommend evaluating it against the decision paths, state lifetimes and operation sequences used in deployment.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The abstract reports analysis of five released harnesses and five pattern relationships, with a main sample of fourteen independently written plugins; it does not establish whether the findings generalize to other harnesses or deployments. The reported alternatives held or failed on tested paths and operation sequences; the abstract does not provide enough detail to assess the full test methods or frequency of failures.","speaker":{"name":"Xia, Boming, Lu, Qinghua, Sejdinovic, Dino, Zhu, Liming","roleAtSource":"Article author"},"source":{"title":"When Routine Operations Break Architectural Pattern Relationships in LLM Agent Harnesses","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.09088","publishedAt":"2026-11-06","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that routine operations can change runtime order or retained state and break architectural pattern relationships without code changes.","excerpt":"Routine operations can change the runtime order or retained state that architectural pattern relationships require, without any code change.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"In the studied harnesses, reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while plugins remained active, allowing a prohibited edit to execute.","excerpt":"after a plugin was reapplied or an allow rule saved, policy stopped evaluating edits while every plugin stayed active, and a prohibited edit executed.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"The authors report that allocations preserving required order or needed state held on tested paths and operation sequences, while other allocations could prevent prohibited effects but miss edits rejected elsewhere.","excerpt":"Allocations that kept the required order, or kept or rebuilt the needed state, held on their tested paths and operation sequences, while others prevented prohibited effects but missed edits rejected elsewhere.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"The authors conclude that architects should evaluate pattern relationships against deployment decision paths, state lifetimes and operation sequences.","excerpt":"architects should evaluate it against the decision paths, state lifetimes and operation sequences their deployments use.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.09088","checkedAt":"2026-11-12T21:34:10.965Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which decision paths, state lifetimes and operation sequences in the studied harnesses caused the pattern relationships to hold or break?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Routine Operations Can Break Pattern Relationships in LLM Agent Harnesses","summary":"Boming Xia, Qinghua Lu, Dino Sejdinovic and Liming Zhu argue that routine operations can break architectural pattern relationships in LLM agent harnesses without changing code. Harnesses distribute tool mediation, state management and safety guardrails across services, plugins and configuration; operations can change runtime order or retained state. The authors study five relationships across five released harnesses, with a main sample of fourteen independently written plugins.\n\nThey report that reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while every plugin stayed active, allowing a prohibited edit to execute. Which alternatives worked depended on the requirement: preserving required order or needed state held on tested paths and operation sequences, while other allocations prevented prohibited effects but missed edits rejected elsewhere. The authors’ central point is that a pattern relationship depends on the running system and its history, not just its design. They recommend evaluating it against the decision paths, state lifetimes and operation sequences used in deployment.","question":"Which decision paths, state lifetimes and operation sequences in the studied harnesses caused the pattern relationships to hold or break?","claims":[{"text":"The authors argue that routine operations can change runtime order or retained state and break architectural pattern relationships without code changes.","excerpt":"Routine operations can change the runtime order or retained state that architectural pattern relationships require, without any code change.","support":"source-stated"},{"text":"In the studied harnesses, reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while plugins remained active, allowing a prohibited edit to execute.","excerpt":"after a plugin was reapplied or an allow rule saved, policy stopped evaluating edits while every plugin stayed active, and a prohibited edit executed.","support":"source-stated"},{"text":"The authors report that allocations preserving required order or needed state held on tested paths and operation sequences, while other allocations could prevent prohibited effects but miss edits rejected elsewhere.","excerpt":"Allocations that kept the required order, or kept or rebuilt the needed state, held on their tested paths and operation sequences, while others prevented prohibited effects but missed edits rejected elsewhere.","support":"source-stated"},{"text":"The authors conclude that architects should evaluate pattern relationships against deployment decision paths, state lifetimes and operation sequences.","excerpt":"architects should evaluate it against the decision paths, state lifetimes and operation sequences their deployments use.","support":"source-stated"}],"limitations":["The abstract reports analysis of five released harnesses and five pattern relationships, with a main sample of fourteen independently written plugins; it does not establish whether the findings generalize to other harnesses or deployments.","The reported alternatives held or failed on tested paths and operation sequences; the abstract does not provide enough detail to assess the full test methods or frequency of failures."],"mediaId":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","correctionReason":null,"id":"86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4","publicationId":"b3c6a67e-0095-4cb0-87a3-2c9f045961ca","version":1,"sourceUrl":"https://arxiv.org/abs/2611.09088","sourceTitle":"When Routine Operations Break Architectural Pattern Relationships in LLM Agent Harnesses","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-06","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-09T05:04:04.566Z","createdAt":"2026-11-12T21:02:22.117Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","kind":"article","url":"https://arxiv.org/abs/2611.09088","sourceUrl":"https://arxiv.org/abs/2611.09088","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T21:01:05.873Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.09088","checkedAt":"2026-11-12T21:34:10.965Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","confidence":0.6499999999999999,"provider":"typesafe","model":"jev-1.13.0","inputHash":"96ca53ab6c1d7984b00e95d6848f0d47e6ddfca29792c3afed9a1a432f1d5cc7","decidedAt":"2026-11-12T21:01:08.464Z"},"provenance":{"textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observationId":"78e950e24e188e53e3d583b24937983c090dc7cdac290195089ccd900427e241","retrievedAt":"2026-11-12T21:01:05.440Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"591f7a95-7ace-4351-858e-b1112ddac280"},"reviewer":{"model":"gpt-6-luna","runId":"daa8ae41-efee-4d83-81db-17d2ed6cc761"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-12T21:02:22.117Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Xia, Boming","url":null,"kind":"unknown"},{"name":"Lu, Qinghua","url":null,"kind":"unknown"},{"name":"Sejdinovic, Dino","url":null,"kind":"unknown"},{"name":"Zhu, Liming","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Xia, Boming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Xia, Boming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Lu, Qinghua","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Lu, Qinghua","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Sejdinovic, Dino","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Sejdinovic, Dino","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Zhu, Liming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhu, Liming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.09088","snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z","basis":"publisher-page-metadata","sourceLinks":43,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4/source"}},"canonicalUrl":"https://escapemeridian.com/readings/routine-operations-can-break-pattern-relationships-in-llm-agent-86720f7c","formats":{"html":"/readings/routine-operations-can-break-pattern-relationships-in-llm-agent-86720f7c","markdown":"/readings/routine-operations-can-break-pattern-relationships-in-llm-agent-86720f7c.md","json":"/readings/routine-operations-can-break-pattern-relationships-in-llm-agent-86720f7c.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-llm","name":"Large language model","explanation":"A language model with many learned numerical settings, used to process and generate language.","referenceUrl":"https://developers.google.com/machine-learning/glossary#large-language-model"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4","revision":"b3c6a67e-0095-4cb0-87a3-2c9f045961ca","revisionKind":"publication-id","title":"Routine Operations Can Break Pattern Relationships in LLM Agent Harnesses","url":"https://escapemeridian.com/readings/routine-operations-can-break-pattern-relationships-in-llm-agent-86720f7c"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.09088","revision":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","revisionKind":"sha256-source-text","title":"When Routine Operations Break Architectural Pattern Relationships in LLM Agent Harnesses","url":"https://arxiv.org/abs/2611.09088"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4","title":"Routine Operations Can Break Pattern Relationships in LLM Agent Harnesses","argument":"Boming Xia, Qinghua Lu, Dino Sejdinovic and Liming Zhu argue that routine operations can break architectural pattern relationships in LLM agent harnesses without changing code. Harnesses distribute tool mediation, state management and safety guardrails across services, plugins and configuration; operations can change runtime order or retained state. The authors study five relationships across five released harnesses, with a main sample of fourteen independently written plugins.\n\nThey report that reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while every plugin stayed active, allowing a prohibited edit to execute. Which alternatives worked depended on the requirement: preserving required order or needed state held on tested paths and operation sequences, while other allocations prevented prohibited effects but missed edits rejected elsewhere. The authors’ central point is that a pattern relationship depends on the running system and its history, not just its design. They recommend evaluating it against the decision paths, state lifetimes and operation sequences used in deployment.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The abstract reports analysis of five released harnesses and five pattern relationships, with a main sample of fourteen independently written plugins; it does not establish whether the findings generalize to other harnesses or deployments. The reported alternatives held or failed on tested paths and operation sequences; the abstract does not provide enough detail to assess the full test methods or frequency of failures.","speaker":{"name":"Xia, Boming, Lu, Qinghua, Sejdinovic, Dino, Zhu, Liming","roleAtSource":"Article author"},"source":{"title":"When Routine Operations Break Architectural Pattern Relationships in LLM Agent Harnesses","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.09088","publishedAt":"2026-11-06","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that routine operations can change runtime order or retained state and break architectural pattern relationships without code changes.","excerpt":"Routine operations can change the runtime order or retained state that architectural pattern relationships require, without any code change.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"In the studied harnesses, reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while plugins remained active, allowing a prohibited edit to execute.","excerpt":"after a plugin was reapplied or an allow rule saved, policy stopped evaluating edits while every plugin stayed active, and a prohibited edit executed.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"The authors report that allocations preserving required order or needed state held on tested paths and operation sequences, while other allocations could prevent prohibited effects but miss edits rejected elsewhere.","excerpt":"Allocations that kept the required order, or kept or rebuilt the needed state, held on their tested paths and operation sequences, while others prevented prohibited effects but missed edits rejected elsewhere.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"},{"text":"The authors conclude that architects should evaluate pattern relationships against deployment decision paths, state lifetimes and operation sequences.","excerpt":"architects should evaluate it against the decision paths, state lifetimes and operation sequences their deployments use.","url":"https://arxiv.org/abs/2611.09088","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.09088","checkedAt":"2026-11-12T21:34:10.965Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which decision paths, state lifetimes and operation sequences in the studied harnesses caused the pattern relationships to hold or break?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Routine Operations Can Break Pattern Relationships in LLM Agent Harnesses","summary":"Boming Xia, Qinghua Lu, Dino Sejdinovic and Liming Zhu argue that routine operations can break architectural pattern relationships in LLM agent harnesses without changing code. Harnesses distribute tool mediation, state management and safety guardrails across services, plugins and configuration; operations can change runtime order or retained state. The authors study five relationships across five released harnesses, with a main sample of fourteen independently written plugins.\n\nThey report that reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while every plugin stayed active, allowing a prohibited edit to execute. Which alternatives worked depended on the requirement: preserving required order or needed state held on tested paths and operation sequences, while other allocations prevented prohibited effects but missed edits rejected elsewhere. The authors’ central point is that a pattern relationship depends on the running system and its history, not just its design. They recommend evaluating it against the decision paths, state lifetimes and operation sequences used in deployment.","question":"Which decision paths, state lifetimes and operation sequences in the studied harnesses caused the pattern relationships to hold or break?","claims":[{"text":"The authors argue that routine operations can change runtime order or retained state and break architectural pattern relationships without code changes.","excerpt":"Routine operations can change the runtime order or retained state that architectural pattern relationships require, without any code change.","support":"source-stated"},{"text":"In the studied harnesses, reapplying a plugin or saving an allow rule could silently stop policy from evaluating edits while plugins remained active, allowing a prohibited edit to execute.","excerpt":"after a plugin was reapplied or an allow rule saved, policy stopped evaluating edits while every plugin stayed active, and a prohibited edit executed.","support":"source-stated"},{"text":"The authors report that allocations preserving required order or needed state held on tested paths and operation sequences, while other allocations could prevent prohibited effects but miss edits rejected elsewhere.","excerpt":"Allocations that kept the required order, or kept or rebuilt the needed state, held on their tested paths and operation sequences, while others prevented prohibited effects but missed edits rejected elsewhere.","support":"source-stated"},{"text":"The authors conclude that architects should evaluate pattern relationships against deployment decision paths, state lifetimes and operation sequences.","excerpt":"architects should evaluate it against the decision paths, state lifetimes and operation sequences their deployments use.","support":"source-stated"}],"limitations":["The abstract reports analysis of five released harnesses and five pattern relationships, with a main sample of fourteen independently written plugins; it does not establish whether the findings generalize to other harnesses or deployments.","The reported alternatives held or failed on tested paths and operation sequences; the abstract does not provide enough detail to assess the full test methods or frequency of failures."],"mediaId":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","correctionReason":null,"id":"86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4","publicationId":"b3c6a67e-0095-4cb0-87a3-2c9f045961ca","version":1,"sourceUrl":"https://arxiv.org/abs/2611.09088","sourceTitle":"When Routine Operations Break Architectural Pattern Relationships in LLM Agent Harnesses","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-06","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-09T05:04:04.566Z","createdAt":"2026-11-12T21:02:22.117Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","kind":"article","url":"https://arxiv.org/abs/2611.09088","sourceUrl":"https://arxiv.org/abs/2611.09088","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T21:01:05.873Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.09088","checkedAt":"2026-11-12T21:34:10.965Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"e38ae6f986b29a06f19727b89010b994a8a3b49bd0fd0e7ee9b5c9524edb00fa","confidence":0.6499999999999999,"provider":"typesafe","model":"jev-1.13.0","inputHash":"96ca53ab6c1d7984b00e95d6848f0d47e6ddfca29792c3afed9a1a432f1d5cc7","decidedAt":"2026-11-12T21:01:08.464Z"},"provenance":{"textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observationId":"78e950e24e188e53e3d583b24937983c090dc7cdac290195089ccd900427e241","retrievedAt":"2026-11-12T21:01:05.440Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"591f7a95-7ace-4351-858e-b1112ddac280"},"reviewer":{"model":"gpt-6-luna","runId":"daa8ae41-efee-4d83-81db-17d2ed6cc761"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-12T21:02:22.117Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Xia, Boming","url":null,"kind":"unknown"},{"name":"Lu, Qinghua","url":null,"kind":"unknown"},{"name":"Sejdinovic, Dino","url":null,"kind":"unknown"},{"name":"Zhu, Liming","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Xia, Boming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Xia, Boming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Lu, Qinghua","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Lu, Qinghua","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Sejdinovic, Dino","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Sejdinovic, Dino","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}},{"actor":{"name":"Zhu, Liming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhu, Liming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.09088","locator":"head/meta[name=author|citation_author]"},"assertionId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T21:34:10.965Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","sourceUrl":"https://arxiv.org/abs/2611.09088","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.09088","snapshotId":"43abe9974687febbec37b82d1eee075c627c633d6e8350569189a282a503bae3","contentSha256":"63e557db588a4bc9c36a3a6e451747f2db4b6c5466167d9d0c9b5b6536ffadc6","textHash":"2ee167835fac1911c052b2dc74f4efba3d8afbaf05ca0bb2a7b6aa080ce1e26f","observedAt":"2026-11-12T21:34:10.965Z","basis":"publisher-page-metadata","sourceLinks":43,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/86720f7c55be06d373ba82bdc86e6e0965be97f423f6b2c90098619b55ec38e4/source"}}}],"audits":[{"publicationId":"b3c6a67e-0095-4cb0-87a3-2c9f045961ca","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly credits the four listed authors and frames the findings and recommendation as the authors' reported results and argument.","excerpt":"Authors:Boming Xia, Qinghua Lu, Dino Sejdinovic, Liming Zhu"},{"dimension":"summary","status":"uncertain","explanation":"The reading is faithful but mostly restates the abstract's jargon. A non-specialist will not know what an LLM agent harness, an architectural pattern relationship, an allow rule or an allocation is. The phrase 'Which alternatives worked' is hard to follow without that context. Smallest repair: briefly define the harness as the software that wraps an AI agent's tool use and safety checks, and define allocations as alternative ways of placing those checks. Keep the terms themselves and add tooltips for them, plus Guardrail Enforcement Point and PatternOps. Minor: the source says allocations that 'kept or rebuilt' needed state; the reading drops 'rebuilt'.","excerpt":"Allocations that kept the required order, or kept or rebuilt the needed state, held on their tested paths and operation sequences"},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-11-06 matches the v1 submission date in the source. The 2026-11-09 feed date is not used.","excerpt":"[Submitted on 6 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"Every claim matches a source excerpt. The limitations about generalization and test detail are reasonable and acknowledge gaps. Adding 'not just its design' is a mild gloss on the 'running system and its history' conclusion, not a contradiction. The question follows from the evidence.","excerpt":"a pattern relationship is a property of the running system and its history"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the arXiv abstract page of this paper, which is the most direct access to the source.","excerpt":null}],"createdAt":"2026-11-12T21:02:22.117Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}