The Gate Is Only as Honest as Its Contracts: ContractGuard for the Contract Layer of Risk-Aware Causal Gating

Abstract

Risk-Aware Causal Gating (RACG) defends tool-augmented LLM agents against indirect prompt injection by removing dangerous tools from the agent's visible action space, so that even a fully injection-compliant agent cannot call a tool it cannot see. We make three points. First, this structural guarantee does not eliminate the trust assumption behind safe tool use; it relocates it into the integrity of the tool contracts -- declared preconditions, effects, risk, and authorization -- that the gate r

Categories

Framework mappings

Suggested from the entry's categories.

@misc{iyer2026gate,
  title = {{The Gate Is Only as Honest as Its Contracts: ContractGuard for the Contract Layer of Risk-Aware Causal Gating}},
  author = {Laxmipriya Ganesh Iyer and Rahul Suresh Babu},
  year = {2026},
  month = jun,
  eprint = {2606.18550},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2606.18550}
}