paperSeptember 2026Unreviewed

CONTINUITY: Security-Context Contracts for Composable LLM Agent Controls

Chris Zheng, Geng Yang

Abstract

LLM agent systems increasingly combine provenance tracking, authorization, policy enforcement, protocol adapters, and execution controls. However, individually correct security mechanisms do not necessarily compose into an end-to-end secure system: security-critical context may be dropped, widened, rebound, or reinterpreted as actions cross component boundaries. We identify this failure mode as security-context discontinuity and introduce CONTINUITY, a framework for verifiable composition of age

Cite

@misc{zheng2026continuity,
  title = {{CONTINUITY: Security-Context Contracts for Composable LLM Agent Controls}},
  author = {Chris Zheng and Geng Yang},
  year = {2026},
  month = sep,
  eprint = {2609.05269},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2609.05269}
}