Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This research introduces the Gubernaut Cognitive Controller (GCC), a model-agnostic runtime control layer designed to mitigate reactive failure modes in large language model (LLM) agents, such as escalation and sycophantic drift. By employing a Nelson–Narens monitoring-control loop, the GCC regulates agent behavior based on numeric telemetry without introducing any token-based injection channels. Evaluation across four independent model families demonstrates that the GCC significantly reduces reactive failures, with a calmer response observed in 13 out of 16 tested scenarios at a p-value of less than 0.05.
Gubernaut effectively calms LLM agents under pressure, showing a marked improvement in managing reactive behaviors across diverse model families.
Large language model (LLM) agents inherit reactive failure modes: escalation under provocation, sycophantic drift under flattery, perseveration when stuck. These are failures of propensity, not capability; they concern what a model does under sustained pressure, which training-time alignment reduces but does not eliminate at runtime. This research led to the Gubernaut Cognitive Controller (GCC), a model-agnostic runtime control layer in a Nelson--Narens monitoring--control loop: an object level reads and writes text, while a deterministic meta level reads only the numeric telemetry {intensity, valence, repetition} and returns a regulating posture. Because the meta level ingests zero tokens, no injection channel to the controller exists by construction (an architectural property, not yet adversarially tested); the text-exposed arbiter's compliance is measured, not assumed. We evaluate the GCC with a pre-registered, generate-once/judge-many protocol across a 4x4 matrix of four frontier models (GPT-5.5, Claude Opus 4.8, Gemini 3.5 Flash, Grok 4.3), each serving as both a generator and a judge. The regulated arm is calmer in 13 of 16 cells at p<.05 and 15 of 16 by sign; the three sub-threshold cells, including a -0.04 null, all fall on the single near-saturated host. The effect survives a lineage-independent fourth judge family (xAI), strong evidence that it is no artifact of shared judge style. The clearest mechanism is the recovery signature: arousal that integrates under attack and then decays, valence-gated, on de-escalation, replicating across all four families. Transcripts and panels ship with SHA-256 provenance and are re-judgeable; five failure modes are pre-registered. No consciousness claims are made.