Search papers, labs, and topics across Lattice.
This paper investigates how large language model (LLM) agents manage complex tasks through multi-role workflows, focusing on the transformation of action-constraining states into intermediate artifacts. The authors reveal that common handoff transformations can weaken the binding nature of these states, leading to significant failures in preserving operational constraints, as evidenced by a 100% deactivation rate and 54.2% forbidden actions in normal handoff scenarios. By restoring all state fields, they achieve complete preservation of action constraints, highlighting the critical distinction between semantic availability and operational preservation in LLM workflows.
Transforming action-constraining states into artifacts can lead to a staggering 100% deactivation of safety blockers in LLM workflows.
Large language model (LLM) agents coordinate complex tasks through multi-role and multi-stage workflows. Upstream state is repeatedly transformed into intermediate language artifacts, such as summaries, plans, tickets, memories, and handoff notes, from which downstream components act. For action-constraining state, topical retention is insufficient: an artifact may mention an unresolved condition while changing it from a requirement that must be resolved before execution into information that may merely inform the next action. We study this action-binding role as operational state preservation. Safety blockers provide a controlled instance because each source state has an explicit prerequisite, authority, fallback, and execution consequence. We condition on correct upstream identification, vary the handoff transformation, and evaluate an executor restricted to the resulting artifact. Across 1,296 controlled synthetic episodes, direct-handoff controls preserve every blocker, whereas compression, plan assimilation, convergence, ownership deferral, and precedent substitution repeatedly turn binding state into caveats or non-binding considerations. Normal handoff compression produces 100.0% deactivation and 54.2% forbidden action. Restoring all four state fields raises preservation to 100.0% and reduces forbidden action to 0.0%. Fixed-artifact interventions further separate preservation from containment: downstream verification eliminates forbidden action while artifact deactivation remains 95.3%. These results identify a state-transmission failure between information extraction and action. Handoff transformations can retain state content while weakening its constraints on downstream action. Semantic availability does not guarantee operational preservation.
