Search papers, labs, and topics across Lattice.
This paper introduces a novel two-dimensional "A-R" behavioral space, defined by Action Rate (A) and Refusal Signal (R), to analyze the execution-level behavior of tool-augmented LLM agents. The authors evaluate models across four normative regimes (Control, Gray, Dilemma, Malicious) and three autonomy configurations (direct execution, planning, reflection), revealing how execution and refusal redistribute across contexts and autonomy levels. The A-R representation enables direct observation of behavioral profiles, scaffold-induced transitions, and coordination variability, offering a deployment-oriented lens for analyzing and selecting tool-enabled LLM agents.
Stop relying on aggregate safety scores: this new A-R behavioral space reveals *how* tool-augmented LLMs redistribute actions and refusals across risk contexts and autonomy levels.
Large language models (LLMs) are increasingly deployed as tool-augmented agents capable of executing system-level operations. While existing benchmarks primarily assess textual alignment or task success, less attention has been paid to the structural relationship between linguistic signaling and executable behavior under varying autonomy scaffolds. This study introduces an execution-layer be-havioral measurement approach based on a two-dimensional A-R space defined by Action Rate (A) and Refusal Signal (R), with Divergence (D) capturing coor-dination between the two. Models are evaluated across four normative regimes (Control, Gray, Dilemma, and Malicious) and three autonomy configurations (di-rect execution, planning, and reflection). Rather than assigning aggregate safety scores, the method characterizes how execution and refusal redistribute across contextual framing and scaffold depth. Empirical results show that execution and refusal constitute separable behavioral dimensions whose joint distribution varies systematically across regimes and autonomy levels. Reflection-based scaffolding often shifts configurations toward higher refusal in risk-laden contexts, but redis-tribution patterns differ structurally across models. The A-R representation makes cross-sectional behavioral profiles, scaffold-induced transitions, and coordination variability directly observable. By foregrounding execution-layer characterization over scalar ranking, this work provides a deployment-oriented lens for analyzing and selecting tool-enabled LLM agents in organizational settings where execution privileges and risk tolerance vary.
