Search papers, labs, and topics across Lattice.
This paper introduces Progressive Risk Vesting (PRV), a framework for managing the activation of recursive LLM-agent branches that spawn specialists while controlling for risk. By holding a trajectory-level risk budget in escrow and debiting it as branches are activated, the authors establish an anytime harm bound for adaptively generated trees, ensuring that local certificates remain valid based on pre-activation history. The findings reveal that trajectory harm varies with the authority reproduction number, suggesting a nuanced approach to balancing exploration and risk in LLM-agent systems.
Recursive LLM agents can safely broaden their search by managing risk through a novel framework that debits authority as branches activate, revealing critical insights into harm dynamics.
Recursive LLM agents can broaden their search by spawning specialists. Some branches later request tools that send data or deploy code. When should a branch receive authority to act? We distinguish sandbox spawning, in which external controls prevent the specified harm, from capability activation, in which a selected branch crosses an irreversible-action boundary. Progressive Risk Vesting (PRV) holds a trajectory-level risk budget in escrow and debits it as branches are activated. We prove an anytime harm bound for adaptively generated trees. Branch outcomes may be dependent, but each local certificate needs to remain valid conditional on the full pre-activation history, including the information used to select the request. When activation gates, branch charges, and compute constraints are held fixed, delayed vesting preserves every policy available under irrevocable spawn charging. Marginal risk estimates can still fail after branch selection. In a stylized branching model, trajectory harm changes as the authority reproduction number $\mathcal{R}_A$ crosses one. As local risk $p$ approaches zero, trajectory harm is proportional to $p$ below criticality, proportional to $\sqrt{p}$ at criticality, and retains a positive floor above it. A finite-type occupancy model yields risk and compute shadow prices. For nested fanout modes with decreasing marginal value per unit risk, these prices produce a threshold rule. Branching calculations and a split-sample experiment illustrate the results. These synthetic studies do not estimate safety in deployed agents. The analysis suggests a design rule: search broadly in the sandbox and grant recursive authority sparingly, with an explicit risk charge.
