The authors defined closure-bound approval across six operational effect classes, distinguishing the visible command or tool call from the full execution closure it activates.
Agent approvals can omit effects triggered downstream by tools
The authors show that coding-agent approval records often capture the invoked command but not its workflow's transitive file, network, or tool effects.
Top University
Jinqian Zhang (Institute of Information Engineering, Chinese Academy of Sciences) · Haojun Xia (Institute of Information Engineering, Chinese Academy of Sciences) · Shujiang Wu (Beihang University) · Jingkun Yue (State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications) · Xia Zhang (Institute of Information Engineering, Chinese Academy of Sciences) · Zhangpei Cheng (Institute of Information Engineering, Chinese Academy of Sciences) · +1 more
Research Digest··2 min read
Zhang et al.
Why this paper
From Institute of Information Engineering, Chinese Academy of Sciences and 3 others
In one line
Coding-agent approval records omit transitive workflow effects; pre-execution effect predictions can recover coverage.
What we could check
- ·No code link found
- ·No weights link found
- ·No dataset link found
- ·No compute details found
- ·No stated limitations found
- ✓Reports numbers on named benchmarks
Observed from the paper text and links we have. Absence here means we did not find it, not that it does not exist.
§