Skip to content
arXiv cs.AI · Papers

ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation

arXiv:2605.26542v4 Announce Type: replace-cross Abstract: Tool-using agents increasingly operate in open-ended deployment environments, where they compose file systems, web APIs, code interpreters, and enterprise services at runtime. This creates a safety gap in tool composition: an agent can satisfy every per-tool per