@misc{indiciaeb53693a0accb, title = {What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents}, author = {Shawn Ray}, year = {2026}, url = {https://arxiv.org/abs/2607.22868}, note = {Source identifier: 2607.22868} }