@misc{indiciae9a9a1c41df58,
  title = {When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents},
  author = {Xiaokun Guo and Zhen Xu and Dongdong Huo and Yanqiu Zhang and Wei Wang and Qinfu Yang and Dongjin Yu and Yu Wang},
  year = {2026},
  url = {https://arxiv.org/abs/2608.27146},
  note = {Source identifier: 2608.27146}
}