TY  - RPRT
TI  - When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents
AU  - Xiaokun Guo
AU  - Zhen Xu
AU  - Dongdong Huo
AU  - Yanqiu Zhang
AU  - Wei Wang
AU  - Qinfu Yang
AU  - Dongjin Yu
AU  - Yu Wang
PY  - 2026
UR  - https://arxiv.org/abs/2608.27146
ID  - 2608.27146
ER  -