Ruiyang Zhang

Why Formal Monitors Fail: Attack Distribution Entropy as a Coverage Bound for LTL-Based LLM Agent Safety

It is proved that the recall of any fixed-invariant FSA monitor is bounded above by the concentration of the attack distribution: the fraction of attacks covered by the k most frequent trigger-completion patterns, and introduced a pre-deployment entropy test that predicts monitor coverage from a small attack sample, en...