Skip to content
Open access

TabGuard: Agentic LLM Orchestration for Adaptive Tabular Anomaly Detection via Dynamic Validator Selection and Generation

2026 · Proceedings of the First Workshop on Structured Understanding, Retrieval, and Generation in the LLM Era (SURGeLLM 2026) · pp. 152-161 · 0 citations · 20 references

TL;DR

T AB G UARD is introduced, an agentic framework that resolves semantic heterogeneity, domain-specific validation rules, and enterprise-scale processing through semantic routing and decouples expensive cognitive reasoning from scalable programmatic execution, enabling deployment on enterprise datasets without per-cell inference.

Abstract

Tabular anomaly detection is challenging because real-world tables contain heterogeneous columns, ranging from structured identifiers to free-form text. Existing methods face a fundamental trilemma: rule-based systems require extensive manual configuration and fail on novel schemas; statistical methods scale efficiently but miss semantic errors; and LLM-based approaches understand semantics but incur prohibitive per-cell inference costs. No prior method simultaneously addresses semantic heterogeneity, domain-specific validation rules, and enterprise-scale processing. We introduce T AB G UARD , an agentic framework that resolves this trilemma through semantic routing. Using LLM function calling, the system analyzes a small sample of each column and dynamically selects the most effective validation strategy, routing to a regex-based valida-tor for syntactic patterns, a code-generation val-idator for domain-specific rules (such as Luhn checksums for credit cards), or an embedding-based validator for distributional outliers. This architecture decouples expensive cognitive reasoning ( O ( m ) LLM calls for m columns) from scalable programmatic execution, enabling deployment on enterprise datasets without per-cell inference.

Read PDF

Similar papers

Conference Jul 2026

An Agentic LLM-based Architecture for Automated Anomaly Detection and Adaptive Remediation

Traditional cloud monitoring often relies on static remediation procedures that are difficult to adapt to dynamic and heterogeneous infrastructures. This paper proposes an agentic LLM-based architecture for adaptive remediation planning from confirmed cloud anomalies. The goal is not to replace anomaly detectors, but t...

Paolo Palmiero, Antonio Iannaccone, D. Granata et al. · 0 citations
Open access Jul 2026

LLM-MetaAS: A Semantic-Statistical Policy Routing Framework for AutoML Execution Strategy Selection

LLM-MetaAS is proposed, a semantic-statistical framework for AutoML execution policy selection that improves overall AutoML performance and selects policies closer to the oracle than fixed strategies, random selection, and the native Auto-sklearn 2.0 selector.

Zhihuan Peng, Pincheng Liu, Yong Li et al. · 0 citations
Preprint Aug 2026

TwinGridShield: Consequence-Aware Runtime Authorization for LLM Grid-Agent Actions

TwinGridShield is presented, a model-independent runtime authorization layer that evaluates each proposed action in a deterministic network twin before release that verifies conformance of the implementation to its encoded authorization predicate rather than safety under model error.

M. Rafy · 0 citations
Jul 2026

Chain-Aware Encoding for Microservice Trace Anomaly Detection

This work instantiates CHAINLSTM, a lightweight dual-task LSTM supporting per-event online detection and shows that chain-aware encoding shifts median prediction probability on path anomalies from 0.91 to 0.002, suggesting a wider separation margin for threshold-based detection.

Yi-Liu Xu, Ziwei Hong, Zhongheng Yang et al. · 4 citations
Book Open access Jul 2026

AgentTelemetry: A Fault Detection Benchmark and Toolkit for LLM Agent Observability

AgentTelemetry, an open-source benchmark suite and toolkit for evaluating fault detection in agent systems, and an ablation study proves all nine span kinds are necessary: removing any one makes at least one fault type undetectable.

Krishna Chaitanya Balusu · 2 citations
Review Jul 2026

Bulkhead: Automated Semantic Detection and Remediation of Container Escape Vulnerabilities

Bulkhead is an automated framework that integrates large language models (LLMs) with formal methods for semantic vulnerability discovery and remediation, and uses a multi-agent system to identify and repair PaTra vulnerabilities through multi-dimensional knowledge patterns generalized from known cases.

Qiyuan Fan, Zhi Li, Junjie Li et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.