Tag
This paper tests whether stacked runtime gates (deterministic rules plus LLM judges) for agent tool calls fail independently, finding that rule+judge layers compose to ~1.9-2.1 multiplication-equivalent layers while two LLM judges only compose to ~1.2-1.5 due to correlated failures.