Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents — HN submission

Wed, 25 Feb 2026 23:27:52 GMT

Show HN: Edictum – Runtime governance for LLM agent tool calls

We tested 6 frontier models across 17,420 tool-call interactions and found that models consistently refuse harmful requests in text while executing them through tool calls. We call this divergence the GAP metric. The text says no. The tool call says yes. Edictum is a runtime governance library that enforces safety contracts at the tool-call boundary — the point where you have the tool name, the arguments, and the ability to block before execution. YAML contracts with preconditions, postconditions, PII redaction. Deterministic allow/deny/redact, no LLM-in-the-loop. Zero runtime dependencies…

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents · HackerPapers discussions

Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents — HN submission