preprint · arXiv (Cornell University) · 2026

Agentproof: Static Verification of Agent Workflow Graphs

Melwin Xavier, Vaisakh M A, Melveena Jolly, Midhun Xavier

Cited by 0Open access

Abstract

Agent frameworks increasingly encode tool-using behavior as explicit workflow graphs, yet safety enforcement remains a runtime concern. These frameworks expose analyzable graph structure through their APIs, enabling pre-deployment static verification of safety properties that runtime guardrails can only check reactively. This paper presents Agentproof, a system that automatically extracts a unified abstract graph model from four major agent frameworks (LangGraph, CrewAI, AutoGen, Google ADK), applies six structural checks with witness trace generation, and evaluates temporal safety policies via a DSL compiled to deterministic finite automata, both statically through a graph x DFA product construction and at runtime over event traces. Unlike general-purpose model checkers, Agentproof requires no manual modeling. In a curated benchmark of 18 author-constructed workflows, 27% of the benchmark contain structural defects (dead-end nodes, unreachable exits) and 55% violate a human-gate policy when enforced, distinct categories that prior work conflates. All 15 temporal policies defined fit within the seven-form DSL fragment, and verification completes in sub-second time for graphs up to 5,000 nodes. The corpus serves as a reproducible benchmark for evaluating static verification tools rather than as a prevalence study; defect rates reflect tool detection capability on a targeted benchmark, not base rates in production systems. Nonetheless, static graph verification complements runtime guardrails by catching topology-level defects that runtime tools miss unless the offending path is exercised.

Cite this paper

APA 7

Xavier, M., A, V. M., Jolly, M., & Xavier, M. (2026). Agentproof: Static Verification of Agent Workflow Graphs. arXiv (Cornell University). https://doi.org/10.48550/arxiv.2603.20356

MLA 9

Xavier, Melwin, et al. “Agentproof: Static Verification of Agent Workflow Graphs.” arXiv (Cornell University), 2026, https://doi.org/10.48550/arxiv.2603.20356.

Chicago

Xavier, Melwin, Vaisakh M A, Melveena Jolly, and Midhun Xavier. 2026. “Agentproof: Static Verification of Agent Workflow Graphs.” arXiv (Cornell University). https://doi.org/10.48550/arxiv.2603.20356.

Harvard

Xavier, M. et al. (2026) ‘Agentproof: Static Verification of Agent Workflow Graphs’, arXiv (Cornell University). Available at: https://doi.org/10.48550/arxiv.2603.20356.

BibTeX

@misc{xavier2026agentproof,
  title = {{Agentproof: Static Verification of Agent Workflow Graphs}},
  author = {Xavier, Melwin and A, Vaisakh M and Jolly, Melveena and Xavier, Midhun},
  journal = {arXiv (Cornell University)},
  year = {2026},
  doi = {10.48550/arxiv.2603.20356}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.