Semantic content validation within permitted output types (P7)

Develop a mechanism to validate the semantic content of agent outputs whose type tags are permitted under the Output Schema Conformance property (P7) in SentinelAgent’s Delegation Chain Calculus, so that biased or malicious reasoning embedded within allowed output types (e.g., an eligibility_result) can be detected and blocked without relying solely on type tags.

Background

The paper introduces P7 (Output Schema Conformance) to whitelist permissible output type tags and block all others, providing a deterministic safeguard against malicious outputs even when API calls are permitted (P6).

However, the authors acknowledge that P7 only checks type tags and not the semantics of the content within those types. Thus, malicious or biased content can still pass if it is embedded within an allowed output type. The authors explicitly state that addressing semantic validation within permitted types remains an open problem.