New Framework Quantifies Residual Risk in Agentic AI Systems

Hassan Karim, Sai Sitharaman, Deepti Gupta, Danda B. Rawat· July 22, 2026 View original

Summary

CPSAINT and FRIESA-K form a new compositional framework that links AI agent failure mechanisms to quantified residual risk estimates, providing a comprehensive view for resilient agentic AI. It decomposes integrity across seven layers and uses a Markov model to ground control effectiveness, supporting cross-domain reasoning for trust.

Researchers have introduced CPSAINT and FRIESA-K, a novel compositional framework designed to provide a more comprehensive understanding and quantification of residual risk in agentic AI systems. Current risk models often offer only partial views, either describing failure mechanisms without quantifiable risk estimates or providing estimates without detailing the internal failure paths. This new framework bridges that gap by coupling these two perspectives. CPSAINT provides a seven-layer integrity decomposition, spanning physical state, sensors, data, compute, actuators, environment, and time, allowing for a granular analysis of potential failure points. FRIESA-K then maps each identified failure path to a quantified risk instance, grounding the resistance term in a controlled absorbing Markov model. This approach derives control effectiveness from state dynamics rather than informal scores, resulting in a concise mechanism-to-magnitude pipeline for resilient agentic and embodied AI, applicable across diverse scenarios like warehouse robots and financial agents.

Why it matters

As agentic AI systems become more autonomous and cross critical trust boundaries, a robust, quantifiable framework for assessing and managing their residual risk is essential for safe and responsible deployment.

How to implement this in your domain

  1. 1Study the CPSAINT and FRIESA-K framework to understand its layers of decomposition and risk quantification methodology.
  2. 2Integrate a similar compositional risk assessment approach into the development lifecycle of agentic AI products.
  3. 3Develop internal tools to model and quantify control effectiveness based on state dynamics for AI systems.
  4. 4Establish cross-functional teams to apply this framework for identifying and mitigating risks in complex AI deployments.

Who benefits

RoboticsAutonomous VehiclesFinancial ServicesCybersecurityDefense

Key takeaways

  • CPSAINT and FRIESA-K framework quantifies residual risk in agentic AI by linking failure paths to estimates.
  • It uses a seven-layer integrity decomposition for granular analysis of failure points.
  • Control effectiveness is grounded in a controlled absorbing Markov model for quantitative rigor.
  • The framework supports cross-domain reasoning for resilient agentic and embodied AI.

Original post by Hassan Karim, Sai Sitharaman, Deepti Gupta, Danda B. Rawat

"arXiv:2607.18243v1 Announce Type: new Abstract: Agentic AI is crossing trust boundaries faster than current risk models can represent. Existing approaches provide one of two partial views. They either describe failure mechanisms without producing a transferable residual-risk esti…"

View on X

Originally posted by Hassan Karim, Sai Sitharaman, Deepti Gupta, Danda B. Rawat on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses

More in AI Research

AI Engineering & DevToolsAI Research

New Tool Generates Contamination-Resistant, Labeled Code Datasets for LLMs

Spaghetti Architect is a new open-source tool that generates controlled, multi-language code datasets, addressing issues of contamination and lack of semantic control in existing code corpora. It creates correct-by-construction programs with adjustable "messiness" and difficulty labels, making it ideal for training and evaluating code-generating LLMs.

Yuxiang JiJul 22, 2026
AI ResearchAI Engineering & DevTools

New Method Safely Gates Hazardous LLM Knowledge Without Deletion

Researchers introduce Token Inoculation, a method that allows large language models to retain sensitive "dual-use" knowledge while selectively refusing hazardous queries. This approach uses a special token to condition the model's behavior, improving safety without sacrificing benign domain performance.

Seunghyun Lee, Dongyoon Han, Sangdoo YunJul 22, 2026
AI ResearchAI Engineering & DevTools

GNNAS-TSP Selects Optimal Algorithms for Traveling Salesman Problem

Researchers introduce GNNAS-TSP, a Graph Neural Network (GNN)-based framework for automated algorithm selection (AS) for the Traveling Salesman Problem (TSP). GNNAS-TSP learns TSP instance representations directly from raw graph data, avoiding manual feature engineering, and formulates AS as a joint cost-prediction and ranking task to select the best solver from a portfolio under fixed computational budgets.

Zhaoxuan Li, Jiale Yang, Yifei Lu, Mustafa MisirJul 22, 2026