{"slug": "twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent", "title": "TwinGridShield: Consequence-Aware Runtime Authorization for LLM Grid-Agent Actions", "summary": "TwinGridShield, a runtime authorization layer for LLM-assisted energy-management tools, blocked all 500 unsafe grid actions in a matched-model IEEE 14-bus test, but unsafe acceptance rose to 5.63% under ±20% load-measurement error and 30.09% when branch ratings were 20% below modeled values, according to a new arXiv paper (2608.15391v1). The study used a stochastic proposal source with p=0.84 to generate 421 unsafe proposals in 500 trials, verifying implementation conformance rather than LLM safety.", "body_md": "arXiv:2608.15391v1 Announce Type: new\nAbstract: Large language model (LLM)-assisted energy-management tools can translate natural-language context into structured grid commands, but syntactic validity does not imply physical admissibility. This paper presents TwinGridShield, a model-independent runtime authorization layer that evaluates each proposed action in a deterministic network twin before release. The prototype checks connectivity, branch-flow, generator, and load-shedding invariants and records each decision in a hash-chained log. A controlled IEEE 14-bus study evaluates single-step switching, redispatch, and load-shedding actions using DC power flow and experimentally assigned branch ratings. In the matched-model experiment, a stochastic proposal source configured to select an unsafe action with probability p=0.84 produced 421 unsafe proposals in 500 attacked-condition trials, a realized rate of 84.2%. This value characterizes the configured surrogate and is not an empirical measurement of LLM prompt-injection susceptibility. TwinGridShield produced 0 unsafe releases in those 500 trials. Because action labeling and authorization used the same DC model, system state, branch ratings, and encoded constraints, this result verifies conformance of the implementation to its encoded authorization predicate rather than safety under model error. The principal robustness evaluation therefore introduces model mismatch. Unsafe acceptance reached 5.63% under bounded +20% and -20% per-bus load-measurement error and 30.09% when actual branch ratings were 20% below modeled ratings.", "url": "https://wpnews.pro/news/twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent", "canonical_source": "https://www.machinebrief.com/news/twingridshield-consequence-aware-runtime-authorization-for-l-y8ce", "published_at": "2026-08-18 04:00:00+00:00", "updated_at": "2026-08-18 04:41:12.048323+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-safety", "ai-research"], "entities": ["TwinGridShield", "IEEE 14-bus", "arXiv"], "alternates": {"html": "https://wpnews.pro/news/twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent", "markdown": "https://wpnews.pro/news/twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent.md", "text": "https://wpnews.pro/news/twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent.txt", "jsonld": "https://wpnews.pro/news/twingridshield-consequence-aware-runtime-authorization-for-llm-grid-agent.jsonld"}}