LLM Agents Exhibit Provenance Sensitivity in Tool Selection

An audit of 450 agent tasks shows that changing the authority of context information causes different tool actions in 5.4% of cases. The findings indicate that agents often struggle to distinguish between authorized and unauthorized evidence when deciding on tool calls and arguments.