Denying Generated Systems Code the Authority to Act, Because Re-Execution Cannot Undo an Irreversible Effect

arXiv 2609.00430·medium signalXBlueskyLinkedInCopy link

Prior work on LLM-generated systems code treats the specification as durable and the implementation as disposable, which works only when a component's externally visible effects are recoverable and the generator is honest. Targeting the unforgiving case of irreversible effects and a possibly adversarial generator, the authors argue the generated code should only plan while a fixed trusted mediator owns every effect and performs one only when the specification would have produced it, so the guarantee survives regeneration because it lives in the mediator rather than the code. They instantiate this as a reference monitor for regenerated device drivers and give six conditions on the effect vocabulary that decide when such mediation is possible.