arXiv paper 2607.14166 by researchers employing multiple formal verification tools demonstrated that approval gates, cancel primitives, and timeout mechanisms across all 6 surveyed agent frameworks fail to actually prevent side effects during nominally paused states.