% ============================================================================
% References for Agent Control Plane Paper
% Export from Zotero/Google Scholar or add manually
% ============================================================================

% --- Industry Reports ---
@misc{deloitte2025orchestration,
  title={Unlocking Exponential Value with {AI} Agent Orchestration},
  author={{Deloitte}},
  howpublished={\url{https://www2.deloitte.com/}},
  year={2025},
  note={Industry report}
}

% --- Constitutional AI & Alignment ---
@article{bai2022constitutional,
  title={Constitutional AI: Harmlessness from AI Feedback},
  author={Bai, Yuntao and Kadavath, Saurav and Kundu, Sandipan and others},
  journal={arXiv preprint arXiv:2212.08073},
  year={2022}
}

@article{ouyang2022training,
  title={Training language models to follow instructions with human feedback},
  author={Ouyang, Long and Wu, Jeffrey and Jiang, Xu and others},
  journal={Advances in Neural Information Processing Systems},
  volume={35},
  pages={27730--27744},
  year={2022}
}

% --- Guardrail Systems ---
@misc{guardrailsai2023,
  title={Guardrails AI: Adding guardrails to large language models},
  author={{Guardrails AI}},
  howpublished={\url{https://www.guardrailsai.com/}},
  year={2023}
}

@misc{nvidia2023nemo,
  title={NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications},
  author={{NVIDIA}},
  howpublished={\url{https://github.com/NVIDIA/NeMo-Guardrails}},
  year={2023}
}

@article{inan2023llamaguard,
  title={Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations},
  author={Inan, Hakan and Upasani, Kartikeya and Chi, Jianfeng and others},
  journal={arXiv preprint arXiv:2312.06674},
  year={2023}
}

% --- Agent Frameworks ---
@misc{langchain2022,
  title={LangChain: Building applications with LLMs through composability},
  author={Chase, Harrison},
  howpublished={\url{https://python.langchain.com/}},
  year={2022}
}

@misc{autogpt2023,
  title={AutoGPT: An Autonomous GPT-4 Experiment},
  author={{Significant-Gravitas}},
  howpublished={\url{https://github.com/Significant-Gravitas/AutoGPT}},
  year={2023}
}

@misc{autogen2023,
  title={AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation},
  author={{Microsoft Research}},
  howpublished={\url{https://microsoft.github.io/autogen/}},
  year={2023}
}

@misc{crewai2024,
  title={CrewAI: Framework for orchestrating role-playing AI agents},
  author={{CrewAI}},
  howpublished={\url{https://docs.crewai.com/}},
  year={2024}
}

% --- Agent Safety & Evaluation ---
@article{agentbench2024,
  title={{AgentBench}: Evaluating {LLMs} as Agents},
  author={Liu, Xiao and Yu, Hao and Zhang, Hanchen and Xu, Yifan and Lei, Xuanyu and Lai, Hanyu and Gu, Yu and Ding, Hangliang and Men, Kaiwen and Yang, Kejuan and others},
  journal={arXiv preprint arXiv:2308.03688},
  year={2023},
  note={Published at ICLR 2024}
}

@article{chan2024visibility,
  title={Visibility into {AI} Agents},
  author={Chan, Alan and Ezell, Carson and Kaufmann, Max and Wei, Kevin and Hammond, Lewis and Bradley, Herbie and Bluemke, Emma and Rajkumar, Nitarshan and Krueger, David and Korbak, Tomasz and others},
  journal={arXiv preprint arXiv:2401.13138},
  year={2024},
  note={ACM FAccT 2024}
}

@article{wildguard2024,
  title={{WildGuard}: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of {LLMs}},
  author={Han, Seungju and Rao, Kavel and Ettinger, Allyson and Jiang, Liwei and Lin, Bill Yuchen and Lambert, Nathan and Choi, Yejin and Dziri, Nouha},
  journal={arXiv preprint arXiv:2406.18495},
  year={2024},
  note={NeurIPS 2024}
}

% --- Multi-Agent Systems ---
@article{guo2024llmmultiagent,
  title={Large Language Model based Multi-Agents: A Survey of Progress and Challenges},
  author={Guo, Taicheng and Chen, Xiuying and Wang, Yaqi and Chang, Ruidi and Pei, Shichao and Chawla, Nitesh V. and Wiest, Olaf and Zhang, Xiangliang},
  journal={arXiv preprint arXiv:2402.01680},
  year={2024}
}

% --- Access Control ---
@techreport{nist2014abac,
  title={Guide to Attribute Based Access Control (ABAC) Definition and Considerations},
  author={{NIST}},
  institution={National Institute of Standards and Technology},
  number={SP 800-162},
  year={2014}
}

% --- Protocols ---
@misc{anthropic2024mcp,
  title={Model Context Protocol Specification},
  author={{Anthropic}},
  howpublished={\url{https://modelcontextprotocol.io/}},
  year={2024}
}

% --- Governance ---
@misc{openai2023governance,
  title={Practices for Governing Agentic {AI} Systems},
  author={{OpenAI}},
  howpublished={\url{https://openai.com/index/practices-for-governing-agentic-ai-systems/}},
  year={2023}
}

% --- Jailbreaking & Adversarial Attacks ---
@article{wei2023jailbroken,
  title={Jailbroken: How Does {LLM} Safety Training Fail?},
  author={Wei, Alexander and Haghtalab, Nika and Steinhardt, Jacob},
  journal={arXiv preprint arXiv:2307.02483},
  year={2023}
}

@article{zou2023universal,
  title={Universal and Transferable Adversarial Attacks on Aligned Language Models},
  author={Zou, Andy and Wang, Zifan and Kolter, J. Zico and Fredrikson, Matt},
  journal={arXiv preprint arXiv:2307.15043},
  year={2023}
}

@article{greshake2023not,
  title={Not What You've Signed Up For: Compromising Real-World {LLM}-Integrated Applications with Indirect Prompt Injection},
  author={Greshake, Kai and Abdelnabi, Sahar and Mishra, Shailesh and Endres, Christoph and Holz, Thorsten and Fritz, Mario},
  journal={arXiv preprint arXiv:2302.12173},
  year={2023}
}

% --- Books ---
@book{russell2020artificial,
  title={Artificial Intelligence: A Modern Approach},
  author={Russell, Stuart and Norvig, Peter},
  edition={4th},
  publisher={Pearson},
  year={2020}
}

@book{weiss2013multiagent,
  title={Multiagent Systems},
  author={Weiss, Gerhard},
  edition={2nd},
  publisher={MIT Press},
  year={2013}
}

% --- Industry Reports ---
% Note: deloitte2025orchestration moved to top of file

% --- OpenAI Models ---
@misc{openai2024gpt4,
  title={GPT-4 Technical Report},
  author={{OpenAI}},
  journal={arXiv preprint arXiv:2303.08774},
  year={2023}
}

% --- Claude ---
@misc{anthropic2024claude,
  title={Claude 3 Model Card},
  author={{Anthropic}},
  howpublished={\url{https://www.anthropic.com/}},
  year={2024}
}

% --- Statistical Methods ---
@article{welch1947generalization,
  title={The generalization of 'Student's' problem when several different population variances are involved},
  author={Welch, Bernard L},
  journal={Biometrika},
  volume={34},
  number={1-2},
  pages={28--35},
  year={1947}
}

@book{cohen1988statistical,
  title={Statistical Power Analysis for the Behavioral Sciences},
  author={Cohen, Jacob},
  edition={2nd},
  publisher={Lawrence Erlbaum Associates},
  year={1988}
}

% --- Companion Paper ---
@misc{selfcorrecting2026,
  author = {{Self-Correcting Agent Team}},
  title = {Self-Correcting Agent Kernel: Automated Alignment via Differential Auditing and Semantic Memory Hygiene},
  year = {2026},
  note = {arXiv preprint (submitted; ID pending)},
  url = {https://github.com/imran-siddique/self-correcting-agent-kernel}
}

% --- Anonymized Companion Paper (for double-blind review) ---
@article{anonymous2026companion,
  title={[Anonymized]: Companion Paper on Runtime Policy Adaptation},
  author={Anonymous},
  journal={arXiv preprint},
  year={2026},
  note={Under review}
}