Paper proposes separating persona from execution in auditable LLM agents

A new arXiv paper argues that governed organizations need LLM agents whose persona — prompts, tone and self-presentation — can change freely while their stateful work remains traceable. It notes that a single trust domain cannot satisfy both requirements at once, and proposes a persona-execution separation pattern as an architectural fix. The approach is framed around execution auditability for enterprise deployments.