Says Block, Still Acts: Why LLM Safety Judgments Fail to Govern Action in LLM Agents

Large language model agents can correctly judge that an action should be blocked while still preferring to take it. We ask why this judgment-action disconnect arises, and whether explicit safety judgment causally governs subsequent action preference. Across three open-weight language models, safety-