Proxy Confidence: Auditing Black-Box LLM Agents with a Surrogate's Log-Probabilities

A deployed LLM agent emits tool calls, queries, and code that can be silently wrong -- by the time the error surfaces, the action has run. Frontier chat APIs hide the model's token probabilities; the agent's stated confidence barely beats chance on the mistakes that matter; and resampling does not h