When deploying LLM agents in regulated environments, separate persona (instructions/tone) from execution (work/state) into different trust domains with a governed contract bridge—this lets you evolve agent behavior freely while maintaining execution auditability and data security.
This paper presents Persona-Execution Separation (PES), an architecture pattern for LLM agents in regulated organizations that need to evolve their instructions and tone freely while keeping their work auditable and traceable.