PCN-Rec: Agentic Proof-Carrying Negotiation for Reliable Governance-Constrained Recommendation
Aradhya Dixit, Shreem Dixit
TL;DR
PCN-Rec addresses governance-constrained recommendation by decoupling reasoning from enforcement through a proof-carrying negotiation pipeline. An LLM-based mediator proposes a Top-N slate along with a machine-checkable certificate, which a deterministic verifier uses to ensure constraints such as head/tail exposure and genre diversity are satisfied; a deterministic repair path handles violations and yields auditable traces. Empirical results on MovieLens-100K show near-perfect governance compliance for feasible users with minimal NDCG@10 loss (≈0.403 vs 0.424, Δ≈-0.022, p<0.05) compared with a one-shot baseline, demonstrating the practical viability of auditable, constraint-satisfying recommendations. The approach provides a scalable, transparent framework that can be extended to richer constraint sets and adaptively adjust the candidate window.
Abstract
Modern LLM-based recommenders can generate compelling ranked lists, but they struggle to reliably satisfy governance constraints such as minimum long-tail exposure or diversity requirements. We present PCN-Rec, a proof-carrying negotiation pipeline that separates natural-language reasoning from deterministic enforcement. A base recommender (MF/CF) produces a candidate window of size W, which is negotiated by two agents: a User Advocate optimizing relevance and a Policy Agent enforcing constraints. A mediator LLM synthesizes a top-N slate together with a structured certificate (JSON) describing the claimed constraint satisfaction. A deterministic verifier recomputes all constraints from the slate and accepts only verifier-checked certificates; if verification fails, a deterministic constrained-greedy repair produces a compliant slate for re-verification, yielding an auditable trace. On MovieLens-100K with governance constraints, PCN-Rec achieves a 98.55% pass rate on feasible users (n = 551, W = 80) versus a one-shot single-LLM baseline without verification/repair, while preserving utility with only a 0.021 absolute drop in NDCG@10 (0.403 vs. 0.424); differences are statistically significant (p < 0.05).
