PASE: Neurosymbolic System Cuts Cloud Failure Recovery Time by More Than 40 Percent

Can an LLM Safely Manage Cloud Failure Recovery?

Autonomous failure recovery in cloud-scale infrastructure systems is today one of the most ambitious goals of SRE engineering. Traditional approaches rely on predefined runbooks — scripts and procedures that cover known failures but break down when facing new, unseen scenarios. LLMs offer flexibility and generalization capability, but also bring risk: they can generate recovery plans that are logically incorrect or that would themselves cause additional problems.

The research team of Junyan Tan, Haoran Lin, Siyuan Guo, Yichen Fang, Xinyue Luo, Tianyu Shen, and Zeyu Qiao in the paper “Safe and Adaptive Cloud Healing: Verifying LLM-Generated Recovery Plans with a Neural-Symbolic World Model” (arXiv:2607.01595) offers a resolution to this tension: PASE, a Planning-Aware Semantic self-healing engine that combines neural flexibility and symbolic safety.

Architecture: Three Components in One Loop

PASE does not rely on a single technology but on an integrated system of three components operating in a continuous reason-plan-verify-adapt loop:

The LLM Plan Synthesis Engine receives a fault description and generates a structured recovery plan built from semantic primitives — elementary actions the system can take. Rather than free text, the output is a formalized plan amenable to automated verification.

The Neural-Symbolic World Model takes the generated plan and simulates its execution within a virtual model of the system. Each step of the plan is verified against the consistency of the system state — a plan that would lead to an impermissible or infeasible state is rejected before it is ever applied to the production infrastructure.

The Meta-Prompt Optimizer is trained with deep reinforcement learning and learns to dynamically adapt the instructions sent to the LLM. Instead of a static prompt that applies to all situations, the optimizer selects an instruction tailored to the specific fault type and current system state — iteratively improving the quality of generated plans.

Results: More Than 40 Percent Faster Recovery

Evaluation was conducted on datasets simulating fault injection into cloud-scale systems, including previously unseen fault types. Key results:

• Reduction in mean recovery time of more than 40 percent compared to previous best approaches
• Improved fault detection on scenarios not seen during training — demonstrating generalization capability
• Superior performance on real-world cloud fault injection datasets

The figure of >40% reduction in MTTR (mean time to recovery) is particularly significant because modern cloud systems are already highly optimized; any further reduction requires either more engineers or smarter tooling.

Why Symbolic Verification Is Critical

PASE’s central innovation is not the LLM itself — it is the combination of the LLM with a world model that prevents the application of unsafe plans. This is especially important for cloud healing because an incorrect recovery action can be worse than the failure itself: resetting the wrong service can cause cascading problems, and incorrect reconfiguration can lead to data loss.

Symbolic validation through simulation means that only feasible and consistent plans are passed to execution. The system does not rely on the LLM always being right — it relies on a verifier that does not allow it to make errors that would be dangerous.

Autonomous SRE Without a Human in the Loop

The practical vision of the paper is clear: autonomous SRE-style self-healing in which a human is not needed for every incident. In a scenario where cloud systems handle thousands of potential failures per week, a 40 percent time saving is not just a metric — it means engineers can devote attention to more complex problems instead of routine interventions.

PASE is moreover not purely reactive. The Meta-Prompt Optimizer improves over time through experience, meaning the system gets better the more failures it handles — a classic characteristic of RL-based approaches that distinguishes it from static runbook automation.

The paper, spanning 13 pages with detailed architecture and experimental evaluation, positions neurosymbolic program synthesis as a new foundation for autonomous cloud reliability management — a combination that, according to the authors, overcomes the limitations of both pure LLM and pure symbolic approaches.