{"total":65,"rows":[{"id":"2505.05410","title":"Reasoning Models Don't Always Say What They Think","created":"2025-05-08","cited_by_count":415,"area":"lr"},{"id":"2412.14093","title":"Alignment faking in large language models","created":"2024-12-18","cited_by_count":360,"area":"alignment"},{"id":"2312.06942","title":"AI Control: Improving Safety Despite Intentional Subversion","created":"2023-12-12","cited_by_count":229,"area":"safety"},{"id":"2503.08679","title":"Chain-of-Thought Reasoning In The Wild Is Not Always Faithful","created":"2025-03-11","cited_by_count":170,"area":"lr"},{"id":"2511.18397","title":"Natural Emergent Misalignment from Reward Hacking in Production RL","created":"2025-11-23","cited_by_count":136,"area":"alignment"},{"id":"2402.07510","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","created":"2024-02-12","cited_by_count":113,"area":"agents"},{"id":"2507.05246","title":"When Chain of Thought is Necessary, Language Models Struggle to Evade Monitors","created":"2025-07-07","cited_by_count":88,"area":"lr"},{"id":"2401.13138","title":"Visibility into AI Agents","created":"2024-01-23","cited_by_count":79,"area":null},{"id":"2501.08156","title":"Are DeepSeek R1 And Other Reasoning Models More Faithful?","created":"2025-01-14","cited_by_count":72,"area":"lr"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2410.03768","title":"Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs","created":"2024-10-02","cited_by_count":55,"area":null},{"id":"2501.17315","title":"A sketch of an AI control safety case","created":"2025-01-28","cited_by_count":39,"area":"agents"},{"id":"2506.01926","title":"Large language models can learn and generalize steganographic chain-of-thought under process supervision","created":"2025-06-02","cited_by_count":32,"area":"lr"},{"id":"2404.03189","title":"The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Models","created":"2024-04-04","cited_by_count":29,"area":null},{"id":"2510.01367","title":"Is It Thinking or Cheating? Detecting Implicit Reward Hacking by Measuring Reasoning Effort","created":"2025-10-01","cited_by_count":27,"area":"lr"},{"id":"2506.22777","title":"Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoning","created":"2025-06-28","cited_by_count":21,"area":"lr"},{"id":"2504.05259","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","created":"2025-04-07","cited_by_count":20,"area":"agents"},{"id":"2501.13011","title":"MONA: Myopic Optimization with Non-myopic Approval Can Mitigate Multi-step Reward Hacking","created":"2025-01-22","cited_by_count":19,"area":"alignment"},{"id":"2510.27378","title":"Measuring Chain-of-Thought Monitorability Through Faithfulness and Verbosity","created":"2025-10-31","cited_by_count":17,"area":"lr"},{"id":"2511.22662","title":"Difficulties with Evaluating a Deception Detector for AIs","created":"2025-11-27","cited_by_count":13,"area":null},{"id":"2505.03439","title":"The Steganographic Potentials of Language Models","created":"2025-05-06","cited_by_count":10,"area":"lr"},{"id":"2506.05296","title":"Control Tax: The Price of Keeping AI in Check","created":"2025-06-05","cited_by_count":10,"area":"agents"},{"id":"2505.20118","title":"TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agent","created":"2025-05-26","cited_by_count":9,"area":null},{"id":"2510.27338","title":"Reasoning Models Sometimes Output Illegible Chains of Thought","created":"2025-10-31","cited_by_count":9,"area":"lr"},{"id":"2510.09714","title":"All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language","created":"2025-10-10","cited_by_count":8,"area":"lr"},{"id":"2602.23163","title":"A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring","created":"2026-02-26","cited_by_count":8,"area":null},{"id":"2603.22582","title":"Lie to Me: How Faithful Is Chain-of-Thought Reasoning in Reasoning Models?","created":"2026-03-23","cited_by_count":8,"area":"lr"},{"id":"2604.01151","title":"Detecting Multi-Agent Collusion Through Multi-Agent Interpretability","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2601.23086","title":"Chain-of-thought obfuscation learned from output supervision can generalise to unseen tasks","created":"2026-01-30","cited_by_count":5,"area":"lr"},{"id":"2604.16242","title":"Detecting and Suppressing Reward Hacking with Gradient Fingerprints","created":"2026-04-17","cited_by_count":5,"area":"alignment"},{"id":"2605.24396","title":"Understanding and Mitigating Premature Confidence for Better LLM Reasoning","created":"2026-05-23","cited_by_count":5,"area":"lr"},{"id":"2607.07368","title":"Multi-Agent AI Control: Distributed Attacks Hamper Per-Instance Monitors","created":"2026-07-08","cited_by_count":5,"area":null},{"id":"2607.22925","title":"Not All LLM Reasoning is Visible in the Chain-of-Thought","created":"2026-07-24","cited_by_count":5,"area":"lr"},{"id":"2411.10588","title":"A dataset of questions on decision-theoretic reasoning in Newcomb-like problems","created":"2024-11-15","cited_by_count":4,"area":"lr"},{"id":"2512.01222","title":"Unsupervised decoding of encoded reasoning using language model interpretability","created":"2025-12-01","cited_by_count":4,"area":"lr"},{"id":"2603.20172","title":"Measuring Faithfulness Depends on How You Measure: Classifier Sensitivity in LLM Chain-of-Thought Evaluation","created":"2026-03-20","cited_by_count":4,"area":"lr"},{"id":"2604.22082","title":"Removing Sandbagging in LLMs by Training with Weak Supervision","created":"2026-04-23","cited_by_count":4,"area":null},{"id":"2504.07831","title":"Deceptive Automated Interpretability: Language Models Coordinating to Fool Oversight Systems","created":"2025-04-10","cited_by_count":3,"area":"mechinterp"},{"id":"2510.14453","title":"Natural Language Tools: A Natural Language Approach to Tool Calling In Large Language Agents","created":"2025-10-16","cited_by_count":3,"area":"agents"},{"id":"2605.12460","title":"Multi-Stream LLMs: Unblocking Language Models with Parallel Streams of Thoughts, Inputs and Outputs","created":"2026-05-12","cited_by_count":3,"area":"lr"},{"id":"2606.11063","title":"CIAware-Bench: Benchmarking Control Intervention Awareness Across Frontier LLMs","created":"2026-06-09","cited_by_count":3,"area":null},{"id":"2608.16347","title":"Architecture-Dependent Causal Transfer of Activation States Across Large Language Models","created":"2026-08-17","cited_by_count":3,"area":null},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2412.03904","title":"MISR: Measuring Instrumental Self-Reasoning in Frontier Models","created":"2024-12-05","cited_by_count":2,"area":"lr"},{"id":"2510.19476","title":"A Concrete Roadmap towards Safety Cases based on Chain-of-Thought Monitoring","created":"2025-10-22","cited_by_count":2,"area":"lr"},{"id":"2601.20641","title":"Investigating the Development of Task-Oriented Communication in Vision-Language Models","created":"2026-01-28","cited_by_count":2,"area":"mllm"},{"id":"2602.13904","title":"Diagnosing Pathological Chain-of-Thought in Reasoning Models","created":"2026-02-14","cited_by_count":2,"area":"lr"},{"id":"2603.08104","title":"Invisible Safety Threat: Malicious Finetuning for LLM via Steganography","created":"2026-03-09","cited_by_count":2,"area":"alignment"},{"id":"2605.11746","title":"When Reasoning Traces Become Performative: Step-Level Evidence that Chain-of-Thought Is an Imperfect Oversight Channel","created":"2026-05-12","cited_by_count":2,"area":"lr"},{"id":"2607.15434","title":"Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation","created":"2026-07-16","cited_by_count":2,"area":"agents"},{"id":"2607.20379","title":"Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanations","created":"2026-07-22","cited_by_count":2,"area":null},{"id":"2603.21567","title":"Kolmogorov Complexity Bounds for LLM Steganography and a Perplexity-Based Detection Proxy","created":"2026-03-23","cited_by_count":1,"area":null},{"id":"2605.26537","title":"Conceptual Steganography","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2606.09931","title":"A Note on the Strategic Confinement Problem","created":"2026-06-07","cited_by_count":1,"area":null},{"id":"2609.01491","title":"GlossoGen: Emergent Language in Complex Multi-Agent LLM Interactions","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2609.32701","title":"Despite Instructions: Frontier Agents Improvise Covert Channels at Test Time","created":"2026-09-26","cited_by_count":1,"area":"agents"},{"id":"2609.39050","title":"Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2606.10304","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2609.08126","title":"SchemeArena: Factorized Stress Testing of Scheming in LLM Agents","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.28900","title":"Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusion","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.31121","title":"Monitor Jailbreaking: Evading Chain-of-Thought Monitoring Without Encoded Reasoning","created":"2026-09-25","cited_by_count":0,"area":"lr"},{"id":"2609.37312","title":"Hidden Reasoning Must Leak, but Need Not Be Readable: Fundamental Opportunities and Limits for Chain-of-Thought Monitoring","created":"2026-09-29","cited_by_count":0,"area":"lr"},{"id":"2609.39838","title":"Learning Steganography Is Easy, Learning Steganographic Reasoning Is Hard","created":"2026-09-30","cited_by_count":0,"area":"lr"},{"id":"2610.03033","title":"When Numbers Start Talking: Numerical Signalling and Strategic Behaviour Among LLMs","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.11012","title":"Distillation for Incrimination and Distillation for Capabilities","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}