{"total":48,"rows":[{"id":"2408.00118","title":"Gemma 2: Improving Open Language Models at a Practical Size","created":"2024-07-31","cited_by_count":1998,"area":null},{"id":"2405.14573","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","created":"2024-05-23","cited_by_count":468,"area":null},{"id":"2412.04984","title":"Frontier Models are Capable of In-context Scheming","created":"2024-12-06","cited_by_count":287,"area":null},{"id":"2406.07358","title":"AI Sandbagging: Language Models can Strategically Underperform on Evaluations","created":"2024-06-11","cited_by_count":145,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2401.13138","title":"Visibility into AI Agents","created":"2024-01-23","cited_by_count":79,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2402.17385","title":"Determinants of LLM-assisted Decision-Making","created":"2024-02-27","cited_by_count":56,"area":null},{"id":"2405.19550","title":"Stress-Testing Capability Elicitation With Password-Locked Models","created":"2024-05-29","cited_by_count":46,"area":null},{"id":"2411.03336","title":"Towards evaluations-based safety cases for AI scheming","created":"2024-10-29","cited_by_count":33,"area":null},{"id":"2403.04471","title":"The Shutdown Problem: An AI Engineering Puzzle for Decision Theorists","created":"2024-03-07","cited_by_count":22,"area":null},{"id":"2402.07862","title":"AI-Augmented Predictions: LLM Assistants Improve Human Forecasting Accuracy","created":"2024-02-12","cited_by_count":21,"area":null},{"id":"2409.20222","title":"Beyond Prompts: Dynamic Conversational Benchmarking of Large Language Models","created":"2024-09-30","cited_by_count":20,"area":null},{"id":"2406.12137","title":"IDs for AI Systems","created":"2024-06-17","cited_by_count":19,"area":null},{"id":"2412.12140","title":"Frontier AI systems have surpassed the self-replicating red line","created":"2024-12-09","cited_by_count":17,"area":null},{"id":"2411.02432","title":"Can LLMs make trade-offs involving stipulated pain and pleasure states?","created":"2024-11-01","cited_by_count":16,"area":null},{"id":"2412.17128","title":"Lies, Damned Lies, and Distributional Language Statistics: Persuasion and Deception with Large Language Models","created":"2024-12-22","cited_by_count":15,"area":null},{"id":"2407.09221","title":"Evaluating AI Evaluation: Perils and Prospects","created":"2024-07-12","cited_by_count":11,"area":null},{"id":"2502.15620","title":"Paradigms of AI Evaluation: Mapping Goals, Methodologies and Culture","created":"2025-02-21","cited_by_count":11,"area":null},{"id":"2502.15212","title":"Measuring AI agent autonomy: Towards a scalable approach with code inspection","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2403.12316","title":"OpenEval: Benchmarking Chinese LLMs across Capability, Alignment and Safety","created":"2024-03-18","cited_by_count":9,"area":null},{"id":"2505.17441","title":"Discovering Forbidden Topics in Language Models","created":"2025-05-23","cited_by_count":9,"area":null},{"id":"2407.12999","title":"Securing the Future of GenAI: Policy and Technology","created":"2024-05-21","cited_by_count":4,"area":null},{"id":"2409.16125","title":"Analyzing Probabilistic Methods for Evaluating Agent Capabilities","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2503.05856","title":"This Is Your Doge, If It Please You: Exploring Deception and Robustness in Mixture of LLMs","created":"2025-03-07","cited_by_count":4,"area":null},{"id":"2503.17378","title":"Large language model-powered AI systems achieve self-replication with no human intervention","created":"2025-03-14","cited_by_count":4,"area":null},{"id":"2606.08625","title":"From Holistic Evaluation to Structured Criteria: Rubrics Across the Evolving LLM Landscape","created":"2026-06-07","cited_by_count":4,"area":null},{"id":"2406.04752","title":"CRiskEval: A Chinese Multi-Level Risk Evaluation Benchmark Dataset for Large Language Models","created":"2024-06-07","cited_by_count":3,"area":null},{"id":"2507.08249","title":"Giving AI Agents Access to Cryptocurrency and Smart Contracts Creates New Vectors of AI Harm","created":"2025-07-11","cited_by_count":3,"area":null},{"id":"2402.01740","title":"Reducing Selection Bias in Large Language Models","created":"2024-01-29","cited_by_count":2,"area":null},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2505.02313","title":"What Is AI Safety? What Do We Want It to Be?","created":"2025-05-05","cited_by_count":2,"area":null},{"id":"2509.25643","title":"SOCK: A Benchmark for Measuring Self-Replication in Large Language Models","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2608.14425","title":"Knowing When to Stop: Bayesian Optimal Stopping for LLM Evaluations","created":"2026-08-14","cited_by_count":2,"area":null},{"id":"2406.00833","title":"Harvard Undergraduate Survey on Generative AI","created":"2024-06-02","cited_by_count":1,"area":null},{"id":"2410.22553","title":"ML Research Benchmark","created":"2024-10-29","cited_by_count":1,"area":null},{"id":"2412.15433","title":"Quantifying detection rates for dangerous capabilities: a theoretical model of dangerous capability evaluations","created":"2024-12-19","cited_by_count":1,"area":null},{"id":"2602.01699","title":"Mitigating loss of control in advanced AI systems through instrumental goal trajectories","created":"2026-02-02","cited_by_count":1,"area":null},{"id":"2606.03237","title":"Solipsistic Superintelligence is Unlikely to be Cooperative","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2606.26071","title":"Model Forensics: Investigating Whether Concerning Behavior Reflects Misalignment","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2607.10455","title":"ANCHOR: Automated Alignment Auditing for CLI Agents on Real-World Harm","created":"2026-07-11","cited_by_count":1,"area":null},{"id":"2505.14943","title":"Soft Prompts for Evaluation: Measuring Conditional Distance of Capabilities","created":"2025-05-20","cited_by_count":0,"area":null},{"id":"2510.25471","title":"An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminated","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2602.15252","title":"Decision Making under Imperfect Recall: Algorithms and Benchmarks","created":"2026-02-16","cited_by_count":0,"area":null},{"id":"2604.24966","title":"Risk Reporting for Developers' Internal AI Model Use","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2606.29175","title":"Direct Causation in International Humanitarian Law and the Challenge of AI-Mediated Civilian Cyber Operations","created":"2026-06-28","cited_by_count":0,"area":null},{"id":"2608.05173","title":"The Closing Window: How Governments Could Lose Their Ability to Restrain Advanced AI","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2610.12436","title":"Ecology of AI Agents: Collaboration Creates a Population Threshold for Takeoff","created":"2026-10-08","cited_by_count":0,"area":null}],"next_cursor":null}