{"total":16,"rows":[{"id":"2504.11703","title":"Progent: Securing AI Agents with Privilege Control","created":"2025-04-16","cited_by_count":141,"area":"agents"},{"id":"2512.23738","title":"Enforcing Temporal Constraints for LLM Agents","created":"2025-12-25","cited_by_count":34,"area":"agents"},{"id":"2602.16708","title":"Formal Policy Enforcement for Real-World Agentic Systems","created":"2026-02-18","cited_by_count":33,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2603.30016","title":"Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks","created":"2026-03-31","cited_by_count":9,"area":"agents"},{"id":"2606.26524","title":"VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills","created":"2026-06-25","cited_by_count":9,"area":"agents"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2602.09947","title":"Trustworthy Agentic AI Requires Deterministic Architectural Boundaries","created":"2026-02-10","cited_by_count":3,"area":"agents"},{"id":"2605.15228","title":"Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems","created":"2026-05-13","cited_by_count":3,"area":"agents"},{"id":"2607.03656","title":"AutoCedar: An Agentic Framework for Verifier-Guided Access Control Policy Synthesis","created":"2026-07-04","cited_by_count":2,"area":"agents"},{"id":"2608.22868","title":"AgentFlow: A Flow-Centric Policy Language and Framework for Securing LLM Agent Systems","created":"2026-08-24","cited_by_count":2,"area":"agents"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2605.00081","title":"Alignment Contracts for Agentic Security Systems","created":"2026-04-30","cited_by_count":1,"area":"agents"},{"id":"2605.08267","title":"Execution Envelopes: A Shared Admission Contract for Backend AI Execution Requests","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2608.02764","title":"Stateful Governance for Concurrent Agentic Systems","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.20481","title":"AEGIS: Preventing Cross-Domain Resource Abuse in MCP","created":"2026-08-20","cited_by_count":0,"area":"agents"}],"next_cursor":null}