{"total":17,"rows":[{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2404.06921","title":"GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications","created":"2024-04-10","cited_by_count":23,"area":null},{"id":"2511.17959","title":"Towards Automating Data Access Permissions in AI Agents","created":"2025-11-22","cited_by_count":21,"area":null},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2403.13721","title":"Large Language Models meet Network Slicing Management and Orchestration","created":"2024-03-20","cited_by_count":7,"area":null},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2608.21159","title":"AID-Guard: Stateful Authorization for Delegated Agent Effects","created":"2026-08-21","cited_by_count":5,"area":null},{"id":"2511.20284","title":"Can LLMs Make (Personalized) Access Control Decisions?","created":"2025-11-25","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2601.23132","title":"Verifiable Manifest Signing and Transparency Enforcement for Secure MCP-Based LLM Pipelines","created":"2026-01-30","cited_by_count":2,"area":null},{"id":"2512.10563","title":"NormCode: A Semi-Formal Language for Auditable AI Planning","created":"2025-12-11","cited_by_count":1,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2607.09489","title":"Ceci n'est pas une pipe: AI systems as semantic abstractions","created":"2026-07-10","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}