{"total":16,"rows":[{"id":"2502.08745","title":"IHEval: Evaluating Language Models on Following the Instruction Hierarchy","created":"2025-02-12","cited_by_count":53,"area":null},{"id":"2502.15851","title":"Control Illusion: The Failure of Instruction Hierarchies in Large Language Models","created":"2025-02-21","cited_by_count":33,"area":null},{"id":"2408.07004","title":"Casper: Prompt Sanitization for Protecting User Privacy in Web-Based Large Language Models","created":"2024-08-13","cited_by_count":8,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2505.00626","title":"The Illusion of Role Separation: Hidden Shortcuts in LLM Role Learning (and How to Fix Them)","created":"2025-05-01","cited_by_count":6,"area":null},{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2505.14549","title":"Can Large Language Models Really Recognize Your Name?","created":"2025-05-20","cited_by_count":4,"area":null},{"id":"2504.16871","title":"Exploring How LLMs Capture and Represent Domain-Specific Knowledge","created":"2025-04-23","cited_by_count":3,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2606.04109","title":"Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2606.29960","title":"IHDec: Divergence-Steered Contrastive Decoding for Securing Multi-Turn Instruction Hierarchies","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2609.13725","title":"IBBench-Light: A Paired Evaluation of Task-Conditioned Responses to External Directives","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.16984","title":"Nameless Tokenization: A Lossless Tokenizer-Level Defense Against Control-Token Forgery in Open-Weight LLMs","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.33179","title":"Scoring the Wrong Question: Readout Failures in Constrained-Option Evaluation","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.05139","title":"Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs","created":"2026-10-04","cited_by_count":0,"area":null}],"next_cursor":null}