{"total":128,"rows":[{"id":"2412.16720","title":"OpenAI o1 System Card","created":"2024-12-21","cited_by_count":1244,"area":"lr"},{"id":"2501.14249","title":"Humanity's Last Exam","created":"2025-01-24","cited_by_count":491,"area":null},{"id":"2412.04984","title":"Frontier Models are Capable of In-context Scheming","created":"2024-12-06","cited_by_count":287,"area":null},{"id":"2503.14499","title":"Measuring AI Ability to Complete Long Software Tasks","created":"2025-03-18","cited_by_count":156,"area":null},{"id":"2406.07358","title":"AI Sandbagging: Language Models can Strategically Underperform on Evaluations","created":"2024-06-11","cited_by_count":145,"area":null},{"id":"2404.08144","title":"LLM Agents can Autonomously Exploit One-day Vulnerabilities","created":"2024-04-11","cited_by_count":128,"area":"agents"},{"id":"2511.04703","title":"Measuring what Matters: Construct Validity in Large Language Model Benchmarks","created":"2025-11-03","cited_by_count":119,"area":null},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2506.15740","title":"SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agents","created":"2025-06-17","cited_by_count":71,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2404.12241","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","created":"2024-04-18","cited_by_count":62,"area":null},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2409.16165","title":"EnIGMA: Interactive Tools Substantially Assist LM Agents in Finding Security Vulnerabilities","created":"2024-09-24","cited_by_count":52,"area":"agents"},{"id":"2410.21514","title":"Sabotage Evaluations for Frontier Models","created":"2024-10-28","cited_by_count":52,"area":null},{"id":"2412.08686","title":"LatentQA: Teaching LLMs to Decode Activations Into Natural Language","created":"2024-12-11","cited_by_count":51,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2405.19550","title":"Stress-Testing Capability Elicitation With Password-Locked Models","created":"2024-05-29","cited_by_count":46,"area":null},{"id":"2501.17315","title":"A sketch of an AI control safety case","created":"2025-01-28","cited_by_count":39,"area":"agents"},{"id":"2505.01420","title":"Evaluating Frontier Models for Stealth and Situational Awareness","created":"2025-05-02","cited_by_count":37,"area":null},{"id":"2411.03336","title":"Towards evaluations-based safety cases for AI scheming","created":"2024-10-29","cited_by_count":33,"area":null},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2602.17753","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","created":"2026-02-19","cited_by_count":30,"area":"agents"},{"id":"2405.10632","title":"Towards interactive evaluations for interaction harms in human-AI systems","created":"2024-05-17","cited_by_count":29,"area":null},{"id":"2605.11086","title":"ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?","created":"2026-05-11","cited_by_count":29,"area":"agents"},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27,"area":"lr"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2508.00910","title":"Cyber-Zero: Training Cybersecurity Agents without Runtime","created":"2025-07-29","cited_by_count":22,"area":"agents"},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2504.05259","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","created":"2025-04-07","cited_by_count":20,"area":"agents"},{"id":"2404.14068","title":"Holistic Safety and Responsibility Evaluations of Advanced AI Models","created":"2024-04-22","cited_by_count":19,"area":null},{"id":"2407.02551","title":"Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses","created":"2024-07-02","cited_by_count":18,"area":"safety"},{"id":"2508.00943","title":"LLMs Can Covertly Sandbag on Capability Evaluations Against Chain-of-Thought Monitoring","created":"2025-07-31","cited_by_count":18,"area":"lr"},{"id":"2412.12140","title":"Frontier AI systems have surpassed the self-replicating red line","created":"2024-12-09","cited_by_count":17,"area":null},{"id":"2411.02432","title":"Can LLMs make trade-offs involving stipulated pain and pleasure states?","created":"2024-11-01","cited_by_count":16,"area":null},{"id":"2503.11917","title":"A Framework for Evaluating Emerging Cyberattack Capabilities of AI","created":"2025-03-14","cited_by_count":16,"area":null},{"id":"2412.17128","title":"Lies, Damned Lies, and Distributional Language Statistics: Persuasion and Deception with Large Language Models","created":"2024-12-22","cited_by_count":15,"area":null},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2508.18370","title":"Training Language Model Agents to Find Vulnerabilities with CTF-Dojo","created":"2025-08-25","cited_by_count":15,"area":"agents"},{"id":"2405.10799","title":"Training Compute Thresholds: Features and Functions in AI Regulation","created":"2024-05-17","cited_by_count":14,"area":null},{"id":"2410.18819","title":"From Imitation to Introspection: Probing Self-Consciousness in Language Models","created":"2024-10-24","cited_by_count":14,"area":null},{"id":"2412.02776","title":"Hacking CTFs with Plain Agents","created":"2024-12-03","cited_by_count":14,"area":"agents"},{"id":"2505.17815","title":"Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systems","created":"2025-05-23","cited_by_count":14,"area":"lr"},{"id":"2509.21651","title":"Can AI Perceive Physical Danger and Intervene?","created":"2025-09-25","cited_by_count":14,"area":null},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2505.07775","title":"Must Read: A Comprehensive Survey of Computational Persuasion","created":"2025-05-12","cited_by_count":13,"area":null},{"id":"2508.09093","title":"Scaling Up Active Testing to Large Language Models","created":"2025-08-12","cited_by_count":13,"area":null},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2502.15797","title":"OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilities","created":"2025-02-18","cited_by_count":12,"area":null},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2407.09221","title":"Evaluating AI Evaluation: Perils and Prospects","created":"2024-07-12","cited_by_count":11,"area":null},{"id":"2411.13768","title":"Evaluation-Driven Development and Operations of LLM Agents: A Process Model and Reference Architecture","created":"2024-11-21","cited_by_count":11,"area":"agents"},{"id":"2502.15620","title":"Paradigms of AI Evaluation: Mapping Goals, Methodologies and Culture","created":"2025-02-21","cited_by_count":11,"area":null},{"id":"2404.02675","title":"Responsible Reporting for Frontier AI Development","created":"2024-04-03","cited_by_count":10,"area":null},{"id":"2405.04325","title":"Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislation","created":"2024-05-07","cited_by_count":10,"area":null},{"id":"2408.16074","title":"Verification methods for international AI agreements","created":"2024-08-28","cited_by_count":10,"area":null},{"id":"2411.11731","title":"Moral Persuasion in Large Language Models: Evaluating Susceptibility and Ethical Alignment","created":"2024-11-18","cited_by_count":10,"area":null},{"id":"2506.20702","title":"The Singapore Consensus on Global AI Safety Research Priorities","created":"2025-06-25","cited_by_count":10,"area":null},{"id":"2410.19406","title":"An Auditing Test To Detect Behavioral Shift in Language Models","created":"2024-10-25","cited_by_count":9,"area":null},{"id":"2507.16196","title":"Do Large Language Models Have a Planning Theory of Mind? Evidence from MindGames: a Multi-Step Persuasion Task","created":"2025-07-22","cited_by_count":9,"area":null},{"id":"2608.05179","title":"Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap","created":"2026-06-29","cited_by_count":9,"area":"agents"},{"id":"2406.10942","title":"Effective Generative AI: The Human-Algorithm Centaur","created":"2024-06-16","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2510.08211","title":"LLMs Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactions","created":"2025-10-09","cited_by_count":8,"area":null},{"id":"2412.04758","title":"Measuring Goal-Directedness","created":"2024-12-06","cited_by_count":7,"area":null},{"id":"2406.15753","title":"The Perils of Optimizing Learned Reward Functions: Low Training Error Does Not Guarantee Low Regret","created":"2024-06-22","cited_by_count":6,"area":"alignment"},{"id":"2407.08708","title":"eyeballvul: a future-proof benchmark for vulnerability detection in the wild","created":"2024-07-11","cited_by_count":6,"area":null},{"id":"2409.01247","title":"Conversational Complexity for Assessing Risk in Large Language Models","created":"2024-09-02","cited_by_count":6,"area":"safety"},{"id":"2511.02823","title":"Optimizing AI Agent Attacks With Synthetic Data","created":"2025-11-04","cited_by_count":6,"area":null},{"id":"2504.13707","title":"OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulation","created":"2025-04-18","cited_by_count":5,"area":"agents"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2505.00174","title":"Real-World Gaps in AI Governance Research","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2507.12872","title":"Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework","created":"2025-07-17","cited_by_count":5,"area":null},{"id":"2603.25681","title":"Self-Improvement of Large Language Models: A Technical Overview and Future Outlook","created":"2026-03-26","cited_by_count":5,"area":"synth"},{"id":"2411.12820","title":"Declare and Justify: Explicit assumptions in AI evaluations are necessary for effective regulation","created":"2024-11-19","cited_by_count":4,"area":null},{"id":"2412.08653","title":"What AI evaluations for preventing catastrophic risks can and cannot do","created":"2024-11-26","cited_by_count":4,"area":null},{"id":"2503.01986","title":"Adaptively profiling models with task elicitation","created":"2025-03-03","cited_by_count":4,"area":null},{"id":"2503.04299","title":"Mapping AI Benchmark Data to Quantitative Risk Estimates Through Expert Elicitation","created":"2025-03-06","cited_by_count":4,"area":null},{"id":"2503.17378","title":"Large language model-powered AI systems achieve self-replication with no human intervention","created":"2025-03-14","cited_by_count":4,"area":null},{"id":"2603.11331","title":"Jailbreak Scaling Laws for Large Language Models: Polynomial-Exponential Crossover","created":"2026-03-11","cited_by_count":4,"area":"alignment"},{"id":"2412.03824","title":"Towards Data Governance of Frontier AI Models","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2509.22504","title":"Estimating the Empowerment of Language Model Agents","created":"2025-09-26","cited_by_count":3,"area":"agents"},{"id":"2410.03662","title":"System 2 Reasoning Capabilities Are Nigh","created":"2024-10-04","cited_by_count":2,"area":"lr"},{"id":"2412.03904","title":"MISR: Measuring Instrumental Self-Reasoning in Frontier Models","created":"2024-12-05","cited_by_count":2,"area":"lr"},{"id":"2506.16150","title":"PRISON: Unmasking the Criminal Potential of Large Language Models","created":"2025-06-19","cited_by_count":2,"area":null},{"id":"2507.21839","title":"Against racing to AGI: Cooperation, deterrence, and catastrophic risks","created":"2025-07-29","cited_by_count":2,"area":null},{"id":"2509.25643","title":"SOCK: A Benchmark for Measuring Self-Replication in Large Language Models","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2510.19476","title":"A Concrete Roadmap towards Safety Cases based on Chain-of-Thought Monitoring","created":"2025-10-22","cited_by_count":2,"area":"lr"},{"id":"2512.10687","title":"Safe for Whom? Rethinking How We Evaluate the Safety of LLMs for Real Users","created":"2025-12-11","cited_by_count":2,"area":"lr"},{"id":"2609.01595","title":"Mechanism Design for Alignment and Control","created":"2026-09-01","cited_by_count":2,"area":null},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2412.15433","title":"Quantifying detection rates for dangerous capabilities: a theoretical model of dangerous capability evaluations","created":"2024-12-19","cited_by_count":1,"area":null},{"id":"2503.23424","title":"What Makes an Evaluation Useful? Common Pitfalls and Best Practices","created":"2025-03-30","cited_by_count":1,"area":null},{"id":"2505.11565","title":"ACSE-Eval: Can LLMs threat model real-world cloud infrastructure?","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2510.11235","title":"AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?","created":"2025-10-13","cited_by_count":1,"area":null},{"id":"2601.00994","title":"ElecTwit: A Framework for Studying Persuasion in Multi-Agent Social Systems","created":"2026-01-02","cited_by_count":1,"area":"agents"},{"id":"2601.13981","title":"VirtualCrime: Evaluating the Criminal Potential and Agentic Behaviors of Large Language Models via Sandbox Simulation","created":"2026-01-20","cited_by_count":1,"area":"agents"},{"id":"2602.01699","title":"Mitigating loss of control in advanced AI systems through instrumental goal trajectories","created":"2026-02-02","cited_by_count":1,"area":null}],"next_cursor":"100"}