{"total":35,"rows":[{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2506.01055","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","created":"2025-06-01","cited_by_count":26,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2511.02841","title":"AI Agents with Decentralized Identifiers and Verifiable Credentials","created":"2025-10-01","cited_by_count":18,"area":"agents"},{"id":"2510.25819","title":"Identity Management for Agentic AI: The new frontier of authorization, authentication, and security for an AI agent world","created":"2025-10-29","cited_by_count":15,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2608.15888","title":"Bounded Agents: Delegation Security for Multi-Agent AI Systems","created":"2026-08-16","cited_by_count":7,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2605.14859","title":"Do Coding Agents Understand Least-Privilege Authorization?","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2601.02371","title":"Permission Manifests for Web Agents","created":"2025-12-07","cited_by_count":5,"area":"agents"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2605.30169","title":"Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2506.23978","title":"LLM Agents Are the Antidote to Walled Gardens","created":"2025-06-30","cited_by_count":3,"area":"agents"},{"id":"2603.02960","title":"Architecting Trust in Artificial Epistemic Agents","created":"2026-03-03","cited_by_count":3,"area":"agents"},{"id":"2604.02767","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","created":"2026-04-03","cited_by_count":3,"area":"agents"},{"id":"2605.10481","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","created":"2026-05-11","cited_by_count":3,"area":"agents"},{"id":"2608.02670","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","created":"2026-08-02","cited_by_count":3,"area":"agents"},{"id":"2604.24920","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2609.04894","title":"From Language Models to World-Acting Systems: Progress and Limits of Agentic AI across Digital, Social, Virtual, and Physical Environments","created":"2026-09-04","cited_by_count":2,"area":"agents"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2605.19035","title":"Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2608.30387","title":"Attesting Outputs and Delegation Ancestry in Multi-Agent AI Systems","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2608.30478","title":"Agents in the Large: Perception-Centered Architecture for Persistent Agents","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2606.10711","title":"The Agentic Web Requires New Normative Infrastructure","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.30246","title":"Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaboration","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2608.05884","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.11344","title":"Governing Agentic AI in FinTech","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.13030","title":"InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.20597","title":"Testing and Evaluation of Agentic AI Systems In Military Command and Control","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2609.00050","title":"Towards Agentic Cloud Engineering: Graph and Loop Engineering with a Zero-Trust Agent Harness","created":"2026-08-30","cited_by_count":0,"area":"agents"},{"id":"2609.29547","title":"When Agents Act Unwatched: The Reduced-Supervision Paradox in Agentic AI","created":"2026-08-28","cited_by_count":0,"area":"agents"},{"id":"2610.17410","title":"Agency as a New Organizing Abstraction for Computer Science","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}