{"total":65,"rows":[{"id":"2505.02077","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","created":"2025-05-04","cited_by_count":71,"area":"safety"},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2506.12469","title":"Levels of Autonomy for AI Agents","created":"2025-06-14","cited_by_count":48,"area":null},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2506.01055","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","created":"2025-06-01","cited_by_count":26,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2511.02841","title":"AI Agents with Decentralized Identifiers and Verifiable Credentials","created":"2025-10-01","cited_by_count":18,"area":"agents"},{"id":"2510.25819","title":"Identity Management for Agentic AI: The new frontier of authorization, authentication, and security for an AI agent world","created":"2025-10-29","cited_by_count":15,"area":"agents"},{"id":"2506.20702","title":"The Singapore Consensus on Global AI Safety Research Priorities","created":"2025-06-25","cited_by_count":10,"area":null},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2608.15888","title":"Bounded Agents: Delegation Security for Multi-Agent AI Systems","created":"2026-08-16","cited_by_count":7,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2605.14859","title":"Do Coding Agents Understand Least-Privilege Authorization?","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2509.00117","title":"Embodied AI: Emerging Risks and Opportunities for Policy Action","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2601.02371","title":"Permission Manifests for Web Agents","created":"2025-12-07","cited_by_count":5,"area":"agents"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2606.22916","title":"Intent-Governed Tool Authorization for AI Agents","created":"2026-06-22","cited_by_count":5,"area":null},{"id":"2509.07131","title":"SoK: Security and Privacy of AI Agents for Blockchain","created":"2025-09-08","cited_by_count":4,"area":null},{"id":"2605.30169","title":"Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2506.23978","title":"LLM Agents Are the Antidote to Walled Gardens","created":"2025-06-30","cited_by_count":3,"area":"agents"},{"id":"2511.15712","title":"Secure Autonomous Agent Payments: Verifying Authenticity and Intent in a Trustless Environment","created":"2025-11-08","cited_by_count":3,"area":null},{"id":"2512.00742","title":"On the Regulatory Potential of User Interfaces for AI Agent Governance","created":"2025-11-30","cited_by_count":3,"area":null},{"id":"2603.02960","title":"Architecting Trust in Artificial Epistemic Agents","created":"2026-03-03","cited_by_count":3,"area":"agents"},{"id":"2603.25100","title":"From Logic Monopoly to Social Contract: Separation of Power and the Institutional Foundations for Autonomous Agent Economies","created":"2026-03-26","cited_by_count":3,"area":null},{"id":"2604.02767","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","created":"2026-04-03","cited_by_count":3,"area":"agents"},{"id":"2605.10481","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","created":"2026-05-11","cited_by_count":3,"area":"agents"},{"id":"2608.02670","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","created":"2026-08-02","cited_by_count":3,"area":"agents"},{"id":"2509.01619","title":"Throttling Web Agents Using Reasoning Gates","created":"2025-09-01","cited_by_count":2,"area":"lr"},{"id":"2604.24920","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.12364","title":"Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2607.10712","title":"Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud","created":"2026-07-12","cited_by_count":2,"area":"safety"},{"id":"2608.30091","title":"VERA: Authority-Preserving Edge Revocation for Federated AI-Agent Workflows","created":"2026-08-30","cited_by_count":2,"area":null},{"id":"2609.04894","title":"From Language Models to World-Acting Systems: Progress and Limits of Agentic AI across Digital, Social, Virtual, and Physical Environments","created":"2026-09-04","cited_by_count":2,"area":"agents"},{"id":"2507.03050","title":"From Turing to Tomorrow: The UK's Approach to AI Regulation","created":"2025-07-03","cited_by_count":1,"area":null},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2603.15799","title":"Prose2Policy (P2P): A Practical LLM Pipeline for Translating Natural-Language Access Policies into Executable Rego","created":"2026-03-16","cited_by_count":1,"area":null},{"id":"2604.07695","title":"AITH: A Post-Quantum Continuous Delegation Protocol for Human-AI Trust Establishment","created":"2026-04-09","cited_by_count":1,"area":null},{"id":"2604.19211","title":"ClawNet: Human-Symbiotic Agent Network for Cross-User Autonomous Cooperation","created":"2026-04-21","cited_by_count":1,"area":null},{"id":"2605.19035","title":"Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2608.30387","title":"Attesting Outputs and Delegation Ancestry in Multi-Agent AI Systems","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2608.30478","title":"Agents in the Large: Perception-Centered Architecture for Persistent Agents","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2609.11258","title":"SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actors","created":"2026-09-10","cited_by_count":1,"area":null},{"id":"2503.15515","title":"Towards Computer-Using Personal Agents","created":"2025-01-31","cited_by_count":0,"area":null},{"id":"2605.16300","title":"Consent Chain Degradation in Embodied Multi-Agent Systems: Bridging the Gap Between AI Agent Governance and Robot Ethics","created":"2026-04-17","cited_by_count":0,"area":null},{"id":"2606.10711","title":"The Agentic Web Requires New Normative Infrastructure","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.30246","title":"Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaboration","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.04613","title":"Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.05364","title":"REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editing","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2608.05884","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.11344","title":"Governing Agentic AI in FinTech","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.13030","title":"InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.13787","title":"From Passive Delegates to Strategic Negotiators: Reinforcing Social Reasoning in Small Language Models with SocialRL","created":"2026-08-13","cited_by_count":0,"area":"lr"},{"id":"2608.20597","title":"Testing and Evaluation of Agentic AI Systems In Military Command and Control","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2608.22160","title":"AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systems","created":"2026-08-23","cited_by_count":0,"area":null},{"id":"2609.00050","title":"Towards Agentic Cloud Engineering: Graph and Loop Engineering with a Zero-Trust Agent Harness","created":"2026-08-30","cited_by_count":0,"area":"agents"},{"id":"2609.03247","title":"Trust Me, I'm Your Developer: Self-Issued Authentication in Large Language Models","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.03425","title":"The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systems","created":"2026-09-03","cited_by_count":0,"area":null},{"id":"2609.15624","title":"Beyond AI Literacy: A Structured Review and Exploratory Meta-Analysis of Measures for Competent Generative-AI Use","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2609.24036","title":"Structured Decomposition for Reliable LLM-Generated Access Control Policies","created":"2026-09-21","cited_by_count":0,"area":null},{"id":"2609.29547","title":"When Agents Act Unwatched: The Reduced-Supervision Paradox in Agentic AI","created":"2026-08-28","cited_by_count":0,"area":"agents"},{"id":"2609.38469","title":"The Backdrop Exposes What the World Around an Agent Costs It","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.00347","title":"Authorization for Self-Modifying AI Agent Populations: Conserving Authority across Replacement, Forking, and Rollback","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.17410","title":"Agency as a New Organizing Abstraction for Computer Science","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}