{"total":62,"rows":[{"id":"2510.20270","title":"ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Cases","created":"2025-10-23","cited_by_count":65,"area":null},{"id":"2506.10805","title":"Detecting High-Stakes Interactions with Activation Probes","created":"2025-06-12","cited_by_count":53,"area":null},{"id":"2509.03531","title":"Real-Time Detection of Hallucinated Entities in Long-Form Generation","created":"2025-08-26","cited_by_count":34,"area":null},{"id":"2506.14261","title":"RL-Obfuscation: Can Language Models Learn to Evade Latent-Space Monitors?","created":"2025-06-17","cited_by_count":24,"area":null},{"id":"2505.14633","title":"Will AI Tell Lies to Save Sick Children? Litmus-Testing AI Values Prioritization with AIRiskDilemmas","created":"2025-05-20","cited_by_count":18,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2507.10587","title":"Anthropomimetic Uncertainty: What Verbalized Uncertainty in Language Models is Missing","created":"2025-07-11","cited_by_count":14,"area":null},{"id":"2604.11806","title":"Detecting Safety Violations Across Many Agent Traces","created":"2026-04-13","cited_by_count":14,"area":null},{"id":"2510.07686","title":"Stress-Testing Model Specs Reveals Character Differences among Language Models","created":"2025-10-09","cited_by_count":13,"area":null},{"id":"2601.21571","title":"Shaping capabilities with token-level data filtering","created":"2026-01-29","cited_by_count":13,"area":null},{"id":"2507.15886","title":"Combining Cost-Constrained Runtime Monitors for AI Safety","created":"2025-07-19","cited_by_count":10,"area":null},{"id":"2511.17408","title":"The Impact of Off-Policy Training Data on Probe Generalisation","created":"2025-11-21","cited_by_count":9,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2512.22154","title":"Practical challenges of control monitoring in frontier AI deployments","created":"2025-12-15","cited_by_count":8,"area":null},{"id":"2503.05628","title":"Superintelligence Strategy: Expert Version","created":"2025-03-07","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2505.18003","title":"An Example Safety Case for Safeguards Against Misuse","created":"2025-05-23","cited_by_count":4,"area":null},{"id":"2603.05786","title":"Proof-of-Guardrail in AI Agents and What (Not) to Trust from It","created":"2026-03-06","cited_by_count":4,"area":null},{"id":"2605.29601","title":"Training Deliberative Monitors for Black-Box Scheming Detection","created":"2026-05-28","cited_by_count":4,"area":null},{"id":"2505.09341","title":"Access Controls Will Solve the Dual-Use Dilemma","created":"2025-05-14","cited_by_count":3,"area":null},{"id":"2506.11068","title":"Deontological Keyword Bias: The Impact of Modal Expressions on Normative Judgments of Language Models","created":"2025-06-01","cited_by_count":3,"area":null},{"id":"2509.24090","title":"Large-Scale Constraint Generation -- Can LLMs Parse Hundreds of Constraints?","created":"2025-09-28","cited_by_count":3,"area":null},{"id":"2512.20061","title":"Scaling Reinforcement Learning for Content Moderation with Large Language Models","created":"2025-12-23","cited_by_count":3,"area":null},{"id":"2607.08077","title":"Modular Pretraining Enables Access Control","created":"2026-07-09","cited_by_count":3,"area":null},{"id":"2507.11544","title":"The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models","created":"2025-07-08","cited_by_count":2,"area":null},{"id":"2602.05164","title":"Position: Capability Control Should be a Separate Goal From Alignment","created":"2026-02-05","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2504.15125","title":"Contemplative Artificial Intelligence","created":"2025-04-21","cited_by_count":1,"area":null},{"id":"2602.22291","title":"Manifold of Failure: Behavioral Attraction Basins in Language Models","created":"2026-02-25","cited_by_count":1,"area":null},{"id":"2603.08760","title":"Clear, Compelling Arguments: Rethinking the Foundations of Frontier AI Safety Cases","created":"2026-03-08","cited_by_count":1,"area":null},{"id":"2605.20203","title":"GrandGuard: Taxonomy, Benchmark, and Safeguards for Elderly-Chatbot Interaction Safety","created":"2026-04-07","cited_by_count":1,"area":null},{"id":"2606.10487","title":"Stop Early, Spend Less: Hidden-State Probes as a Practical Recipe for Streaming Moderation of LLM Outputs","created":"2026-06-09","cited_by_count":1,"area":null},{"id":"2606.29685","title":"CAREBench: A Child-Safety Risk Benchmark for Language Models","created":"2026-06-29","cited_by_count":1,"area":null},{"id":"2607.02079","title":"HaloGuard 1.0: An Open Weights Constitutional Classifier for Multilingual AI Safety","created":"2026-07-02","cited_by_count":1,"area":null},{"id":"2607.13039","title":"Safeguard-Conditioned Uplift: Measuring Utility-Risk Frontiers for Dual-Use Biology Assistants","created":"2026-06-12","cited_by_count":1,"area":null},{"id":"2608.03070","title":"AI Security Leaderboard: Methodology, Results and Minimal Standard","created":"2026-08-04","cited_by_count":1,"area":null},{"id":"2503.00224","title":"\\`A la recherche du sens perdu: your favourite LLM might have more to say than you can understand","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2508.10108","title":"Amazon Nova AI Challenge -- Trusted AI: Advancing secure, AI-assisted software development","created":"2025-08-13","cited_by_count":0,"area":null},{"id":"2510.11834","title":"Don't Walk the Line: Boundary Guidance for Filtered Generation","created":"2025-10-13","cited_by_count":0,"area":null},{"id":"2512.03001","title":"Invasive Context Engineering to Control Large Language Models","created":"2025-12-02","cited_by_count":0,"area":null},{"id":"2602.02708","title":"BinaryPPO: Efficient Policy Optimization for Binary Classification","created":"2026-02-02","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.19811","title":"Model Capability Assessment and Safeguards for Biological Weaponization","created":"2026-04-15","cited_by_count":0,"area":null},{"id":"2605.00874","title":"Latent Space Probing for Adult Content Detection in Video Generative Models","created":"2026-04-25","cited_by_count":0,"area":null},{"id":"2605.11448","title":"Deep Minds and Shallow Probes","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2605.12265","title":"How Useful Is Cross-Domain Generalization for Training LLM Monitors?","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2605.24247","title":"Improving Labeling Consistency with Detailed Constitutional Definitions and AI-Driven Evaluation","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2606.21638","title":"Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2607.02510","title":"Online Safety Monitoring for LLMs","created":"2026-07-02","cited_by_count":0,"area":null},{"id":"2607.07766","title":"Alignment Plausibility: A New Standard for Assuring AI in Healthcare","created":"2026-07-08","cited_by_count":0,"area":null},{"id":"2607.16224","title":"International Agreements to Limit Frontier AI: Objectives and Exit","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2607.20791","title":"Refusal-Gated Decoding: Preserving Refusal Behavior Under High-Temperature Sampling","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2608.00180","title":"C-Instrument: Automating RL Data Generation and Hillclimbing with a Constitution-Grid Instrument","created":"2026-07-31","cited_by_count":0,"area":null},{"id":"2608.05173","title":"The Closing Window: How Governments Could Lose Their Ability to Restrain Advanced AI","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2608.14089","title":"Regime-Conditional Verification: Correctness Estimation for Adapting and Monitoring Safety Classifiers","created":"2026-08-14","cited_by_count":0,"area":null},{"id":"2608.31105","title":"BLOOM-WILT: Logit Tilting for Behaviour Elicitation in Automated LLM Auditing","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.02707","title":"Door-in-the-Face Requests and Refusal Behaviour in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2609.11504","title":"DeFiFlowBench: Benchmarking and Improving Safe Executability in Natural-Language DeFi Workflow Synthesis","created":"2026-09-10","cited_by_count":0,"area":null},{"id":"2609.15383","title":"Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2609.30454","title":"Auditing System-1 Models on Biosecurity-Relevant Benchmarks: Calibration, Selective Prediction, and Permutation Instability in a Non-Generative Model","created":"2026-09-24","cited_by_count":0,"area":null}],"next_cursor":null}