{"total":66,"rows":[{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2601.11516","title":"Building Production-Ready Probes For Gemini","created":"2026-01-16","cited_by_count":47,"area":"safety"},{"id":"2601.04603","title":"Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks","created":"2026-01-08","cited_by_count":41,"area":"safety"},{"id":"2506.10949","title":"Monitoring Decomposition Attacks in LLMs with Lightweight Sequential Monitors","created":"2025-06-12","cited_by_count":25,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2508.07646","title":"Multi-Turn Jailbreaks Are Simpler Than They Seem","created":"2025-08-11","cited_by_count":17,"area":"safety"},{"id":"2601.02671","title":"Extracting books from production language models","created":"2026-01-06","cited_by_count":17,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2507.02956","title":"A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks","created":"2025-06-29","cited_by_count":10,"area":"safety"},{"id":"2505.18907","title":"Stronger Enforcement of Instruction Hierarchy via Augmented Intermediate Representations","created":"2025-05-25","cited_by_count":9,"area":"safety"},{"id":"2509.03728","title":"PersonaTeaming: Exploring How Introducing Personas Can Improve Automated AI Red-Teaming","created":"2025-09-03","cited_by_count":9,"area":"safety"},{"id":"2604.22167","title":"Estimating Tail Risks in Language Model Output Distributions","created":"2026-04-24","cited_by_count":9,"area":"safety"},{"id":"2602.15001","title":"Boundary Point Jailbreaking of Black-Box LLMs","created":"2026-02-16","cited_by_count":8,"area":"safety"},{"id":"2510.21910","title":"Adversarial D\\'ej\\`a Vu: Jailbreak Dictionary Learning for Stronger Generalization to Unseen Attacks","created":"2025-10-24","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2601.07087","title":"When Should We Introduce Safety Interventions During Pretraining?","created":"2026-01-11","cited_by_count":7,"area":"safety"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2506.12913","title":"Jailbreak Transferability Emerges from Shared Representations","created":"2025-06-15","cited_by_count":6,"area":"safety"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2502.16174","title":"Efficient LLM Moderation with Multi-Layer Latent Prototypes","created":"2025-02-22","cited_by_count":4,"area":"safety"},{"id":"2505.13500","title":"Noise Injection Systemically Degrades Large Language Model Safety Guardrails","created":"2025-05-16","cited_by_count":4,"area":"safety"},{"id":"2506.17299","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","created":"2025-06-17","cited_by_count":4,"area":"safety"},{"id":"2604.08169","title":"Activation Steering for Aligned Open-ended Generation without Sacrificing Coherence","created":"2026-04-09","cited_by_count":4,"area":"safety"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2602.00950","title":"MindGuard: Guardrail Classifiers for Multi-Turn Mental Health Support","created":"2026-02-01","cited_by_count":3,"area":"safety"},{"id":"2604.03962","title":"Predict, Don't React: Value-Based Safety Forecasting for LLM Streaming","created":"2026-04-05","cited_by_count":3,"area":"safety"},{"id":"2604.14865","title":"Segment-Level Coherence for Robust Harmful Intent Probing in LLMs","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2511.01375","title":"Align to Misalign: Automatic LLM Jailbreak with Meta-Optimized LLM Judges","created":"2025-11-03","cited_by_count":2,"area":"safety"},{"id":"2603.29062","title":"CivicShield: A Cross-Domain Defense-in-Depth Framework for Securing Government-Facing AI Chatbots Against Multi-Turn Adversarial Attacks","created":"2026-03-30","cited_by_count":2,"area":"safety"},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2510.01494","title":"Understanding Adversarial Transfer: Why Representation-Space Attacks Fail Where Data-Space Attacks Succeed","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2510.19844","title":"CourtGuard: A Local, Multiagent Prompt Injection Classifier","created":"2025-10-20","cited_by_count":1,"area":"safety"},{"id":"2603.23171","title":"Adaptively Robust LLM Monitoring via Activation Watermarking","created":"2026-03-24","cited_by_count":1,"area":"safety"},{"id":"2603.29038","title":"Trojan-Speak: Bypassing Constitutional Classifiers with No Jailbreak Tax via Adversarial Finetuning","created":"2026-03-30","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.00267","title":"Jailbroken Frontier Models Retain Their Capabilities","created":"2026-04-30","cited_by_count":1,"area":"safety"},{"id":"2605.08496","title":"Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms","created":"2026-05-08","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"},{"id":"2502.09175","title":"FLAME: Flexible LLM-Assisted Moderation Engine","created":"2025-02-13","cited_by_count":0,"area":"safety"},{"id":"2503.15205","title":"A Peek Behind the Curtain: Using Step-Around Prompt Engineering to Identify Bias and Misinformation in GenAI Models","created":"2025-03-19","cited_by_count":0,"area":"safety"},{"id":"2507.06282","title":"The bitter lesson of misuse detection","created":"2025-07-08","cited_by_count":0,"area":"safety"},{"id":"2508.13246","title":"Involuntary Jailbreak: On Self-Prompting Attacks","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2512.03089","title":"Password-Activated Shutdown Protocols for Misaligned Frontier Agents","created":"2025-11-29","cited_by_count":0,"area":"safety"},{"id":"2601.13359","title":"Sockpuppetting: Jailbreaking LLMs by Combining Prefilling with Optimization","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2602.02027","title":"Light Alignment Improves LLM Safety via Model Self-Reflection with a Single Neuron","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2604.25203","title":"BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2605.05682","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.07032","title":"A Systematic Investigation of RL-Jailbreaking in LLMs","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.10901","title":"Beyond Red-Teaming: Formal Guarantees of LLM Guardrail Classifiers","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.22373","title":"Boundary-targeted Membership Inference Attacks on Safety Classifiers","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2605.26999","title":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.03647","title":"All you need to break LLMs are Black-Box, Adapting, Efficient, Transferable, Harmful, Applicable ... Attacks","created":"2026-06-02","cited_by_count":0,"area":"safety"},{"id":"2606.09204","title":"The Injection Paradox: Brand-Level Suppression in Safety-Trained LLM Recommendations via RAG Context Injection","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2607.22926","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","created":"2026-07-24","cited_by_count":0,"area":"safety"},{"id":"2609.08256","title":"ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.09553","title":"Arbitrary Cipher Attacks Against Large Language Models Do Not Require Fine-Tuning","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2609.20129","title":"Local Sparsity Enables Unsupervised LLM Safety Detection","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2609.36657","title":"Constitutional adapters: Inference-time interventions for misalignment and misuse","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}