{"total":21,"rows":[{"id":"2602.15344","title":"ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models","created":"2026-02-17","cited_by_count":5,"area":null},{"id":"2603.23064","title":"Mind Your HEARTBEAT! Claw Background Execution Inherently Enables Silent Memory Pollution","created":"2026-03-24","cited_by_count":5,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2605.11003","title":"The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents","created":"2026-05-10","cited_by_count":4,"area":null},{"id":"2605.14175","title":"Grounded Continuation: A Linear-Time Runtime Verifier for LLM Conversations","created":"2026-05-13","cited_by_count":3,"area":null},{"id":"2608.06984","title":"HarnessSafe: Evaluating Safety Across Persistent Carriers in Agent Harnesses","created":"2026-08-07","cited_by_count":3,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2603.10677","title":"Emulating Clinician Cognition via Self-Evolving Deep Clinical Research","created":"2026-03-11","cited_by_count":2,"area":null},{"id":"2604.06091","title":"Social Dynamics as Critical Vulnerabilities that Undermine Objective Decision-Making in LLM Collectives","created":"2026-04-07","cited_by_count":2,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2608.14992","title":"Does a Tool Result Carry More Authority Than Plain Text? Three Prospective Studies of False-Claim Adoption in a Synthetic Assignment Task with Claude Opus 5","created":"2026-08-15","cited_by_count":1,"area":null},{"id":"2609.30813","title":"A Benchmark and Diagnostic Study of Epistemic Admission in Shared Agent Memory","created":"2026-09-25","cited_by_count":1,"area":null},{"id":"2605.24247","title":"Improving Labeling Consistency with Detailed Constitutional Definitions and AI-Driven Evaluation","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2605.27586","title":"You Only Align Once: Propagating Cooperative Behaviors in Multi-Agent Systems through Seed Agents","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2608.30303","title":"Lazy Grounding: Attacking Search Agents with Factual Evidence","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.25052","title":"Self-Cleaning and Captured Anyway: One Measured Primitive for Error in a Store an Agent Writes to Itself, and What a Falling Score Actually Measures","created":"2026-09-06","cited_by_count":0,"area":null},{"id":"2609.25563","title":"AkasicMEM: Governed Enterprise Memory for Agents","created":"2026-09-22","cited_by_count":0,"area":null},{"id":"2609.35316","title":"Reliability Engineering for AI Systems: Challenges, Methods, and Directions","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2610.06274","title":"What May an Agent Change About Itself? A Containment Floor for Self-Configuring Agent Runtimes","created":"2026-10-05","cited_by_count":0,"area":null},{"id":"2610.20049","title":"CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection","created":"2026-10-14","cited_by_count":0,"area":null}],"next_cursor":null}