{"total":42,"rows":[{"id":"2603.25723","title":"Natural-Language Agent Harnesses","created":"2026-03-26","cited_by_count":61,"area":null},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2602.00612","title":"Lookahead-then-Verify: Reliable Constrained Decoding for Diffusion LLMs under Context-Free Grammars","created":"2026-01-31","cited_by_count":7,"area":null},{"id":"2606.22916","title":"Intent-Governed Tool Authorization for AI Agents","created":"2026-06-22","cited_by_count":5,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2608.19861","title":"PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM Agents","created":"2026-08-20","cited_by_count":3,"area":null},{"id":"2608.23623","title":"When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMs","created":"2026-08-22","cited_by_count":3,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2605.10974","title":"Vertex-Softmax: Tight Transformer Verification via Exact Softmax Optimization","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2606.31045","title":"LabGuard: Grounding Natural-Language Laboratory Rules into Runtime Guards for Embodied Laboratory Agents","created":"2026-06-30","cited_by_count":2,"area":null},{"id":"2607.25364","title":"Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales","created":"2026-07-28","cited_by_count":2,"area":null},{"id":"2608.19303","title":"Outcome Monitors: Recovery Affordances for Silent Tool Failures","created":"2026-08-19","cited_by_count":2,"area":null},{"id":"2604.08059","title":"Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agents","created":"2026-04-09","cited_by_count":1,"area":null},{"id":"2605.27117","title":"Position: AI Safety Requires Effective Controllability","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2606.19386","title":"Bistable by Construction: Wall-Clock-Calibrated State Monitors Have No Moment-Detection Regime at Agent Cadence","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2606.30970","title":"Behavioral Governance for Autonomous AI Agents: The AgentBound Framework","created":"2026-06-29","cited_by_count":1,"area":null},{"id":"2609.11381","title":"Agent-Integrated Software: Interaction Contracts and Continuous Assurance","created":"2026-09-10","cited_by_count":1,"area":null},{"id":"2609.29543","title":"Safe Skill Retirement for Physical Agents","created":"2026-08-25","cited_by_count":1,"area":null},{"id":"2605.02346","title":"APIOT: Autonomous Vulnerability Management Across Bare-Metal Industrial OT Networks","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2605.09387","title":"NEXUS: Continual Learning of Symbolic Constraints for Safe and Robust Embodied Planning","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2606.24598","title":"Toward Self-Evolution-Ready Workflow Harnesses: A Reversible Migration Path and Convertibility Taxonomy for Expert LLM Pipelines","created":"2026-06-15","cited_by_count":0,"area":null},{"id":"2607.09489","title":"Ceci n'est pas une pipe: AI systems as semantic abstractions","created":"2026-07-10","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2608.03866","title":"ADMITBench: A Safety-Governed Reference Framework for Evaluating the Admissibility of Industrial LLM Advisories","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.09025","title":"Context Is Not Authority: Structured Runtime Governance for Financial Market Agents","created":"2026-08-10","cited_by_count":0,"area":null},{"id":"2609.01487","title":"Defense-as-Skill: Evolving Runtime Guard Skill for Skill-Augmented Agents","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.10181","title":"Can AI Agents Deliver Verifiable Network-Wide Outcomes Across Authority Boundaries?","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2609.13800","title":"Do Not Restart: Residual Completion for Stateful Agent Handoffs","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.24755","title":"Epi-Logic: A Conceptual Framework for Epistemic Runtime Control, Schema Validity Checking, and Controlled Accommodation in Autonomous AI Agents","created":"2026-09-21","cited_by_count":0,"area":null},{"id":"2609.26072","title":"Policy-Backed Selective Regeneration under Tainted Inter-Agent Communication","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2609.32198","title":"Agents as Software: A Programming Languages Agenda for Agent Reliability","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.35149","title":"From Migration to Calibration: Aligning Agents with Deployment Requirements","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.35557","title":"The Compiler May Read It, the Agent May Not: Keeping Part of a Research Code Away from a Coding Agent","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2610.02920","title":"HASTE: Evolving Agent Harnesses Against Emerging Attacks Using Sparse Evidence","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.04699","title":"Not Self-Decidable: LLMs Cannot Draw the Boundary of What an Agent Verifier Can Check","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.04836","title":"RSure-Agent: Reliable Use of Tool Observations for Remote Sensing Agents","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.04975","title":"Runtime Authorization of Self-Generated Subgoals in Long-Horizon Tool-Using AI Agents","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.16145","title":"Pollard: Governed Semantic Execution Trees for Framework-Independent AI Agent Control and Replay","created":"2026-10-12","cited_by_count":0,"area":null},{"id":"2610.18230","title":"Holding Agents Accountable with Verifiable Agent Insurance","created":"2026-10-13","cited_by_count":0,"area":null},{"id":"2610.20049","title":"CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection","created":"2026-10-14","cited_by_count":0,"area":null}],"next_cursor":null}