{"total":60,"rows":[{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2511.17959","title":"Towards Automating Data Access Permissions in AI Agents","created":"2025-11-22","cited_by_count":21,"area":null},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2606.22916","title":"Intent-Governed Tool Authorization for AI Agents","created":"2026-06-22","cited_by_count":5,"area":null},{"id":"2607.23586","title":"Are You Still the Agent I Authorized? Earned Authority under a Fixed Ceiling for Evolving Agents","created":"2026-07-26","cited_by_count":5,"area":null},{"id":"2608.21159","title":"AID-Guard: Stateful Authorization for Delegated Agent Effects","created":"2026-08-21","cited_by_count":5,"area":null},{"id":"2506.12202","title":"Quasar: A Programming Language Specialized for LLM Code Actions","created":"2025-06-13","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2509.20639","title":"A Framework for Rapidly Developing and Deploying Protection Against Large Language Model Attacks","created":"2025-09-25","cited_by_count":3,"area":null},{"id":"2604.23459","title":"Architecture Matters for Multi-Agent Security","created":"2026-04-25","cited_by_count":3,"area":null},{"id":"2606.30383","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","created":"2026-06-29","cited_by_count":3,"area":null},{"id":"2601.16314","title":"Machine-Assisted Grading of Nationwide School-Leaving Essay Exams with LLMs and Statistical NLP","created":"2026-01-22","cited_by_count":2,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2606.00288","title":"Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecture","created":"2026-05-29","cited_by_count":2,"area":null},{"id":"2606.12320","title":"A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents","created":"2026-06-10","cited_by_count":2,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2607.25364","title":"Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales","created":"2026-07-28","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2609.08062","title":"ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?","created":"2026-09-08","cited_by_count":2,"area":null},{"id":"2508.10836","title":"SoK: Data Minimization in Machine Learning","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2508.15748","title":"AI Chaperones Are (Really) All You Need to Prevent Parasocial Relationships with Chatbots","created":"2025-08-21","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2604.16762","title":"CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution","created":"2026-04-18","cited_by_count":1,"area":null},{"id":"2606.16358","title":"The Proxy Knows Too Much: Sealing LLM API Routers with Attested TEEs","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2608.09828","title":"Multi-Agent AI Safety as an Institutional Design Problem","created":"2026-08-10","cited_by_count":1,"area":null},{"id":"2608.21230","title":"Utility Under Attack: Agent Memory Poisoning and the Limits of Content Screening and Provenance Ranking","created":"2026-08-21","cited_by_count":1,"area":null},{"id":"2609.02852","title":"The Implications of Linguistic Illegibility for LLM Security","created":"2026-09-02","cited_by_count":1,"area":null},{"id":"2609.29543","title":"Safe Skill Retirement for Physical Agents","created":"2026-08-25","cited_by_count":1,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2606.05679","title":"Data Flow Control: Data Safety Policies for AI Agents","created":"2026-06-04","cited_by_count":0,"area":null},{"id":"2607.19292","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2608.12789","title":"PIPES: Securing Agent Perception with Provenance and Priors","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2608.26225","title":"Agent Mesh: Reliability Primitives for Non-Idempotent Agent Delegation - Identity Adequacy and Evidence Adequacy","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2609.06140","title":"Counter-Swarm Doctrine: Containing Coordinated Agent Intrusions","created":"2026-09-05","cited_by_count":0,"area":null},{"id":"2609.13800","title":"Do Not Restart: Residual Completion for Stateful Agent Handoffs","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.22259","title":"Which Part of the Context Layer Does the Work? Separating Semantic Content from Retrieval Scaffolding in Text-to-SQL Agents","created":"2026-09-06","cited_by_count":0,"area":null},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.34913","title":"DGF-Bench: A Benchmark for Simulating and Auditing Deception Against Multi-Agent Governance Boards","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.35557","title":"The Compiler May Read It, the Agent May Not: Keeping Part of a Research Code Away from a Coding Agent","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.36373","title":"Audience-Bound Persistent Memory: Authorization Across the Memory Lifecycle","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.38446","title":"What Pretraining and Midtraining Make Learnable from Rewards?","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2609.38469","title":"The Backdrop Exposes What the World Around an Agent Costs It","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2609.38983","title":"Approval Laundering: Systematizing Approval--Execution Binding Failures in AI Coding-Agent Harnesses","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.00015","title":"From Proposal to Verified Effect: Praxa, an Evidence-Bound Harness for Governed AI Agent Execution","created":"2026-07-27","cited_by_count":0,"area":null},{"id":"2610.00354","title":"Proof-Gated Signing: Solver-Checked Transaction Guards that Hold Under State Drift for Onchain AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.00371","title":"Deny Without Disabling: Authorization-Paired Evaluation and Control for Multi-Agent Systems","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.01535","title":"False Floors: LLM Safety Routing Evaluations Break Under Distribution Shift","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.01756","title":"SoK: Decentralized Agent Economic Infrastructure","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.02001","title":"Mingbird: A Local-First Agent Harness Enabling Small Open Models to Complete Real Tasks","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.02920","title":"HASTE: Evolving Agent Harnesses Against Emerging Attacks Using Sparse Evidence","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.06274","title":"What May an Agent Change About Itself? A Containment Floor for Self-Configuring Agent Runtimes","created":"2026-10-05","cited_by_count":0,"area":null},{"id":"2610.13623","title":"APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces","created":"2026-10-09","cited_by_count":0,"area":null},{"id":"2610.14209","title":"Should SLMs be in the Driver's Seat? A Study of Local Models as Interpreters in Cloud-Written Agent Programs","created":"2026-10-09","cited_by_count":0,"area":null},{"id":"2610.18230","title":"Holding Agents Accountable with Verifiable Agent Insurance","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}