{"total":151,"rows":[{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2601.11893","title":"Taming Various Privilege Escalation in LLM-Based Agent Systems: A Mandatory Access Control Framework","created":"2026-01-17","cited_by_count":54,"area":"agents"},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2604.02022","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","created":"2026-04-02","cited_by_count":36,"area":"agents"},{"id":"2507.11097","title":"The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs","created":"2025-07-15","cited_by_count":34,"area":"inference"},{"id":"2602.16708","title":"Formal Policy Enforcement for Real-World Agentic Systems","created":"2026-02-18","cited_by_count":33,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2508.00500","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","created":"2025-08-01","cited_by_count":28,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2509.03871","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","created":"2025-09-04","cited_by_count":25,"area":"lr"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2605.28914","title":"AIRGuard: Guarding Agent Actions with Runtime Authority Control","created":"2026-05-27","cited_by_count":13,"area":"agents"},{"id":"2510.11203","title":"TraceAegis: Securing LLM-Based Agents via Hierarchical and Behavioral Anomaly Detection","created":"2025-10-13","cited_by_count":12,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2602.01725","title":"SafePred: A Predictive Guardrail for Computer-Using Agents via World Models","created":"2026-02-02","cited_by_count":12,"area":"wm"},{"id":"2505.03814","title":"Cer-Eval: Certifiable and Cost-Efficient Evaluation Framework for LLMs","created":"2025-05-02","cited_by_count":11,"area":null},{"id":"2509.22256","title":"Secure and Efficient Access Control for Computer-Use Agents via Context Space","created":"2025-09-26","cited_by_count":11,"area":"agents"},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2605.26542","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","created":"2026-05-26","cited_by_count":11,"area":null},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2509.26100","title":"AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models","created":"2025-09-30","cited_by_count":9,"area":"agents"},{"id":"2512.00966","title":"Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis","created":"2025-11-30","cited_by_count":9,"area":"agents"},{"id":"2604.13954","title":"HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmark","created":"2026-04-15","cited_by_count":9,"area":"agents"},{"id":"2505.04799","title":"Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems","created":"2025-05-07","cited_by_count":8,"area":"agents"},{"id":"2511.10949","title":"Exposing Weak Links in Multi-Agent Systems under Adversarial Prompting","created":"2025-11-14","cited_by_count":8,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2603.03205","title":"Learning When to Act or Refuse: Guarding Agentic Reasoning Models for Safe Multi-Step Tool Use","created":"2026-03-03","cited_by_count":8,"area":"lr"},{"id":"2605.11882","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","created":"2026-05-12","cited_by_count":8,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2510.00507","title":"Graph2Eval: Automatic Multimodal Task Generation for Agents via Knowledge Graphs","created":"2025-10-01","cited_by_count":7,"area":"mllm"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2603.28807","title":"SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants","created":"2026-03-28","cited_by_count":6,"area":"agents"},{"id":"2604.14858","title":"Benchmarks for Trajectory Safety Evaluation and Diagnosis in OpenClaw and Codex: ATBench-Claw and ATBench-Codex","created":"2026-04-16","cited_by_count":6,"area":null},{"id":"2606.14502","title":"From Chatbot to Digital Colleague: The Paradigm Shift Toward Persistent Autonomous AI","created":"2026-06-12","cited_by_count":6,"area":null},{"id":"2606.29225","title":"PolicyGuard: A Dialogue-Grounded Sub-Agent Verifier for Policy Adherence in LLM Agents","created":"2026-06-28","cited_by_count":6,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2505.16832","title":"From EduVisBench to EduVisAgent: A Benchmark and Multi-Agent Framework for Reasoning-Driven Pedagogical Visualization","created":"2025-05-22","cited_by_count":5,"area":"lr"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2601.12822","title":"MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction","created":"2026-01-19","cited_by_count":5,"area":"agents"},{"id":"2603.02798","title":"Guideline-Grounded Evidence Accumulation for High-Stakes Agent Verification","created":"2026-03-03","cited_by_count":5,"area":"agents"},{"id":"2604.08608","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","created":"2026-04-08","cited_by_count":5,"area":"agents"},{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2604.00304","title":"Asymmetric Actor-Critic for Multi-turn LLM Agents","created":"2026-03-31","cited_by_count":4,"area":"lr"},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2604.25562","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","created":"2026-04-28","cited_by_count":4,"area":"agents"},{"id":"2605.05704","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","created":"2026-05-07","cited_by_count":4,"area":"agents"},{"id":"2606.08919","title":"Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2607.13718","title":"How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement","created":"2026-07-15","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2603.11987","title":"LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratories","created":"2026-03-12","cited_by_count":3,"area":"lr"},{"id":"2604.02767","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","created":"2026-04-03","cited_by_count":3,"area":"agents"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2605.30924","title":"EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents","created":"2026-05-29","cited_by_count":3,"area":"agents"},{"id":"2606.01991","title":"SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoning","created":"2026-06-01","cited_by_count":3,"area":"lr"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2608.05695","title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model","created":"2026-08-06","cited_by_count":3,"area":"wm"},{"id":"2608.23670","title":"Automata from Agent Traces: Failure and Next-Step Prediction","created":"2026-08-24","cited_by_count":3,"area":"agents"},{"id":"2508.05342","title":"Information-Theoretic Graph Fusion with Vision-Language-Action Model for Policy Reasoning and Dual Robotic Control","created":"2025-08-07","cited_by_count":2,"area":"lr"},{"id":"2510.03485","title":"Learning Efficient Guardrails for Compliance","created":"2025-10-03","cited_by_count":2,"area":"agents"},{"id":"2510.12985","title":"SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents","created":"2025-10-14","cited_by_count":2,"area":"agents"},{"id":"2511.17671","title":"MURMUR: Using cross-user chatter to break collaborative language agents in groups","created":"2025-11-21","cited_by_count":2,"area":"agents"},{"id":"2512.08104","title":"AgentCrypt: Advancing Privacy and (Secure) Computation in AI Agent Collaboration","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2602.23258","title":"MASRubric: Auditing Information Flow in Multi-Agent Systems with Failure-Distilled Pitfall Rubrics","created":"2026-02-26","cited_by_count":2,"area":null},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2604.19818","title":"Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI","created":"2026-04-18","cited_by_count":2,"area":"agents"},{"id":"2605.17380","title":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2606.02240","title":"AgentRedBench: Dynamic Redteaming and Integration-Aware Defense for LLM Agents over SaaS Integrations","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2608.16072","title":"Learn What's Left, Not What's Mastered: Saturation Aware Advantage Reweighting for Multi-Reward Policy Optimization","created":"2026-08-17","cited_by_count":2,"area":"lr"},{"id":"2608.21027","title":"Don't Solve, Just Compare: Tiny Advisors for Runtime Intervention in LLM Agents","created":"2026-08-21","cited_by_count":2,"area":"agents"},{"id":"2507.00026","title":"RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2510.13727","title":"From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails","created":"2025-10-15","cited_by_count":1,"area":"safety"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2601.08196","title":"Evaluating Implicit Regulatory Compliance in LLM Tool Invocation via Logic-Guided Synthesis","created":"2026-01-13","cited_by_count":1,"area":"agents"},{"id":"2602.05386","title":"Spider-Sense: Intrinsic Risk Sensing for Efficient Agent Defense with Hierarchical Adaptive Screening","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2604.04426","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","created":"2026-04-06","cited_by_count":1,"area":"agents"},{"id":"2604.18658","title":"Owner-Harm: A Missing Threat Model for AI Agent Safety","created":"2026-04-20","cited_by_count":1,"area":"agents"},{"id":"2605.18672","title":"Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2605.20874","title":"Governance by Construction for Generalist Agents","created":"2026-05-20","cited_by_count":1,"area":"agents"},{"id":"2606.07017","title":"The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspective","created":"2026-06-05","cited_by_count":1,"area":"agents"},{"id":"2606.14517","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","created":"2026-06-12","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"}],"next_cursor":"100"}