{"total":20,"rows":[{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2606.22916","title":"Intent-Governed Tool Authorization for AI Agents","created":"2026-06-22","cited_by_count":5,"area":null},{"id":"2607.23586","title":"Are You Still the Agent I Authorized? Earned Authority under a Fixed Ceiling for Evolving Agents","created":"2026-07-26","cited_by_count":5,"area":null},{"id":"2512.18027","title":"CoPE: A Small Language Model for Steerable and Scalable Content Labeling","created":"2025-12-19","cited_by_count":4,"area":null},{"id":"2608.07556","title":"MasDrift: Benchmarking Authorization Preservation Across Multi-Agent Architectures","created":"2026-08-02","cited_by_count":4,"area":null},{"id":"2609.22819","title":"Counterfactual Tool Ranking under Utility, Cost, and Privilege Constraints","created":"2026-09-19","cited_by_count":3,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2609.01595","title":"Mechanism Design for Alignment and Control","created":"2026-09-01","cited_by_count":2,"area":null},{"id":"2609.08062","title":"ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?","created":"2026-09-08","cited_by_count":2,"area":null},{"id":"2604.14723","title":"Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Execution","created":"2026-04-16","cited_by_count":1,"area":null},{"id":"2609.29543","title":"Safe Skill Retirement for Physical Agents","created":"2026-08-25","cited_by_count":1,"area":null},{"id":"2607.04613","title":"Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.09489","title":"Ceci n'est pas une pipe: AI systems as semantic abstractions","created":"2026-07-10","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.26072","title":"Policy-Backed Selective Regeneration under Tainted Inter-Agent Communication","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2609.38469","title":"The Backdrop Exposes What the World Around an Agent Costs It","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.00015","title":"From Proposal to Verified Effect: Praxa, an Evidence-Bound Harness for Governed AI Agent Execution","created":"2026-07-27","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.14477","title":"What Counts as the Same Task? Executable Contracts for Robustness Evaluation of Tool-Using Agents","created":"2026-10-10","cited_by_count":0,"area":null},{"id":"2610.20049","title":"CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection","created":"2026-10-14","cited_by_count":0,"area":null}],"next_cursor":null}