{"total":21,"rows":[{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2605.26542","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","created":"2026-05-26","cited_by_count":11,"area":null},{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2608.21159","title":"AID-Guard: Stateful Authorization for Delegated Agent Effects","created":"2026-08-21","cited_by_count":5,"area":null},{"id":"2511.20284","title":"Can LLMs Make (Personalized) Access Control Decisions?","created":"2025-11-25","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2602.05164","title":"Position: Capability Control Should be a Separate Goal From Alignment","created":"2026-02-05","cited_by_count":2,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2606.23449","title":"AOHP: An Open-Source OS-Level Agent Harness for Personalized, Efficient and Secure Interaction","created":"2026-06-22","cited_by_count":2,"area":null},{"id":"2607.25364","title":"Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales","created":"2026-07-28","cited_by_count":2,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2603.28345","title":"Reachability Across the NL/PL Boundary: A Taxonomy-Driven Dataflow Model for LLM-Integrated Applications","created":"2026-03-30","cited_by_count":1,"area":null},{"id":"2609.02852","title":"The Implications of Linguistic Illegibility for LLM Security","created":"2026-09-02","cited_by_count":1,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2606.05679","title":"Data Flow Control: Data Safety Policies for AI Agents","created":"2026-06-04","cited_by_count":0,"area":null},{"id":"2607.14570","title":"Democratizing Agent Deployment Safety: A Structural Monitoring Approach","created":"2026-07-16","cited_by_count":0,"area":null},{"id":"2608.26225","title":"Agent Mesh: Reliability Primitives for Non-Idempotent Agent Delegation - Identity Adequacy and Evidence Adequacy","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.35557","title":"The Compiler May Read It, the Agent May Not: Keeping Part of a Research Code Away from a Coding Agent","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.36373","title":"Audience-Bound Persistent Memory: Authorization Across the Memory Lifecycle","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.36414","title":"Eternal Sunshine of the Spotless Mind: Systematically Erasing LLM's Memories","created":"2026-09-29","cited_by_count":0,"area":null}],"next_cursor":null}