{"total":249,"rows":[{"id":"2510.25741","title":"Scaling Latent Reasoning via Looped Language Models","created":"2025-10-29","cited_by_count":165,"area":"lr"},{"id":"2604.02029","title":"The Latent Space: Foundation, Evolution, Mechanism, Ability, and Outlook","created":"2026-04-02","cited_by_count":43,"area":null},{"id":"2603.05488","title":"Reasoning Theater: Disentangling Model Beliefs from Chain-of-Thought","created":"2026-03-05","cited_by_count":40,"area":"lr"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2511.08579","title":"Training Language Models to Explain Their Own Computations","created":"2025-11-11","cited_by_count":30,"area":null},{"id":"2508.04826","title":"Persistent Instability in LLM's Personality Measurements: Effects of Scale, Reasoning, and Conversation History","created":"2025-08-06","cited_by_count":26,"area":"lr"},{"id":"2603.05706","title":"Reasoning Models Struggle to Control their Chains of Thought","created":"2026-03-05","cited_by_count":25,"area":"lr"},{"id":"2510.16380","title":"MoReBench: Evaluating Procedural and Pluralistic Moral Reasoning in Language Models, More than Outcomes","created":"2025-10-18","cited_by_count":23,"area":"lr"},{"id":"2510.19851","title":"Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorability","created":"2025-10-21","cited_by_count":22,"area":"lr"},{"id":"2512.08093","title":"Training LLMs for Honesty via Confessions","created":"2025-12-08","cited_by_count":22,"area":null},{"id":"2512.13526","title":"Async Control: Stress-testing Asynchronous Control Measures for LLM Agents","created":"2025-12-15","cited_by_count":22,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2510.09312","title":"Verifying Chain-of-Thought Reasoning via Its Computational Graph","created":"2025-10-10","cited_by_count":20,"area":"lr"},{"id":"2605.02087","title":"Model Spec Midtraining: Improving How Alignment Training Generalizes","created":"2026-05-03","cited_by_count":20,"area":null},{"id":"2507.12691","title":"Benchmarking Deception Probes via Black-to-White Performance Boosts","created":"2025-07-16","cited_by_count":19,"area":null},{"id":"2508.00943","title":"LLMs Can Covertly Sandbag on Capability Evaluations Against Chain-of-Thought Monitoring","created":"2025-07-31","cited_by_count":18,"area":"lr"},{"id":"2510.27378","title":"Measuring Chain-of-Thought Monitorability Through Faithfulness and Verbosity","created":"2025-10-31","cited_by_count":17,"area":"lr"},{"id":"2602.20710","title":"Counterfactual Simulation Training for Chain-of-Thought Faithfulness","created":"2026-02-24","cited_by_count":17,"area":"lr"},{"id":"2603.07084","title":"Countdown-Code: A Testbed for Studying The Emergence and Generalization of Reward Hacking in RLVR","created":"2026-03-07","cited_by_count":17,"area":"alignment"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2510.27484","title":"Thought Branches: Interpreting LLM Reasoning Requires Resampling","created":"2025-10-31","cited_by_count":16,"area":"lr"},{"id":"2510.24941","title":"Can Aha Moments Be Fake? Towards Quantifying Decorative and True Thinking in Chain-of-Thought","created":"2025-10-28","cited_by_count":15,"area":"lr"},{"id":"2602.08235","title":"When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agents","created":"2026-02-09","cited_by_count":14,"area":"agents"},{"id":"2605.12673","title":"Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack","created":"2026-05-12","cited_by_count":14,"area":null},{"id":"2510.23966","title":"A Pragmatic Way to Measure Chain-of-Thought Monitorability","created":"2025-10-28","cited_by_count":13,"area":"lr"},{"id":"2511.11584","title":"Output Supervision Can Obfuscate the Chain of Thought","created":"2025-10-11","cited_by_count":13,"area":"lr"},{"id":"2601.21571","title":"Shaping capabilities with token-level data filtering","created":"2026-01-29","cited_by_count":13,"area":null},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2606.07157","title":"Think Fast: Estimating No-CoT Task-Completion Time Horizons of Frontier AI Models","created":"2026-06-05","cited_by_count":12,"area":"lr"},{"id":"2509.24393","title":"Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2602.18297","title":"Analyzing and Improving Chain-of-Thought Monitorability Through Information Theory","created":"2026-02-20","cited_by_count":10,"area":"lr"},{"id":"2508.15842","title":"Lexical Hints of Accuracy in LLM Reasoning Chains","created":"2025-08-19","cited_by_count":9,"area":"lr"},{"id":"2510.27338","title":"Reasoning Models Sometimes Output Illegible Chains of Thought","created":"2025-10-31","cited_by_count":9,"area":"lr"},{"id":"2511.08525","title":"Investigating CoT Monitorability in Large Reasoning Models","created":"2025-11-11","cited_by_count":9,"area":"lr"},{"id":"2511.21399","title":"Steering Awareness: Detecting Activation Steering from Within","created":"2025-11-26","cited_by_count":9,"area":"mechinterp"},{"id":"2512.00218","title":"Reasoning Under Pressure: How do Training Incentives Influence Chain-of-Thought Monitorability?","created":"2025-11-28","cited_by_count":9,"area":"lr"},{"id":"2512.00966","title":"Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis","created":"2025-11-30","cited_by_count":9,"area":"agents"},{"id":"2602.01425","title":"One Probe Won't Catch Them All: Towards Targeted Deception Detection","created":"2026-02-01","cited_by_count":9,"area":"mechinterp"},{"id":"2604.04902","title":"Are Latent Reasoning Models Easily Interpretable?","created":"2026-04-06","cited_by_count":9,"area":"lr"},{"id":"2608.09867","title":"Stealing Reasoning Traces from Proprietary LLM APIs","created":"2026-08-10","cited_by_count":9,"area":"lr"},{"id":"2510.09714","title":"All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language","created":"2025-10-10","cited_by_count":8,"area":"lr"},{"id":"2512.20168","title":"Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography","created":"2025-12-23","cited_by_count":8,"area":"mllm"},{"id":"2512.22154","title":"Practical challenges of control monitoring in frontier AI deployments","created":"2025-12-15","cited_by_count":8,"area":null},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2602.23163","title":"A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring","created":"2026-02-26","cited_by_count":8,"area":null},{"id":"2603.09786","title":"Quantifying the Necessity of Chain of Thought through Opaque Serial Depth","created":"2026-03-10","cited_by_count":8,"area":"lr"},{"id":"2603.22582","title":"Lie to Me: How Faithful Is Chain-of-Thought Reasoning in Reasoning Models?","created":"2026-03-23","cited_by_count":8,"area":"lr"},{"id":"2603.28590","title":"MonitorBench: A Comprehensive Benchmark for Chain-of-Thought Monitorability in Large Language Models","created":"2026-03-30","cited_by_count":8,"area":"lr"},{"id":"2604.22709","title":"Thinking Without Words: Efficient Latent Reasoning with Abstract Chain-of-Thought","created":"2026-04-24","cited_by_count":8,"area":"lr"},{"id":"2607.07184","title":"Predicting LLM Safety Before Release by Simulating Deployment","created":"2026-07-08","cited_by_count":8,"area":"safety"},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2512.10931","title":"Asynchronous Reasoning: Training-Free Interactive Thinking LLMs","created":"2025-12-11","cited_by_count":7,"area":"lr"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2601.23163","title":"Probing the Trajectories of Reasoning Traces in Large Language Models","created":"2026-01-30","cited_by_count":7,"area":"lr"},{"id":"2603.10011","title":"Gemma Needs Help: Investigating and Mitigating Emotional Instability in LLMs","created":"2026-02-17","cited_by_count":7,"area":null},{"id":"2603.16928","title":"Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedback","created":"2026-03-14","cited_by_count":7,"area":"lr"},{"id":"2604.01151","title":"Detecting Multi-Agent Collusion Through Multi-Agent Interpretability","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2604.22074","title":"Outcome Rewards Do Not Guarantee Verifiable or Causally Important Reasoning","created":"2026-04-23","cited_by_count":7,"area":"lr"},{"id":"2605.17672","title":"Stop When Reasoning Converges: Semantic-Preserving Early Exit for Reasoning Models","created":"2026-05-17","cited_by_count":7,"area":"lr"},{"id":"2508.16599","title":"Humans Perceive Wrong Narratives from AI Reasoning Texts","created":"2025-08-09","cited_by_count":6,"area":null},{"id":"2510.05192","title":"From surveillance to signalling: escalation channels as environmental controls for agentic AI","created":"2025-10-06","cited_by_count":6,"area":"agents"},{"id":"2601.14691","title":"Gaming the Judge: Unfaithful Chain-of-Thought Can Undermine Agent Evaluation","created":"2026-01-21","cited_by_count":6,"area":"lr"},{"id":"2601.19928","title":"Towards a Mechanistic Understanding of Large Reasoning Models: A Survey of Training, Inference, and Failures","created":"2026-01-11","cited_by_count":6,"area":"lr"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2604.09563","title":"Seven simple steps for log analysis in AI systems","created":"2026-02-13","cited_by_count":6,"area":null},{"id":"2604.12493","title":"Latent Planning Emerges with Scale","created":"2026-04-14","cited_by_count":6,"area":null},{"id":"2605.15377","title":"Ensemble Monitoring for AI Control: Diverse Signals Outweigh More Compute","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2510.06410","title":"Off-Trajectory Reasoning: Can LLMs Collaborate on Reasoning Trajectory?","created":"2025-10-07","cited_by_count":5,"area":"lr"},{"id":"2601.05076","title":"Chain-of-Sanitized-Thoughts: Plugging PII Leakage in CoT of Large Reasoning Models","created":"2026-01-08","cited_by_count":5,"area":"lr"},{"id":"2601.11517","title":"Do explanations generalize across large reasoning models?","created":"2026-01-16","cited_by_count":5,"area":"lr"},{"id":"2601.13368","title":"Recurrent Confidence Chain: Temporal-Aware Uncertainty Quantification in Large Language Models","created":"2026-01-19","cited_by_count":5,"area":"lr"},{"id":"2601.23086","title":"Chain-of-thought obfuscation learned from output supervision can generalise to unseen tasks","created":"2026-01-30","cited_by_count":5,"area":"lr"},{"id":"2603.30036","title":"Aligned, Orthogonal or In-conflict: When can we safely optimize Chain-of-Thought?","created":"2026-03-31","cited_by_count":5,"area":"lr"},{"id":"2605.18549","title":"Monitoring the Internal Monologue: Probe Trajectories Reveal Reasoning Dynamics","created":"2026-05-18","cited_by_count":5,"area":"lr"},{"id":"2605.29192","title":"ReasonOps: Operator Segmentation for LLM Reasoning Traces","created":"2026-05-28","cited_by_count":5,"area":"lr"},{"id":"2606.13603","title":"Beyond the Commitment Boundary: Probing Epiphenomenal Chain-of-Thought in Large Reasoning Models","created":"2026-06-11","cited_by_count":5,"area":"lr"},{"id":"2606.28425","title":"Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems","created":"2026-06-25","cited_by_count":5,"area":"agents"},{"id":"2607.02514","title":"Distributed Attacks in Persistent-State AI Control","created":"2026-07-02","cited_by_count":5,"area":"agents"},{"id":"2607.22925","title":"Not All LLM Reasoning is Visible in the Chain-of-Thought","created":"2026-07-24","cited_by_count":5,"area":"lr"},{"id":"2509.23291","title":"Scaling Policy Compliance Assessment in Language Models with Policy Reasoning Traces","created":"2025-09-27","cited_by_count":4,"area":"lr"},{"id":"2509.23694","title":"SafeSearch: Automated Red-Teaming of LLM-Based Search Agents","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2512.01222","title":"Unsupervised decoding of encoded reasoning using language model interpretability","created":"2025-12-01","cited_by_count":4,"area":"lr"},{"id":"2602.03978","title":"Monitorability as a Free Gift: How RLVR Spontaneously Aligns Reasoning","created":"2026-02-03","cited_by_count":4,"area":"lr"},{"id":"2603.23607","title":"Reasoning models do not yet follow their reasoning in autonomous driving: The KITScenes LongTail Dataset","created":"2026-03-24","cited_by_count":4,"area":"lr"},{"id":"2603.26410","title":"Why Models Know But Don't Say: Chain-of-Thought Faithfulness Divergence Between Thinking Tokens and Answers in Open-Weight Reasoning Models","created":"2026-03-27","cited_by_count":4,"area":"lr"},{"id":"2605.29601","title":"Training Deliberative Monitors for Black-Box Scheming Detection","created":"2026-05-28","cited_by_count":4,"area":null},{"id":"2606.02211","title":"Consistency Training while Mitigating Obfuscation via Rate Matching","created":"2026-06-01","cited_by_count":4,"area":null},{"id":"2606.12689","title":"Observable Patterns Are Not Explanations: A Causal-Geometric Analysis of Latent Reasoning Models","created":"2026-06-10","cited_by_count":4,"area":"lr"},{"id":"2606.32038","title":"Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision","created":"2026-06-30","cited_by_count":4,"area":null},{"id":"2510.01069","title":"Typed Chain-of-Thought: A Curry-Howard Framework for Verifying LLM Reasoning","created":"2025-10-01","cited_by_count":3,"area":"lr"},{"id":"2510.10448","title":"RECON: Reasoning with Condensation for Efficient Retrieval-Augmented Generation","created":"2025-10-12","cited_by_count":3,"area":"lr"},{"id":"2511.11187","title":"ReTrace: Interactive Visualizations for Reasoning Traces of Large Reasoning Models","created":"2025-11-14","cited_by_count":3,"area":"lr"},{"id":"2511.12001","title":"Critical or Compliant? The Double-Edged Sword of Reasoning in Chain-of-Thought Explanations","created":"2025-11-15","cited_by_count":3,"area":"lr"},{"id":"2601.14553","title":"Self-Blinding and Counterfactual Self-Simulation Mitigate Biases and Sycophancy in Large Language Models","created":"2026-01-21","cited_by_count":3,"area":null},{"id":"2601.19061","title":"Thought-Transfer: Indirect Targeted Poisoning Attacks on Chain-of-Thought Reasoning Models","created":"2026-01-27","cited_by_count":3,"area":"lr"},{"id":"2605.12460","title":"Multi-Stream LLMs: Unblocking Language Models with Parallel Streams of Thoughts, Inputs and Outputs","created":"2026-05-12","cited_by_count":3,"area":"lr"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2605.15257","title":"Training on Documents About Monitoring Leads to CoT Obfuscation","created":"2026-05-14","cited_by_count":3,"area":"lr"},{"id":"2605.16198","title":"Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systems","created":"2026-05-15","cited_by_count":3,"area":null},{"id":"2605.23055","title":"Decomposing and Measuring Evaluation Awareness","created":"2026-05-21","cited_by_count":3,"area":null}],"next_cursor":"100"}