{"total":21,"rows":[{"id":"2604.02022","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","created":"2026-04-02","cited_by_count":36,"area":"agents"},{"id":"2602.22302","title":"Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agents","created":"2026-02-25","cited_by_count":19,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2512.21220","title":"RoboSafe: Safeguarding Embodied Agents via Executable Safety Logic","created":"2025-12-24","cited_by_count":14,"area":"agents"},{"id":"2606.28061","title":"ToolPrivacyBench: Benchmarking Purpose-Bound Privacy in Tool-Using LLM Agents","created":"2026-06-26","cited_by_count":7,"area":"agents"},{"id":"2602.01129","title":"SMCP: Secure Model Context Protocol","created":"2026-02-01","cited_by_count":5,"area":"agents"},{"id":"2603.20260","title":"ProMAS: Proactive Error Forecasting for Multi-Agent Systems Using Markov Transition Dynamics","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2604.24579","title":"Measuring the Unmeasurable: Markov Chain Reliability for LLM Agents","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2606.04296","title":"The Saturation Trap and the Subjectivity of Intervention Timing: Why Affect-Based Triggers and LLM Judges Fail to Time Interventions on Autonomous Agents","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2608.21027","title":"Don't Solve, Just Compare: Tiny Advisors for Runtime Intervention in LLM Agents","created":"2026-08-21","cited_by_count":2,"area":"agents"},{"id":"2608.24570","title":"EviDx: Evidence-Aware Active Diagnosis with Scaffolded LLM Agents","created":"2026-08-25","cited_by_count":2,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2609.00015","title":"OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleets","created":"2026-08-14","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2603.27905","title":"ATLAS-RTC: Closing the Loop on LLM Agent Output with Token-Level Runtime Control","created":"2026-03-29","cited_by_count":0,"area":"agents"},{"id":"2608.03609","title":"Formal Verification of Agentic Systems over Operational Data","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2609.18128","title":"Symbolic Temporal Supervision of LLM Agents Using Contracts","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.33401","title":"Evaluating System One Models for Agent Security Decisions: Reliability, Calibration, and Selective Automation","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.11773","title":"Safe Actions Alone Do Not Ensure Safe Agents: Identifying Unfulfilled Obligations with Guard Models","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.19818","title":"One Monitor Does Not Fit All: Formalism-Agnostic Runtime Verification for Agentic AI","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}