{"total":34,"rows":[{"id":"2605.18747","title":"Code as Agent Harness","created":"2026-05-18","cited_by_count":47,"area":"agents"},{"id":"2602.22302","title":"Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agents","created":"2026-02-25","cited_by_count":19,"area":"agents"},{"id":"2605.13716","title":"SkillOps: Managing LLM Agent Skill Libraries as Self-Maintaining Software Ecosystems","created":"2026-05-13","cited_by_count":18,"area":"agents"},{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2606.23416","title":"Detecting Malicious Agent Skills in the Wild using Attention","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2603.28166","title":"Evaluating Privilege Usage of Agents with Real-World Tools","created":"2026-03-30","cited_by_count":4,"area":"agents"},{"id":"2604.25562","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","created":"2026-04-28","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2603.04469","title":"Cross-Layer Semantic Flow Reconstruction for Attack Detection in Agentic Systems","created":"2026-03-04","cited_by_count":3,"area":"agents"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2607.28815","title":"Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer","created":"2026-07-30","cited_by_count":3,"area":"agents"},{"id":"2603.02345","title":"RIVA: Leveraging LLM Agents for Reliable Configuration Drift Detection","created":"2026-03-02","cited_by_count":2,"area":"agents"},{"id":"2604.01483","title":"Type-Checked Compliance: Deterministic Guardrails for Agentic Financial Systems Using Lean 4 Theorem Proving","created":"2026-04-01","cited_by_count":2,"area":"agents"},{"id":"2608.14590","title":"Toward Safe LLM Agents: A Survey of Specification, Verification, and Enforcement","created":"2026-06-22","cited_by_count":2,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.09045","title":"Containment Verification: AI Safety Guarantees Independent of Alignment","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2605.18672","title":"Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2606.06523","title":"Lean4Agent: Formal Modeling and Verification for Agent Workflow and Trajectory","created":"2026-06-02","cited_by_count":1,"area":"agents"},{"id":"2607.19356","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2608.01558","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2609.04629","title":"SiLR: Structure-Preserving Admission and Process Reward for LLM Tool Agents","created":"2026-09-04","cited_by_count":1,"area":"agents"},{"id":"2609.24446","title":"ActGov: Governing LLM Agent Actions via Policy-Constrained Validation","created":"2026-09-21","cited_by_count":1,"area":"agents"},{"id":"2603.10163","title":"Compatibility at a Cost: Systematic Discovery and Exploitation of MCP Clause-Compliance Vulnerabilities","created":"2026-03-10","cited_by_count":0,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.20597","title":"Testing and Evaluation of Agentic AI Systems In Military Command and Control","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2609.18128","title":"Symbolic Temporal Supervision of LLM Agents Using Contracts","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.19391","title":"MAGS: Multi-agent Auto-formalization Guarantees Safety for Agentic Outputs","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2610.11030","title":"NOMOS: Compiling Written Policies into Statically Verified Tool-Call Gates for LLM Agents","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}