{"total":23,"rows":[{"id":"2602.22302","title":"Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agents","created":"2026-02-25","cited_by_count":19,"area":"agents"},{"id":"2603.25111","title":"SEVerA: Verified Synthesis of Self-Evolving Agents","created":"2026-03-26","cited_by_count":8,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2605.03034","title":"Stable Agentic Control: Tool-Mediated LLM Architecture for Autonomous Cyber Defense","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2607.28815","title":"Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer","created":"2026-07-30","cited_by_count":3,"area":"agents"},{"id":"2608.14590","title":"Toward Safe LLM Agents: A Survey of Specification, Verification, and Enforcement","created":"2026-06-22","cited_by_count":2,"area":"agents"},{"id":"2605.00081","title":"Alignment Contracts for Agentic Security Systems","created":"2026-04-30","cited_by_count":1,"area":"agents"},{"id":"2605.18672","title":"Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2605.20923","title":"Causal Past Logic for Runtime Verification of Distributed LLM Agent Workflows","created":"2026-05-20","cited_by_count":1,"area":"agents"},{"id":"2607.19356","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2607.25400","title":"COVENANT: Natural-Language Workflow Compilation for Aligned Agent Execution","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.01558","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2604.17025","title":"Harness as an Asset: Enforcing Determinism via the Convergent AI Agent Framework (CAAF)","created":"2026-04-18","cited_by_count":0,"area":"agents"},{"id":"2607.19433","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2608.01388","title":"Why Formal Monitors Fail: Attack Distribution Entropy as a Coverage Bound for LTL-Based LLM Agent Safety","created":"2026-08-02","cited_by_count":0,"area":"agents"},{"id":"2608.03609","title":"Formal Verification of Agentic Systems over Operational Data","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.08282","title":"Stateful CARS: Exact Cross-History Reuse for Policy-Constrained LLM Agents","created":"2026-08-08","cited_by_count":0,"area":"agents"},{"id":"2608.11392","title":"AI Guardrail Survival under Single-Cycle Agentic Self-Summarization","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.21341","title":"Natural-Language Workflows Are Not Software Yet: Artifact-Driven Compilation for Reliable Agent Execution","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2610.17039","title":"MENTOR: Procedural Shielding of Tool-Using LLM Agents","created":"2026-10-12","cited_by_count":0,"area":"agents"},{"id":"2610.18206","title":"SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}