{"total":20,"rows":[{"id":"2604.14228","title":"Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems","created":"2026-04-14","cited_by_count":38,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2604.04522","title":"HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems","created":"2026-04-06","cited_by_count":6,"area":"agents"},{"id":"2605.30169","title":"Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2605.17169","title":"Responsible Agentic AI Requires Explicit Provenance","created":"2026-05-16","cited_by_count":3,"area":"agents"},{"id":"2603.28428","title":"Synergy: A Next-Generation General-Purpose Agent for Open Agentic Web","created":"2026-03-30","cited_by_count":2,"area":"agents"},{"id":"2606.06460","title":"Will the Agent Recuse, and Will It Stop? Measuring LLM-Agent Compliance with In-Band Governance Signals at the Access Door and Mid-Flight","created":"2026-06-04","cited_by_count":2,"area":"agents"},{"id":"2606.16710","title":"Misinformation Propagation in Benign Multi-Agent Systems","created":"2026-06-15","cited_by_count":2,"area":"agents"},{"id":"2608.08775","title":"OmnilingualGAIA2: Evaluating the Multilingual Gap in Frontier AI Agents","created":"2026-08-09","cited_by_count":2,"area":"agents"},{"id":"2608.17195","title":"Graphectory Viewer: A Tool for Process-Centric Analysis of Agentic Software Trajectories","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2603.14417","title":"Questionnaire Responses Do not Capture the Safety of AI Agents","created":"2026-03-15","cited_by_count":0,"area":"agents"},{"id":"2606.10711","title":"The Agentic Web Requires New Normative Infrastructure","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.28666","title":"Why Trust Your Agent? Empirical Security Gains from TRiSM-Guided Agentic Workflows in Healthcare","created":"2026-06-27","cited_by_count":0,"area":"agents"},{"id":"2607.17225","title":"Specifying the Delegated-Autonomy Boundary: Requirements Engineering for Agentic AI","created":"2026-07-19","cited_by_count":0,"area":"agents"},{"id":"2607.25890","title":"Distributing Security Controls Through Harness Engineering","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.05692","title":"Regret Dominates Surprise: Design-Time Requirements Engineering for Agentic-AI Safety","created":"2026-09-04","cited_by_count":0,"area":"agents"},{"id":"2609.13334","title":"The Agentic Company OS: Substrate Inversion for Sustained Enterprise Agent Deployment","created":"2026-09-11","cited_by_count":0,"area":"agents"},{"id":"2609.33676","title":"Auditing Agent Actions through Query-Conditioned Attribution","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.18457","title":"Kairos: Transactional Security Enforcement at the System Boundary for LLM Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}