Another 213papers do not have category tags yet and are not included in filtered results.
Proposing SWE-Critix, a post-trained general verifier for evaluating coding agent trajectories
Proposes the Cancerous backdoor, which progressively corrupts reasoning using invisible stage tokens.
Cancerous Backdoor Attack changes LLM backdoors from one-time activation to multi-stage reasoning corruption that accumulates progressively with triggers.
Proposes PASAC and a five-layer boundary guarantee stack, turning agent evaluation overstepping into verifiable whole-system guarantees.
Using FIBS to train white-box probes to monitor agent sabotage behavior and undisclosed deception
Uses premise permutation and hidden-layer tracing to audit whether legal chain-of-thought truly relies on the cited legal provisions.
This study conducts an empirical audit of the causal truthfulness of legal citations in chain-of-thought reasoning of large language models in the legal domain.
Proposing an option channel attack that renames option labels so that agent guardrails allow prohibited operations
AbstractThe authors' evaluation indicates that typed models should not serve as final safety arbiters; they are susceptible to off-policy text and option name manipulation, and confidence filtering cannot resist attacks.
Auditing LLM judge reliability and defining trustworthy verdict rate and accuracy upper bound
The authors audit whether LLM-as-a-Judge decisions can still be treated as actionable ground truth under repeated queries, swapped candidate order, and changed prompt formats.
Proposes LGWM, using an action-conditioned world model to verify GUI agent screen transitions.
提出义务识别基准 ObligationBench，并训练护栏识别 Agent 未履行的安全义务
作者认为编码智能体的安全不能只靠拦截禁止动作，还要找出终止时仍未做的安全关键动作，并将其称为义务。
度量关闭思考指令下终答前是否仍有可见显式推理
作者把 no-thinking 定义为可测量的回答行为，而不是从思考开关、特殊标记或输出长度推断。
测量 LLM 版本更替对科学摘要 AI 改写检测器的影响
作者量化的是：科学摘要的 AI 改写筛查，在 LLM 版本不断更换、而人类摘要误标必须少见时，会怎样变。问题来自期刊和会议已经按分数阈值筛查投稿，但基准多停在评估时可得的版本上。
演化可检查评分器并与自改进 Agent 共同演化，抑制奖励作弊
开放任务没有验证器时，被演化的是评分器，而不是再补一条手写 rubric。
提出 RL-ARC，用推理置信度在强化学习中校准推理模型
RL-ARC 是校准感知的强化学习框架，用推理过程的口头置信度调节答案置信度。
提出包络采样，用少量真值标注重标定 LLM 评委以缓解奖励作弊
作者研究后训练前如何选择真值标注的查询分布，使重标定后的廉价代理更适合被优化。真奖励昂贵时，实践用 LLM judge 代替人类。若失准只发生在基座很少生成的输出上，on-policy 标注修不到这些点，随后的 KL 正则优化会把质量集中到被高估的输出。
构建 EpiReal-Bench，评测图像生成器将虚假主张渲染为可信证据
EpiReal-Bench 用来量商用图像生成器会不会把虚假现实主张画成可信视觉证据。
构建统一奖励作弊检测基准 RH-Detect 并评测零样本检测器
提出 BRANCH 方法，用分支搜索绕过多扫描器护栏
检验推理 token 数能否区分被提示的诚实与不诚实作答
三个推理模型在被提示的回答政策下出现组水平推理 token 差异。作者把它当作不读思维链内容的 black-box 候选信号，而不是自发欺骗检测器。
提出流匹配逆向框架，从多向量视觉文档索引重构页面
提出 MFOTL 离线时序验证以监控工具 Agent 的危险动作链
这篇论文对工具调用大语言模型智能体的安全监控进行了形式化时序验证研究。